What is pretexting, and why is it a federal crime?

Pretexting is the polite industry word for lying to get information. In practice it means calling a bank claiming to be the account holder, contacting an employer under a false identity to confirm a salary, or posing as a utility company to extract an address. It used to be commonplace in the investigation industry. It is now a route to federal charges and it is the clearest single line separating licensed practitioners from people who will get their clients into trouble.

What exactly does the law prohibit?

The Gramm-Leach-Bliley Act, at 15 U.S.C. § 6821, makes it unlawful to obtain or attempt to obtain customer information of a financial institution by making false statements to the institution, to a customer, or by using forged or counterfeit documents. Note that it reaches attempts as well as successes, and it reaches the person who requests another to do it, which is what puts a directing client at risk alongside the investigator.

Beyond GLBA, obtaining telephone records by fraud is separately prohibited by federal law, health information is protected under its own framework, and depending on the method and target a pretexter may also face state fraud, impersonation and computer-access charges.

Why does this come up so often in private investigation?

Because it is precisely what clients most want. The single most common request investigators receive is some version of 'find his bank accounts', and pretexting is the only way anyone ever delivered that. When a client is told no, a competing firm that says yes sounds impressive. It is worth understanding what saying yes actually means: either they intend to commit a federal offense using your name and your money, or they intend to take the fee and fail.

What happens to a case built on pretexted information?

• The information is generally inadmissible, and its origin is discoverable
• It can taint otherwise lawful evidence developed from it
• It exposes the client to civil liability and potentially to criminal referral
• It converts the litigation from being about the other party's conduct to being about yours
• It gives the opposing side a far more compelling narrative than whatever you found

What can be done lawfully instead?

A great deal, and it covers most legitimate objectives. Real property ownership, business interests and entity control, vehicles and vessels where records permit, UCC filings, liens, judgments, litigation history, professional licensing, and address history are all obtainable through lawful public-record research. For genuinely protected records, the route is lawful process issued by your attorney in a pending matter — a subpoena reaches bank records that no investigator could lawfully request.

The practical sequence is therefore: establish through lawful research what exists and where, then let counsel compel production of the protected parts. That path is slower than a phone call and it produces evidence that survives.

Is social engineering ever legitimate?

In one narrow and fully authorized context: a physical penetration test or social engineering assessment that a business has commissioned in writing to test its own defences. There, the organization being tested has consented, the scope is defined in an engagement letter, and no third party's protected records are obtained. That is a controlled security assessment, not pretexting for information, and the written authorization is what makes the difference.