Identity Theft

A blockchain investigator publicly questioned whether UPay, a crypto payment card provider, had allowed a sanctioned criminal marketplace called Xinbi to white-label its Visa crypto card, citing Xinbi's use for pig butchering scams, fraud, and money laundering. UPay's CEO announced the company opened an internal investigation but did not confirm or deny any relationship with Xinbi, which the US Treasury designated as a significant transnational criminal organization in September 2026 with over $36 billion in throughput since 2022. The investigation's scope and findings remain unclear, with no confirmation yet that Xinbi actually issued or launched cards through UPay.

MyChart patient portals have experienced an uptick in phishing scams targeting approximately 190 million worldwide users, with fraudsters sending deceptive emails that direct patients to fake login pages to steal personal information and expose computers to malware. To combat this threat, LexisNexis Risk Solutions introduced Identity Proofing for MyChart, which uses additional security checks like one-time passwords and biometric verification, while advising patients to verify sender email addresses, avoid clicking suspicious links, and log into portals directly rather than through emails. Experts warn that compromised MyChart credentials combined with other stolen personal data can enable criminals to build fraudulent profiles and commit identity theft, including opening credit cards in victims' names

This article is a product review comparing identity theft protection services rather than reporting on actual fraud incidents. It does not contain information about specific scams, victims, or dollar amounts lost to fraud—instead, it lists seven identity theft protection services with their features, coverage limits, and pricing tiers designed to help consumers prevent identity theft and fraud.

Cybercrime investigator Dunstan Guba is raising awareness about the growing romance scam epidemic in Ghana, where fraudsters build emotional relationships through social media before requesting money under false pretenses. Ghana reported GH¢23.3 million in cybercrime losses in 2024 and GH¢14.9 million in just the first half of 2025, with a 2025 pan-African operation revealing approximately US$450,000 in romance scam losses and US$8 million defrauded from elderly victims by a network using artificial intelligence to create false identities. Romance fraud is particularly dangerous because criminals exploit trust rather than just targeting devices, using tactics like fake

Scammers placed fake QR code stickers on parking meters in Ann Arbor, Michigan's downtown area, with labels like "Scan to Park!" that direct users to fraudulent websites designed to steal personal and financial information. Ann Arbor police warn residents not to scan unfamiliar QR codes on meters and recommend using only official payment methods, with particular concern that older residents may be more vulnerable to this scam. City employees have been instructed to remove suspicious stickers from meters and residents are urged to report them to police to prevent identity theft and financial loss.

"Ghost students" using stolen or fabricated identities—sometimes created with AI—have been exploiting federal student aid programs by enrolling in colleges and collecting grants and loans intended for legitimate students, costing taxpayers millions of dollars. The Education Department reported saving nearly $200 million after implementing identity verification requirements in June, with estimates of over $1 billion in savings this cycle, while the Trump administration has suspended over 870,000 borrowers allegedly involved in COVID-era fraud. Fraud investigators warn students and parents to watch for red flags such as multiple applications with common information, as scammers target student aid programs because of historically weak controls.

A 25-year-old Indian national pleaded guilty to conspiracy to commit wire fraud after collecting $137,458 in gold bars from an 80-year-old Kaneohe woman who was tricked by fake Apple and U.S. Marshal scam calls into liquidating her IRA. The victim was caught in a controlled sting operation by federal agents who used prop gold to arrest the courier, who earned $25,000-$30,000 per ten pickups for an international fraud ring orchestrated from Gujarat, India. The case is part of a broader pattern targeting elderly victims, with similar schemes operating across multiple states through WhatsApp-coordinated courier networks.

Floridians age 60 and older reported over 17,000 cybercrime complaints with nearly $710 million in losses in 2025, with scammers using tactics like fake technical-support warnings, account lockouts, and cryptocurrency schemes to steal funds. One woman in her early 70s lost approximately $100,000 after being manipulated through a series of coordinated scams involving a fake bank transfer, computer security warning, and pressure to move money to cryptocurrency. Nationally, people 60 and older account for over 37% of all reported fraud losses ($7.75 billion) despite representing only 20% of complaints, with an average loss of $38,500 per

Approximately 72% of internet crimes targeting people aged 60 and older in 2024 involved personal data exploitation, resulting in estimated losses of $4.2 billion, according to an Incogni analysis. Scammers use exposed personal information combined with techniques like SIM swaps and AI voice cloning to impersonate family members through compromised accounts and family group chats. The FBI recommends verifying urgent requests through separate communication channels and using authentication apps instead of SMS-based two-factor authentication to prevent these scams.

Scam calls in Central Florida are surging, with victims like realtor Tammy Jo Gaylord receiving 80-90 calls daily using spoofed numbers and robocalls designed to extract personal information or money. Florida's attorney general is proposing new anti-spam legislation, and authorities warn consumers to watch for red flags including unexpected calls that create fear or pressure, particularly scams impersonating process servers seeking personal details or payment. Consumer advocates stress that people should verify suspicious claims independently and never confirm personal information based solely on a caller's knowledge of partial details.