Skip to content
Irregularpedia Logo Irregularpedia

Incident Response — Servicemember (Junior Enlisted, NCO, or Officer)

You are two weeks at your first duty station. You just signed something you should not have signed, and someone is impersonating you to your mother. This page is written for that exact moment. The two incidents are independent — handle both in parallel.

You are not in trouble. Being targeted by predatory lenders and scammers is not a UCMJ violation. The scammers count on you being too embarrassed or confused to use the free resources sitting on your installation. Use them.

Predatory loan / parking-lot car loan / payday lender

Section titled “Predatory loan / parking-lot car loan / payday lender”

You almost certainly signed something that violates federal law. Here is why.

The Military Lending Act (MLA) caps the Military Annual Percentage Rate (MAPR) at 36% on most consumer credit extended to active-duty servicemembers and their dependents. The MAPR is not the same as the nominal APR printed on the contract — it includes most fees, credit insurance premiums, and ancillary product charges rolled into the loan. A nominal 28% APR plus a documentation fee, a GAP insurance bundle, a service contract, and dealer add-ons almost always pushes the true MAPR well above 36%.

The Servicemembers Civil Relief Act (SCRA) is a separate, broader law that provides additional protections: a 6% interest cap on debts incurred before you entered active service, lease termination rights for PCS or deployment, protection against default judgments, foreclosure protection, and more.

SCRA-waiver clauses in a contract are frequently unenforceable. SCRA waivers must meet strict statutory requirements — they must be in writing, executed during or after the period of military service to which the waiver applies, and in at least 12-point type, separate from the rest of the contract. A blanket “I waive my SCRA rights” buried in a parking-lot finance contract you signed under sales pressure is exactly the kind of waiver courts have repeatedly thrown out.

Possible outcomes you should know about:

  • An MLA violation can render the contract void from inception, meaning the lender cannot collect on it.
  • MLA violations also trigger statutory damages — actual damages plus, in many cases, $500 minimum per violation, plus attorney fees.
  • SCRA violations carry similar civil remedies, plus potential criminal penalties for willful violations.
  • In practice, once JAG sends a letter on letterhead, many dealers settle quickly rather than litigate against a federal protection statute.

Do not return to the dealer alone, do not sign anything else they put in front of you, and do not let them call you back into the office to “fix it.” Anything they want you to sign should be reviewed by JAG first.

Imposter account scammed your family

Section titled “Imposter account scammed your family”

Someone created a fake Facebook account using your basic training photo and convinced your mother that you needed $400 urgently. She sent it via Cash App. This is a high-volume scam pattern aimed specifically at new soldiers because your photos in uniform are publicly visible and your family is conditioned to worry.

Report the imposter account. Go to facebook.com/help/contact and use the impersonation report flow. Facebook requires identity verification to remove the imposter — you may need to submit a photo of your military ID or driver’s license to prove you are the person being impersonated. You can black out everything on the ID except your face and your name; do not send your full DOD ID number or barcode.

Set the family rule today. Call your mother, your father, your siblings, anyone who would send you money. Tell them: “From now on, no one sends money to me or anyone claiming to be me without first calling my known phone number and hearing my voice.” Establish a family safe word — a single non-obvious phrase you would use to authenticate yourself if you actually were in trouble. Do not pick a pet name or a hometown. Pick something a scammer cannot guess from your social media.

Lock down your real Facebook. Set posts to friends-only. Hide your friends list (this is how scammers pick their next victim — they look at who your family members are). Hide your phone number and email from the public profile. Remove or restrict your basic training graduation photos if they are still public.

Reverse-image search the basic training photo. Use Google Images or TinEye. Scammers rarely run only one imposter account — your photo is probably running on three to ten fake profiles already. Report each one.

Set up DS Logon now — dsLogon.dmdc.osd.mil. This is your DOD self-service identity. If you do not claim it, someone with your SSN and basic information could. DS Logon is required for myPay, milConnect, the VA, TRICARE Online, and many other DOD portals. Set it up before someone sets it up for you.

Set up myPay — mypay.dfas.mil. Strong password, enable MFA, audit the bank account on file for direct deposit. Pay-redirect fraud — where someone changes your direct deposit account so your paycheck goes to them — is a documented pattern. Lock it down before you have a full paycheck cycle.

Cash App reversal. Cash App itself almost never reverses a completed payment. The viable path is through your mother’s bank — she should call her bank’s fraud line immediately and request a chargeback or dispute the transaction as unauthorized or fraudulently induced. Speed matters. If her bank is Navy Federal, USAA, or any military-friendly bank, mention that the fraud impersonated an active-duty servicemember — they have specific procedures for this.

Report the fraud:

  • Army CID — impersonation of a servicemember plus financial fraud against a military family. CID hotline 1-844-276-9243.
  • FBI IC3 — ic3.gov. The IC3 form aggregates internet crime complaints across federal agencies.
  • FTC — ReportFraud.ftc.gov. Generates a report you can use for identity theft remediation.

DFAS / myPay self-defense

Section titled “DFAS / myPay self-defense”

You have a paycheck now. Treat it like the target it is.

  • Activate DS Logon at dsLogon.dmdc.osd.mil within the next 48 hours. Claim your DOD identity before anyone else does.
  • Enable MFA on myPay at mypay.dfas.mil. Use the authenticator app option, not SMS.
  • Set DFAS email alerts so any change to your pay account — address change, direct deposit change, allotment change, tax withholding change — pings your email immediately. Read every alert. A pay-redirect attack shows up here first.
  • Verify direct-deposit account ownership. The account on file should be yours, in your name, at a bank you can walk into.
  • Set a transaction alert with your bank — every deposit and withdrawal over a small threshold pings your phone. Banks like Navy Federal and USAA make this trivial to configure.
  • TSP — tsp.gov. Enable MFA. Set a beneficiary. Even if you are not contributing yet, the account exists once you have a pay record. Lock it.
  • Credit freeze with all three bureaus — Equifax, Experian, TransUnion. Free, takes 10 minutes. You can temporarily unfreeze for legitimate credit checks (new car loan through a real lender, apartment lease) and refreeze afterward. This blocks anyone from opening new credit in your name.

Free military-specific resources every soldier should know

Section titled “Free military-specific resources every soldier should know”

These exist because the DOD knows young servicemembers are targeted. None of them cost money. None of them go in your record unless you are actively being treated for something medical.

JAG Legal Assistance Office — free legal help with contracts, powers of attorney, wills, family law issues, landlord-tenant problems, SCRA and MLA enforcement, consumer protection issues, basic civil cases. They will not represent you in criminal court but they will tell you what to do. Every installation has one. Find yours through your installation directory or by asking your platoon sergeant.

ACS Financial Readiness Program (Army Community Service) — free financial counseling, debt-payoff planning, budget building, credit report review, car-buying guidance, deployment financial planning. Branch equivalents listed at the top of this page. They take no commissions and they will not try to sell you anything.

Military Family Life Counselor (MFLC) — free, confidential, non-medical short-term counseling. Available at every installation. Does not generate a medical record. Good for stress, adjustment issues, family conflict, relationship issues.

Chaplain — free, confidential. Chaplain confidentiality under UCMJ is broader than MFLC confidentiality and broader than most civilian therapist confidentiality. Religious or secular conversation, your choice. You do not have to share the chaplain’s faith.

Military OneSource — 1-800-342-9647 — 24/7, off-installation, anonymous, all branches and dependents. Free counseling sessions, financial counseling, tax help, deployment support, relocation help. They will connect you to local resources.

Army Emergency Relief (AER) — emergency interest-free loans or grants for soldiers facing financial crisis (broken vehicle, family emergency travel, basic living expenses after pay problems). Apply through ACS. Branch equivalents: Navy-Marine Corps Relief Society, Air Force Aid Society, Coast Guard Mutual Assistance.

Military Crisis Line — 988, then press 1, or text 838255, or chat at veteranscrisisline.net. 24/7 confidential support for any servicemember, veteran, or family member in emotional distress.

How to translate civilian-IR terms to where you actually report in the military

Section titled “How to translate civilian-IR terms to where you actually report in the military”
If you’d normally call…In the military, that means…
“the cyber security team”Your unit S6 (signal/IT) plus S2 (intel/security); battalion-level cybersecurity manager
”police report” on-installationMilitary Police (MP) — they route to CID for serious cases
”police report” off-installationLocal PD plus Army CID (or service equivalent — NCIS/AFOSI/CGIS)
“a lawyer”JAG Legal Assistance Office — free
”a financial advisor”ACS Financial Readiness Program — free, no commissions. NOT a parking-lot “advisor” outside the gate
”a counselor / therapist”MFLC (free, non-medical, no record) or Behavioral Health (medical, on your record)
“a chaplain”Unit chaplain — broader confidentiality than MFLC; UCMJ-protected
”the Inspector General”Service-branch IG — for command misconduct, retaliation, fraud-waste-abuse against you within your unit
”the FBI”Your service’s CID equivalent (Army CID, NCIS, AFOSI, CGIS) — they coordinate with FBI on cases that cross jurisdictions

When in doubt, call Military OneSource at 1-800-342-9647 and ask them to point you at the right office on your installation. That is what the number is for.

Imposter scam patterns aimed at fresh soldiers

Section titled “Imposter scam patterns aimed at fresh soldiers”

These are the patterns. Recognizing them is most of the defense.

  • Parking-lot and strip-mall “financial advisors” clustered immediately outside the gates of every Army post and most other installations. They are not advisors. They sell predatory installment loans, life insurance with massive commissions, and car contracts you cannot afford. They exist specifically because young soldiers with their first paycheck walk by.
  • Imposter social-media accounts impersonating you to your family — this is Carter’s case. Photos in uniform are the bait. Family is the target.
  • “Military discount” real estate, mortgage, and car-buying scams — fake VA loan programs, fake “guaranteed approval for servicemembers” pitches, fake military relocation services. Real VA loans go through VA-approved lenders; ACS will tell you who is real.
  • Romance and catfish scams — you may be the victim (someone overseas with a sob story asking for money) or your photos may be the bait (someone using your basic-training photo to scam women on dating apps).
  • Off-installation rental scams — listings with stolen photos, “send me first and last month’s deposit by Zelle and I’ll send you the keys,” landlords who refuse to meet in person. Always view the property and verify ownership through county records.
  • GoFundMe and “fallen soldier” / “wounded warrior” fraud — you forward a touching story; the donations go to a scammer. Verify through known organizations (Wounded Warrior Project, Folds of Honor, Tunnel to Towers) before sharing.
  • Phishing emails impersonating S1, DFAS, finance, or HR — “Your LES is ready,” “Your orders have been updated,” “Your awards packet requires action.” Never click. Go directly to myPay or AKO/the relevant portal.
  • Cryptocurrency “investment” pitches from people in your unit (or claiming to be) — these are almost always MLM or pump-and-dump schemes. Soldiers recruit other soldiers because the trust is built in. Walk away.

If you fell for it — UCMJ angle

Section titled “If you fell for it — UCMJ angle”

Being scammed is not a UCMJ violation. Do not avoid reporting because you think you will get in trouble. You will not. Commanders, JAG, CID, and ACS all routinely handle these cases and treat the soldier as a victim. The thing that gets soldiers in trouble is hiding the problem until it metastasizes — missed payments leading to security clearance issues, hidden debt leading to financial irresponsibility findings, untreated stress leading to misconduct.

Being scammed into giving up classified information, OPSEC, or PII of other soldiers IS reportable and the correct move is to report it immediately to your S2, your security manager, and your chain of command. Honest, prompt self-reporting is by far the strongest factor protecting your career and clearance. Trying to cover it up is what ends careers. If you hold a security clearance, also read /cybersecurity/incident-response/clearance-holder.

Being scammed into purchasing prohibited items (illegal drugs, certain weapons, items that violate general orders in your area) is a harder situation that depends on your branch, your installation’s general orders, and the specifics. Talk to your unit chaplain first — chaplain confidentiality is the broadest protection available — before deciding how to proceed. The chaplain can help you think through whether and how to self-report to your command or to a JAG defense counsel.

Reporting

Section titled “Reporting”
ScenarioFirst callSecondaryLegal / regulatory
Predatory loan / MLA violationJAG Legal Assistance (free)ACS Financial ReadinessCFPB Servicemembers’ Office; state AG; Army CID if outright fraud
Identity theft / imposter account / pay fraudArmy CID 1-844-276-9243 (or branch CI)FBI IC3; FTCDS Logon lockdown; 3-bureau credit freeze
Money taken from a family memberTheir bank fraud lineFBI IC3; FTCArmy CID if servicemember-targeted
On-installation crimeMilitary PoliceArmy CID—
Off-installation crimeLocal police + Army CIDFBI IC3—
Mental health crisisMilitary Crisis Line 988 + press 1 (or text 838255)MFLC; Chaplain—
Suspected foreign-intelligence contactLocal CI element / Army CI 1-800-CALL-SPYDCSASAEDA / SEAD-4
Sexual harassment / assaultSHARP / SAPR (24/7); MCIO (CID equivalent)Chaplain (confidential); Military OneSourceDOD SAFE Helpline 1-877-995-5247

Pivot to

Section titled “Pivot to”