Our cybersecurity team has identified a sophisticated multi-vector scam campaign utilizing 20 interconnected entities to target consumers across employment, healthcare, and financial services sectors. The campaign operates through 11 phone numbers including 833-267-3191, 888-683-5317, 307-218-7584, and 414-437-9490, which analysis shows are connected through same-campaign relationships with 70% confidence scores. These numbers work in coordination with four domains, most notably sprinterhealth.us and www.sprinterhealth.com, along with www.careers-page.com and jotform.com to create an appearance of legitimacy across multiple business verticals.
The scammers are impersonating legitimate companies to deceive consumers, with particular focus on mortgage and financial services firms. The campaign has co-opted the identities of Ready Capital Corporation (66 CFPB complaints), Direct, Inc (5 CFPB complaints), TITLE FINANCIAL CORPORATION (3 CFPB complaints), Block, Inc. (64,117 CFPB complaints), and Medical Services Inc (4 CFPB complaints). These companies are connected through reported-together relationships, suggesting the scammers are systematically impersonating multiple legitimate businesses within the same fraudulent contacts. Community reports specifically identify job offer scams using the Sprinter Health brand, with incidents occurring between December 17-22, 2025, and fake medical scheduler positions posted on job sites like Virtual Vocations.
Consumer impact appears significant based on community reports describing persistent harassment campaigns. Victims report receiving repeated calls from "digital activation departments" using auto-dialers that cycle through different phone numbers to evade blocking attempts. The scammers are targeting job seekers with fake remote positions in medical scheduling and other healthcare roles, using professional-appearing websites and forms hosted on platforms like jotform.com to collect personal information. The coordination between phone numbers, domains, and impersonated companies suggests consumers are being approached through multiple channels simultaneously, increasing the likelihood of successful deception.
To protect yourself from this campaign, verify any job offers or business contacts independently by looking up official company information through legitimate sources rather than contact details provided by the caller or in suspicious emails. If contacted by any of the identified phone numbers or directed to the suspicious domains, hang up immediately, do not click any links, and do not provide personal information. Report these incidents to the FTC at reportfraud.ftc.gov or file complaints with the FCC. Before responding to any unsolicited contact, use reverse lookup services to check if phone numbers or domains have been reported as fraudulent, and verify company legitimacy through official business registrations and Better Business Bureau listings.
This campaign represents a moderate to high threat level due to its multi-vector approach, persistent contact methods, and sophisticated impersonation of legitimate businesses across multiple industries. The lack of current FTC complaints against the phone numbers suggests this may be an emerging or recently launched campaign. Consumers should remain vigilant for contacts from any entities in this cluster, and regulatory agencies should monitor for escalating complaint volumes. Organizations whose identities are being impersonated should be notified to issue consumer warnings and potentially pursue legal action against the perpetrators.