Online Shopping Scams

A blockchain investigator publicly questioned whether UPay, a crypto payment card provider, had allowed a sanctioned criminal marketplace called Xinbi to white-label its Visa crypto card, citing Xinbi's use for pig butchering scams, fraud, and money laundering. UPay's CEO announced the company opened an internal investigation but did not confirm or deny any relationship with Xinbi, which the US Treasury designated as a significant transnational criminal organization in September 2026 with over $36 billion in throughput since 2022. The investigation's scope and findings remain unclear, with no confirmation yet that Xinbi actually issued or launched cards through UPay.

ShinyHunters, a hacking group responsible for breaches at ADT, Canvas, Vimeo, and the FBI, remains active despite the arrest of an alleged member in the Netherlands. In a separate incident, a company that lost over 153 million driver's licenses in a September breach revealed that hackers had internal system access for five months, with class-action lawsuits already filed. Additionally, Meta's AI agent Muse caused privacy violations by automatically approving Facebook Marketplace sales and doxxing a user, while a fake iPhone Duo preorder scam embedded the DarkSword exploit to steal cryptocurrency wallets, passwords, and personal data, and North Korea is suspected in a $351

In 2025, nearly 25,000 people reported falling victim to employment scams with a median loss of $1,000, with the number of victims more than doubling since 2023. Fraudsters use increasingly sophisticated AI-generated materials to create fake job postings that capture applicants' personal data like addresses, birthdates, and passwords, or send fraudulent checks asking victims to deposit and transfer funds. The scams disproportionately target vulnerable populations such as recent graduates and low-income individuals who feel desperate pressure to secure employment.

A Pennsylvania widow was defrauded by an online romance scammer posing as a doctor named "Tony" who built an emotional connection over several months through daily WhatsApp calls and messages, eventually requesting money by fabricating emergencies involving his supposed children. The scammer exploited the victim's loneliness during COVID-19 lockdown and her lifelong desire to be called "Mom," demonstrating how AI and social engineering tactics are making online scams increasingly sophisticated and difficult to detect. The article highlights how billions of dollars are lost annually to such scams, which often originate through social media platforms and use convincing false narratives to manipulate victims emotionally before requesting funds.

Hong Kong police received 1,503 fraud reports involving unauthorized iPhone 18 purchases totaling over HK$30 million, exploiting a loophole in Apple's online checkout system that waived identity and payment verification for web purchases. Scammers used VPN services to conceal their locations and recruited runners to collect devices from public pick-up points designated in confirmation emails. All fraudulent transactions were canceled with no direct monetary losses to cardholders, financial institutions, or Apple, and police are pursuing the syndicate while requesting Apple review its transaction security.

FinCEN identified nearly $13 billion in illicit activity tied to a new China-linked money-laundering scheme that uses digital-asset guarantee marketplaces on Telegram to funnel drug trafficking, human trafficking, and cyber-fraud proceeds into U.S. banks by mimicking Mexican peso-credit structures. The overlay, exemplified by networks like the sanctioned Xinbi platform (which facilitated over $24 billion in illicit activity before relocating to Singapore), exploits regulatory gaps in AML oversight of cryptocurrency and cross-border transactions to move cartel cash through U.S. financial institutions with minimal detection. Major U.S. banks including JPMorgan and Citigroup have processed

During Open Enrollment, scammers create fraudulent websites and ads mimicking legitimate government health insurance sites like Healthcare.gov and Medicare.gov, using similar web addresses, official logos, and keywords to trick consumers into purchasing fake plans or exposing themselves to medical identity theft. Victims may unknowingly pay for counterfeit insurance or have their personal health information compromised through these deceptive practices. Consumers should report suspected health insurance scams to the FTC at ReportFraud.ftc.gov, their state attorney general, or Medicare directly at 800-633-4227.

Voice cloning scams are increasingly targeting families through deepfake technology, with scammers using just seconds of audio from social media to impersonate relatives and conduct virtual kidnapping schemes that pressure victims into sending money. Greek police reported a case where a 14-year-old was deceived by callers using a cloned recording of her father, and one in four Americans report receiving deepfake voice calls in the past year. Experts recommend families establish a "secret word" or phrase that only they know to verify identity during suspicious calls, combined with a backup plan to call or message the person back through verified contact information.

Americans ages 20-29 reported over $500 million in internet crime losses in 2025, with college students particularly vulnerable to sophisticated scams including online shopping fraud, fake job offers, rental scams, and AI-enabled schemes. Scammers exploit students' digital familiarity and high demand for housing and employment by impersonating legitimate businesses, posting fake listings, and using deepfakes and cloned voices to deceive victims into sending money or sharing personal information. Students and parents can protect themselves by verifying website legitimacy, applying for jobs through official company websites, conducting reverse image searches on rental listings, and being wary of unsolicited job offers and unusually low prices.

Pennsylvania's elderly population, which comprises over one-quarter of the state's residents, lost over $215 million to scams in 2025 alone, according to FBI data. Common scams targeting seniors include romance and investment fraud, online shopping counterfeit schemes, phishing scams impersonating government agencies like Social Security and the IRS, and grandparent emergency scams. Scammers exploit seniors' vulnerability by using spoofed phone numbers, fake websites, and increasingly AI technology to deceive victims into divulging sensitive financial information or transferring funds.