All Posts

A verified malware campaign uses fake GitHub software pages to impersonate trusted brands and expose users to password- and data-stealing malware.

A new phishing campaign impersonates ChatGPT billing notices and can route victims through a legitimate Google redirect before landing on a fake OpenAI login page designed to steal credentials.

Report Date: September 19, 2026 Scam Type: Government and law-enforcement impersonation fraud Source Classification: Official Government Warning What Happened The FBI's Internet Crime Complaint Center (IC3) issued an updated public warning on September 17, 2026 about widespread scams in which criminals impersonate U.S. or foreign law-enforcement and government officials. Between January 2025 and July 2026, IC3 received nearly 61,000 complaints involving law-enforcement or gov

The IRS warns that promoters are selling nonexistent ‘Tribal Tax Credits’ that can leave taxpayers out the purchase price and facing taxes, penalties and interest.

North Carolina’s Attorney General warns that scammers are using details from domestic-violence court cases to impersonate police and court officials and demand money from survivors.

The FTC warns that scammers are impersonating farm-equipment businesses, using fake tractor listings, invoices and wire-transfer demands to steal thousands from farmers.

Microsoft detected more than one million AI-assisted executive-impersonation scam emails using fake invoices and fabricated email threads to push fraudulent ACH payments.

Revolut says scammers used a legitimate government-agency email domain to submit fraudulent data requests, exposing sensitive customer information and creating follow-on identity-theft and phishing risk.

Report date: September 12, 2026 Scam type: Supply-chain phishing / cryptocurrency wallet recovery-seed theft Source classification: Verified Emerging Scam Alert What happened A large phishing campaign reached cryptocurrency users after attackers compromised accounts at Brevo, a third-party email marketing provider. Trezor says a fraudulent security alert was sent through its legitimate newsletter account to roughly 347,000 subscribers. Because the message was sent through rea

A newly documented fake-shopping network called DoppelCart uses roughly 119,000 fraudulent store domains to steal card details and even one-time bank confirmation codes.

SSA OIG warns that prize scammers are convincing victims to redirect Social Security direct deposits, potentially cutting off benefits and exposing banking information.

Scammers are exploiting confusion around 2026 federal student-loan repayment changes to demand fees, steal Federal Student Aid credentials, and make false promises of fast forgiveness.

A sudden flood of legitimate-looking subscription emails can be a smokescreen designed to bury real bank fraud alerts, purchase notices, and account-security warnings.

West Virginia's Attorney General is warning about newly reported government-impersonation calls offering subsidies and video-call sweepstakes scams that can use spoofed numbers and familiar apps to appear legitimate.

The FTC warns scammers are cloning legitimate car dealership websites—sometimes using AI—to steal upfront vehicle payments. Here's how to verify the dealer, vehicle and payment instructions before sending money.

The FTC warns that scammers are covering legitimate parking-meter QR codes with fraudulent codes that can lead drivers to fake payment sites designed to steal money or personal information.

Verified Emerging Scam Alert: Tech-support scammers are increasingly using calendar invites, payment alerts, sponsored search results and trusted-platform listings to lure consumers into calling fake support.

The FBI warns that OAuth consent phishing can trick victims into granting a malicious app persistent access to email, files, and other account data — even without stealing a password.

Deceptive Facebook and Instagram ads are luring users into downloading malicious Android apps capable of stealing banking credentials and draining accounts.

Verified Emerging Scam Alert: AnonyMousKIT uses fake Apple messages, phishing pages and AI voice calls to steal iPhone passcodes, Apple Account credentials and two-factor authentication codes from owners of stolen devices.