Charity Sweepstake Scam Alert: How to Spot Fake Prizes
Scammers are posing as charities and claiming you won a sweepstakes. The FTC explains the signs and offers practical steps to avoid losing money or personal data.
Updated every morning
Scam Alerts
The scams going around right now, by text, phone, email and social media: how they work, the red flags, and what to do if you or someone you know gets hit.
Phone scams: why texts, AI voice calls, and QR codes are risky
Malwarebytes reports consumers lost $470 million to text scams in 2024 and says AI voice cloning has made calls harder to trust. This briefing gives five practical steps to reduce risk on phones.
FTC Phone Number Scam: What the Call Means and How to Respond
Scammers are posing as FTC agents, claiming your number is linked to fraud abroad and threatening to shut it down. The FTC says the calls are fake and provides clear steps to stay safe.
AOMEI Backupper malware pushed from hijacked update servers
Attackers briefly changed AOMEI Backupper update files so the app downloaded and ran malware. This briefing explains how it worked, who could be affected, and practical checks.
Job scam detection: AI‑driven applications can mask fake recruiter messages
AI tools let job seekers send many applications, but the flood of replies can hide recruiter scams. Learn how to keep track and verify contacts.
Election Scam Alerts: How Scammers Are Targeting the 2026 Midterms
Scammers are using candidate branding and AI‑generated messages to run donation, merchandise and voter‑registration scams around the 2026 midterms. The FBI outlines the tactics and how you can stay safe.
Scammers Send Your Name With a Question Mark to Spark Replies
Scammers are texting people using their real name followed by a question mark to provoke a reply, then using that engagement to sell fraud or resell the number.
Claude ClickFix attack uses Google Ads and Bing redirects
Researchers say attackers used legitimate Google ads that land on Bing click-tracking redirects and a compromised WordPress site to deliver fake Claude installers that swap a real install command for a malicious one.
Phishing-as-a-Service Kit Makes Credential Theft Possible in Ten Minutes
A turnkey kit called BlueKit lets attackers set up a full phishing operation in about ten minutes, steal session data and device fingerprints, and even generate scam content with an unrestricted AI.
ASOS push notification hack warns shoppers to pause purchases
Thousands of ASOS app users received a fake alert about a Snowflake breach. The retailer says payment data is safe, but profile information may have been exposed. Here’s what happened and how to protect yourself.
Free Mobile phishing emails mimic official pages after breach
Well-crafted phishing emails that imitate Free Mobile are circulating after a past data breach. Malwarebytes found Cloudflare-hosted domains and redirect chains leading to payment forms asking for card details.
How to Spot Health Insurance Scams During Open Enrollment
During Open Enrollment, scammers mimic official health‑insurance sites to steal money and personal data. This brief shows how to tell real resources from fraud and protect your family.