Scam Radar
Business Email Compromise (BEC) and CEO fraud caused USD 2.9B in confirmed losses in 2023 per FBI IC3. The 2024-2025 wave adds AI voice cloning to the playbook. We track the latest impersonation cases and the verification controls that stop them.
ARToken / EvilTokens: device code phishing against Microsoft 365 Security researchers at Cisco Talos uncovered ARToken , a phishing-as-a-service platform linked to the EvilTokens toolkit, that abuses...
Switzerland's National Cyber Security Centre (NCSC) consistently reports phishing, fake bank/Microsoft 'support' calls, investment fraud (fake brokers/crypto), parcel/customs smishing, and...
Following the Arup HK$200M (~USD 25.6M) case, real-time deepfake video-call fraud has spread: finance staff are invited to a Teams/Zoom call where the 'CFO' and 'colleagues' are AI-generated,...
The European Payments Council's 2025 Payment Threats and Fraud Trends report identifies social engineering and Authorised Push Payment (APP) fraud as the leading EU payment-fraud drivers, amplified...
Europol's Internet Organised Crime Threat Assessment (IOCTA) 2026 names online fraud the fastest-growing area of internet-enabled organised crime. Schemes increasingly use AI to impersonate bank...
In 2025 the FBI IC3 received more than 22,000 complaints citing AI involvement, with losses exceeding USD 893 million. Criminals use generative AI to: clone a relative's or executive's voice from...
EvilTokens is a phishing-as-a-service kit sold on Telegram that compromises Microsoft 365 accounts without fake login pages or stolen passwords. Attackers trick victims into completing a legitimate...
Europol IOCTA 2026 highlights how AI, encryption and proxies have industrialised cross-border EU fraud. Fraud-as-a-Service kits enable mass-scale BEC, romance scams and investment fraud with...
Caller claims to be FBI, US Marshal, DEA or local sheriff with an active warrant for missed jury duty, drug trafficking or contempt. Victim told to avoid arrest by paying 'bond' in cash, gift cards,...
Scammer poses as USCIS, ICE or 'notario público' offering DV lottery win, expedited green card, or threatening deportation unless fee is paid. FTC + DOJ: immigration scams cost vulnerable communities...
Caller spoofs utility number, claims account is 60+ days past due and power/gas will be shut off within 30 minutes unless victim pays via prepaid card (Vanilla, Green Dot MoneyPak), Bitcoin ATM or...
Scammer texts/emails 'you qualify for Biden / Trump student loan forgiveness — pay $399 processing fee' or asks for FSA ID password to 'apply on your behalf'. Federal student aid programs (PSLF,...
Attacker emails HR/payroll from a lookalike of employee's address (john.smith@gmaiI.com with capital I instead of l), requesting a direct-deposit change to a different bank, often a neobank or...
January-March: attacker spoofs CEO / CFO email to HR/payroll: 'Please send me the W-2s of all employees for review before filing.' HR replies with a ZIP / Excel containing SSN, address and 2024 wages...
Finance employee receives Teams/Zoom call where the CEO's voice and (increasingly) video are AI-generated using ElevenLabs / HeyGen / public earnings call footage. Voice instructs urgent wire to 'M&A...
CERT NZ reports BEC in 2024 cost NZ businesses NZ$13M+, predominantly law / accounting / property firms whose clients receive a 'change of trust account' email mid-conveyance. Indicators: M365...
Australian Cyber Security Centre (ACSC) reports BEC is the 1 loss category for Australian businesses, A$84M+ in 2024. Attacker compromises supplier's Microsoft 365 mailbox via OAuth consent phishing,...
Robocall claims Australian Taxation Office has issued an arrest warrant for unpaid tax; victim told to pay via Bitcoin ATM, gift cards (iTunes / Google Play) or transfer to a 'holding account'. Real...
Open Mythos and paste it. Free triage in seconds. Court-grade forensic dossier from CHF 29/month when you need a defensible trail.