Scam radar
The continuous press review of online scams: new alerts, data and patterns updated every day from official sources (FBI, Europol, NCSC, Postal Police, FTC...). The same sources used by banks, insurers and law enforcement.
Data breach notifications are flooding inboxes and mailboxes, with over 471 million victim notices sent in the first half of 2026 alone, yet only 24% reveal the attack vector....
Email bombing (also called form, list, or subscription bombing) is a fraud tactic where attackers flood your inbox with hundreds of sign-up confirmation emails from legitimate...
...
Job seekers using AI to send mass applications (the "spray and pray" approach) may struggle to tell real recruiter replies from scam messages, because they no longer remember...
The CSIRT Italia has documented a consent phishing campaign targeting Microsoft 365 users and administrators. The criminals register a malicious app in Microsoft Entra ID and,...
Cos'è la truffa Durante l'Open Enrollment di Medicare (15 ottobre - 7 dicembre) i truffatori sfruttano il periodo per fingersi assicuratori o agenti sanitari e sottrarre dati...
Job seekers are being targeted by fake Calendly booking pages that impersonate Meta (Facebook) recruiters. The pages copy a real Calendly scheduling flow, then push victims...
The FTC has filed a complaint against Digital Forensics Corporation, accusing it and owner Dmitry Belkin of collecting at least $60 million from sextortion victims by selling fake...
A dark web marketplace called Nexus is selling digital scans of more than 153 million US and Canadian drivers licenses, reportedly siphoned from a major identity verification...
The FBI warns that scammers are exploiting the 2026 U.S. Midterm Election through several fraud schemes. Scammers impersonate candidates, campaigns, and government entities using...
...
A text that contains only your name and a question mark is a deliberate hook used by scammers who buy breached contact lists. The goal is to make you reply "Who is this?" or...
The FBI has issued an updated advisory warning that North Korean state-sponsored "IT Workers" (ITWs) are increasingly recruiting Americans as witting or unwitting facilitators to...
Phishing emails are evolving. Attackers embed hidden prompt-injection instructions aimed at AI assistants that summarize or triage your inbox. The visible message may look...
Ledger has confirmed that hardware wallets distributed through Malaysia-based reseller CryptoBilis were shipped with a hidden spy implant that captures the screen output and...
AI "vibe coding" tools let anyone ship an app in a weekend, but speed often comes at the cost of security. Researchers have found critical flaws in popular AI-generated apps,...
Hackers are running sponsored Google ads that display the trusted bing.com domain as the destination, exploiting Bing's click-tracking endpoint to redirect victims through a...
A new phishing campaign is targeting YouTubers and content creators with fake sponsorship offers from well-known brands such as Hollyland. The scam begins with a personalized...
Domino's Pizza customers have been notified that their accounts were accessed by criminals using email/password combinations stolen in unrelated breaches and reused on the...
What happened A Ukrainian-Russian dual citizen pleaded guilty in a U.S. court to running Your Mule Cashout (YMCO) , a money-laundering network active since 2007 that recruited...
AI-powered phishing kit BlueKit lets criminals hijack accounts in minutes Researchers at Malwarebytes uncovered BlueKit , a phishing-as-a-service (PhaaS) toolkit sold on...
Parents and guardians are increasingly discovering that explicit images, including AI-generated deepfakes, of their children have been shared online without consent. Possessing or...
A US CEO running a ransomware remediation firm has been criminally charged with allegedly defrauding victims: prosecutors say he secretly paid the attackers for decryption keys,...
Scammers are sending iMessage texts that include a fake Facebook Marketplace listing showing the recipient's own name as the seller. The personalized screenshot acts as a...
A phishing campaign is using fake versions of ChatGPT, Gemini, Claude, and Perplexity to trick users, especially ad account managers and agency staff, into handing over login...
Phishing attackers are abusing legitimate Remote Monitoring and Management (RMM) tools like ScreenConnect, AnyDesk, and TeamViewer to gain remote control of victims' computers. A...
Cybercriminals are targeting Free Mobile customers in France with sophisticated phishing emails sent after the operator's October 2024 data breach. Messages copy the official...
Scammers have set up roughly 70 lookalike websites that impersonate real crypto projects such as xStocks (Kraken), Zama, Kinetiq, Pendle, Firelight, Yield Basis, Keeta, NetNet and...
The official Microsoft X account (13M+ followers) was hijacked to promote a fake $Clippy crypto token in a pump-and-dump scheme. Attackers used an impersonator account posing as...
The FTC is warning families about a growing online threat: deepfakes and "nudify" apps that use AI to create fake nude images and videos of real people, often kids and teens....
Timeshare owners trying to exit their contracts are increasingly targeted by fraudsters posing as exit specialists, resale brokers, or even government recovery agents. Scammers...
Device code phishing abuses a legitimate sign-in flow (OAuth 2.0 Device Authorization Grant) used by smart TVs, printers, and conference gear. A scammer starts a real sign-in for...
Scammers are circulating a fake Apple-style preorder page for the unannounced iPhone Duo, promising a $500 voucher and early access. Apple has not opened preorders yet (they start...
Phishing has moved far beyond typos and dodgy URLs. Attackers now use polished, AI-tailored language, QR codes that hide destinations, and tricks like ConsentFix and ClickFix that...
Attackers are abusing OpenAI's custom GPT feature to promote malicious ChatGPT variants via sponsored Google results. Once installed, the rogue GPT redirects users to a Google...
Crypto ATM scams are surging: the FBI logged 13,460 cases costing $389M in 2025, with victims over 60 accounting for $257M. Scammers call out of the blue pretending to be police,...
A network of look-alike websites branded as "ShipmentsFree" or "ShipmentFree" promises up to $100 a month in shipping rebates, but customers report being enrolled in a recurring...
Health insurance scams surge during Open Enrollment for Medicare and the Marketplace. Scammers often pay to have fake or misleading sites appear at the top of search results,...
The Macfinger ClickFix campaign is an active social-engineering attack that tricks macOS users into running malware themselves. Victims land on a fake CAPTCHA or verification...
...
The continuous press review of online scams: new alerts, data and patterns updated every day from official sources (FBI, Europol, NCSC, Postal Police, FTC...). The same sources used by banks, insurers and law enforcement.