Explore the Archive

Meta is the most impersonated U.S. brand in phishing scams, with over 10,457 verified cases in the past four years, followed by Apple, Amazon, and Microsoft. Phishing scams impersonate trusted brands to trick victims into clicking malicious links or revealing personal data, which can lead to ransomware installation or account compromise. The research found that IT/technology and banking/finance sectors are most targeted due to high customer trust and valuable credentials, with scammers increasingly using urgent or emotional messaging and AI-generated content to appear more sophisticated.

Cybercriminals are increasingly targeting summer travelers through online booking scams, with popular destinations like Fort Myers Beach, Sandusky, and Chicago being the most frequently exploited. Common scams include AI-generated fake accommodations, fraudulent booking websites, impersonation schemes, phishing emails, and public Wi-Fi data theft. According to McAfee research, 25% of Americans have lost over $1,000 to travel scams, 15% experienced fraudulent charges after using fake sites, and 13% arrived to find their booked accommodations didn't exist.

In 2023, Americans over 60 lost $3.4 billion to scams—a 10.6% increase from 2022—with 101,068 reports filed, according to FBI IC3 data. Criminals obtained victims' personal information through data brokers and used it to perpetrate tech support scams (18,000 victims, $589.8 million lost), investment fraud (6,400 victims, $1.2 billion lost), and romance scams (6,700 victims, $356.9 million lost). The article advises seniors to use data removal services, place fraud alerts with credit agencies, and remain cautious of phishing

Huione Guarantee, a Cambodian online marketplace, operates as a bazaar for crypto scam software, money laundering services, and tools for "pig butchering" romance scams affecting Southeast Asia, with crypto wallets associated with the platform receiving over $11 billion since 2021 according to blockchain analytics firm Elliptic. Hun To, cousin of Cambodian Prime Minister Hun Manet, serves as a director in one of the Huione Group units, implicating the prime minister's family in the crypto fraud scheme despite the government's stated commitment to stopping such scams. The platform facilitates transactions primarily in USDT stablecoin and acts as an esc

From 2013 to 2015, Evaldas Rimasauskas conducted a Business Email Compromise (BEC) scam by impersonating the vendor Quanta Computer Inc., sending fraudulent invoices to Google and Facebook that totaled over $100 million in payments. Rimasauskas was arrested in 2019 and sentenced to five years in prison, but his scheme has since inspired numerous copycat criminals targeting municipalities and businesses, with recent incidents in Florida resulting in losses exceeding $1 million in at least one case, though some institutions have successfully blocked fraudulent transactions.

Pennsylvania House Bill 2064, sponsored by State Representative Joe Hogan, passed the House with bipartisan support (152-49 votes) and is headed to the Senate. The legislation aims to protect seniors from financial exploitation by requiring financial institutions and fiduciaries to report suspected abuse, temporarily halt suspicious transactions, and share information with area agencies on aging, while granting them immunity from liability. According to Hogan, tens of thousands of dollars are lost weekly to scams and fraud in Bucks County alone, making this decade-long legislative effort critical to safeguarding seniors' assets.

Senior citizens lose approximately $3 billion annually to elder fraud, with scammers increasingly targeting seniors due to their financial security and trusting nature. The article identifies eight common scams affecting elderly individuals, including tech support/home repair fraud, grandchild impersonation schemes, government agency impersonation, fake sweepstakes, phishing emails (particularly fake Geek Squad invoices), overpayment scams, and unsubscribe email phishing attempts. Key prevention strategies include verifying caller identities independently, confirming stories with family members before sending money, avoiding clicking suspicious links, and researching companies before making purchases.

A Singapore-based commodity firm lost $42.3 million in a business email compromise (BEC) scam in July 2024 when fraudsters impersonated a supplier and redirected a payment to a fake bank account in Timor-Leste; using INTERPOL's Global Rapid Intervention of Payments (I-GRIP) mechanism, authorities recovered $39 million and froze the fraudulent account within one day, with seven suspects arrested and an additional $2 million recovered. The article also covers law enforcement's seizure of the Cryptonator cryptocurrency exchange, which facilitated over 4 million transactions worth $1.4 billion and allegedly enabled money laun

A Singapore-based commodity firm lost $42.3 million in a July 2024 Business Email Compromise (BEC) scam when fraudsters sent a spoofed email redirecting payment to a fake account in Timor-Leste. INTERPOL's Global Rapid Intervention of Payments (I-GRIP) mechanism recovered $39 million within one day and led to the recovery of an additional $2 million following the arrest of seven suspects, marking the largest-ever BEC fund recovery. The article also highlights related cybercrime enforcement actions, including the indictment of Cryptonator's founder for processing $1.4 billion in criminal proceeds through cryptocurrency

Private Digital Investigations announced new measures to combat rising cybercrimes including Nigerian romance scams and sextortion schemes, which exploit victims emotionally and financially through fake profiles and blackmail threats. The agency employs AI-driven profile analysis, digital forensics, and law enforcement collaborations to identify scammers, and offers public education through workshops, support hotlines, and online resources. The article advises victims to cease communication with suspected scammers, report profiles to platforms, avoid sharing explicit content, and seek help from professional investigators or authorities rather than paying ransom demands.

Orion S.A., a global carbon black supplier, lost $60 million in a Business Email Compromise (BEC) attack in August 2024 when an employee was deceived into making multiple fraudulent wire transfers to scammer-controlled accounts. The company reported the incident to the SEC and confirmed it notified law enforcement and is pursuing fund recovery through insurance coverage, with no additional data breaches or fraudulent activity detected.

A cybersecurity firm KnowBe4 discovered that a newly hired remote software engineer was a North Korean scammer operating through a U.S. laptop farm, exposed when the company laptop immediately began downloading password-stealing malware. The scheme involved multiple actors including a compromised American citizen whose identity was stolen, fake references with Gmail addresses, and inconsistencies in the hiring process that the FBI has linked to a known North Korean data-stealing operation targeting I.T. positions at American and British companies. The incident highlights vulnerabilities in remote hiring processes and the need for companies to implement stronger verification procedures, in-person interviews, and cross-referenced background checks to prevent foreign threat actors from infilt

Phone scams are increasingly sophisticated and cost US consumers $2.7 billion in reported losses in 2023 alone, with numbers rising annually. The article identifies 12 common phone and text scams including the "loved one in need" (grandparent scam), government impersonation (FBI/IRS), and other fraudulent schemes that exploit emotional pressure and official-sounding tactics. Key prevention strategies include verifying caller identity through alternative contact methods, refusing to send money to unknown callers, and being skeptical of urgent payment demands, especially via wire transfers or gift cards.

Blockchain analysts report that online scammers are shortening the duration of scams and creating new fraudulent schemes at an accelerated pace to avoid detection, with 43% of cryptocurrency flowing to scam wallets in 2024 originating from newly created accounts. The average scam duration has collapsed from 271 days in 2020 to 42 days in 2024, while "pig butchering" romance scams—where victims are deceived into fake investments—remain highly lucrative, with one Myanmar-based operation netting $100 million year-to-date. Illicit cryptocurrency marketplaces like Huione Guarantee have processed billions in transactions and enabled these scams to

A woman in New Jersey received a phishing email impersonating the Social Security Administration claiming her Social Security number was compromised and requesting she open an attached document. The article explains that phishing scams use fake official emails with urgent language to trick victims into opening malware-laden attachments or divulging personal information, and provides guidance on recognizing these scams, steps to take if you receive one (flag as spam, don't open attachments, don't respond), and prevention measures such as verifying your Social Security account and using two-factor authentication.

Hancock County Savings Bank held an educational event for seniors to raise awareness about fraud and scam prevention, citing FBI data showing over 100,000 Americans aged 60+ become fraud victims annually. The bank highlighted emerging threats including charity scams, family emergency schemes, and AI-based voice cloning scams used for kidnapping hoaxes, and recommended protective measures such as not answering unknown numbers, avoiding suspicious links, hesitating before sending money, and consulting family members before responding to unexpected requests.

Cryptocurrency investment scams, particularly "pig butchering" schemes where fraudsters pose as attractive, wealthy traders on social media and dating apps, continue to defraud victims of substantial sums. Two North Carolina victims—Jim Wilkerson of Cary and Pamela Magnum of Durham—lost approximately $790,000 and $70,000 respectively after being lured with fake platforms showing false returns that eventually disappeared when they attempted withdrawals. According to the FBI, crypto-investment scam losses increased from $3 billion in 2022 to $4.5 billion in 2023, with over $1.9 billion in losses reported in the first six

Most people falsely believe they are not targets for cybercriminals, with over 75% of surveyed individuals uncertain or dismissive of the threat, creating widespread vulnerability to attacks. Scams target everyone through various methods including phishing, malware, and social engineering—affecting not just major corporations but individuals losing anywhere from $5 to $5,000, plus personal identifying information. Even cybersecurity experts can fall victim to sophisticated fraud schemes, demonstrating that vigilance and awareness are essential for all people regardless of their expertise or perceived value as a target.

The Google Voice verification scam targets online sellers on platforms like eBay and Facebook Marketplace by posing as potential buyers and requesting Google Voice verification codes, which scammers then use to create a virtual number linked to the seller's phone number. Once obtained, scammers can intercept bank verification codes, commit identity theft, open fraudulent accounts in the victim's name, and conduct additional scams while appearing to use a legitimate U.S. number. Sellers should be wary of buyers requesting codes before discussing items and verify unusual requests, as one New York seller, Allen C., avoided falling victim by recognizing suspicious behavior such as spelling errors and pressure tactics.

The U.S. Treasury Department sanctioned Cambodian billionaire Ly Yong Phat and his businesses for alleged human trafficking and forced labor at online scam centers that defraud unsuspecting individuals, including Americans, through romance scams and cryptocurrency schemes. Hundreds of victims from multiple countries were rescued from compounds including the O-Smach Resort, where workers were forced to labor up to 15 hours daily under threats of violence, beatings, and sexual trafficking. The sanctions target the infrastructure supporting these scam operations while highlighting widespread corruption and official complicity in Cambodia that has enabled traffickers to operate with impunity.

This article describes three common scams targeting elderly people: grandparent scams (where callers pose as distressed relatives or law enforcement to solicit wire transfers), IRS scams (where fraudsters impersonate tax agents to steal money or personal information), and sweepstakes scams (where victims are promised prizes to encourage purchases or payments). The article emphasizes that geographic location offers no protection against these schemes and advises seniors and their families to recognize warning signs such as urgent requests for wire transfers, threats of arrest, and demands for sensitive personal information.

A Cambodian senator and entrepreneur, Ly Yong Phat, was sanctioned by the US Treasury for operating O Smach Resort as a forced labor camp where trafficked workers were coerced into promoting cryptocurrency and foreign exchange scams that defrauded victims globally. Workers at the resort reported being lured with false job offers, having their documents confiscated, and enduring beatings, electric shocks, ransoms, and threats; two victims reportedly died by suicide. The sanctions prohibit US persons from conducting business with Ly without permission and require reporting of his US-based assets.

Herkimer police are warning residents about multiple scams circulating in the area, including blackmail schemes where fraudsters claim to have installed spyware and threaten to release compromising information unless victims pay (such as $2,000 in bitcoin), and police impersonation scams where criminals falsely claim that Herkimer Police are searching for the victim. The article also highlights emerging AI-enabled threats including romance scams ("pig butchering") and virtual kidnapping ransom schemes where criminals use cloned voices to impersonate loved ones, urging residents to verify requests directly with police rather than through third parties.

A grandmother received a deepfake voice call from a scammer impersonating her grandson claiming to be in jail and needing $10,000 for bail, but she verified the call was fake by contacting her grandson directly. The article outlines common scams targeting seniors—including grandparent scams, government impersonation, romance scams, and spoofing—and provides protective strategies such as verifying callers through known phone numbers, establishing family safe words, taking time to think despite pressure tactics, and using unique passwords with one-time passcodes.

During election season, scammers exploit voters' emotional investment by creating fake candidate websites and social media accounts, using robocalls with candidates' voices, and sending deceptive donation text messages—all designed to redirect funds from legitimate campaigns to fraudsters. Red flags include poor grammar, pressure for immediate donations, requests for unusual payment methods (wire transfers or prepaid cards), unsolicited personal information requests, and offers of prizes for poll participation. Voters should verify donation authenticity directly through official campaign channels and remain cautious when emotions run high.

A Rochester, Minnesota woman lost $2,000 in a virtual kidnapping scam after a Spanish-speaking caller claimed to have abducted her daughter and demanded ransom money transferred to a Mexico account. The scammer used personal information about the victim and her daughter to make the threat credible and kept the woman on the phone while directing her to a local market to complete the transfer. The daughter was unharmed and returned home from school; the Rochester Police Department is investigating the case.

A Tennessee man's wife fell victim to a sophisticated scam where thieves posed as bank representatives following a legitimate fraud alert text, tricking her into revealing the answer to her account's security question. Using this information, the scammers disabled notifications, transferred funds between accounts, and set up an ACH withdrawal—though the victim's daily account monitoring allowed her to catch the fraud quickly and recover most funds through her bank and IC3 reporting. The incident illustrates how scammers exploit trust and use security question answers to bypass account protections, and highlights the importance of verifying caller identity and being cautious about sharing personal information even when requests seem legitimate.

Indian youth from Haryana are falling victim to job scams involving recruitment agents who promise legitimate overseas employment but instead traffic them into dangerous situations. Six men from Kaithal district were recruited for jobs in Russia's transport sector but were forced into the Russian Army; one was killed in combat in Ukraine, one remains missing, and four returned traumatized after seven months of frontline fighting with minimal training. Similar scams have affected other regions, with victims' families spending substantial sums (one family spent ₹42.33 lakh) only to have relatives sent to conflict zones like Libya where some were killed, exploiting widespread unemployment and desperation among India's youth.

Laura Kankaala, head of threat intelligence at Finnish cybersecurity firm F-Secure, explains how online scams and ransomware attacks have evolved dramatically during her nearly 10-year career—from rare incidents to daily occurrences. Hackers increasingly use sophisticated tactics including fake profiles, phishing sites, and malware to steal data and money from victims, exploiting the expanded digital exposure created by smartphones, remote work, and social media. Cybercriminals monetize stolen data through ransomware attacks, account compromises, and data sales, with new scams emerging constantly as technology becomes more integrated into daily life.

This article addresses a widespread "sextortion" phishing scam in which recipients receive threatening emails claiming hackers have compromised their computers and possess embarrassing photos or browsing history, demanding payment in bitcoin to prevent the information from being shared with contacts. The scammers use publicly available personal information (names, addresses, house photos from Google Street View) obtained from data breaches to create a false appearance of authenticity, but they have not actually hacked the recipients. The article advises recipients not to pay the ransom and recommends changing passwords, freezing credit, and monitoring for identity theft to protect against future scams using leaked personal data.

Online scams cost American consumers $12.5 billion last year, a 22 percent increase, with cybercriminals using sophisticated psychological tactics that can affect anyone regardless of age, intelligence, or education. According to cybersecurity expert Bruce Schneier, scammers' methods are fundamentally unchanged from historical cons, but technology has dramatically increased the scale and speed of attacks through fake social media ads, phishing emails, and AI-generated content. Cryptocurrency has made scams more profitable and harder to prevent because transactions cannot be reversed or monitored by traditional banking safeguards.

Americans over age 60 lost more than $3.4 billion to scams in 2023, with 101,000 complaints filed—a 14.5% increase from 2022. Tech support scams were the most common fraud type, while data brokers' sale of personal information increasingly enables criminals to target seniors. The article recommends protective measures including monitoring financial accounts, using strong passwords, enabling two-factor authentication, limiting personal information sharing, and considering data removal services.

The Elmira Heights Police Department is hosting a community awareness presentation on November 11th at Village Hall to educate residents about common scams targeting older adults, including impersonator scams, tech support scams, charity scams, virtual kidnapping scams, and romance scams. The event is being organized in partnership with the Upstate Elder Abuse Center at Lifespan of Greater Rochester.

Montana residents are being targeted by AI-enhanced "virtual kidnapping" ransom scams, with at least nine reports reaching the Montana Office of Consumer Protection in the current year, where scammers use artificial intelligence to mimic victims' loved ones in distress and demand immediate money transfers. The FBI advises victims to remain calm, verify claims by contacting loved ones directly, establish family passwords for verification, and report suspicious incidents to law enforcement, noting that these scams typically demand quick payouts with escalating pressure tactics.

The UN Office on Drugs and Crime issued a report warning that digital scamming in Southeast Asia is rapidly expanding and becoming more sophisticated through the integration of generative AI, deepfakes, and cryptocurrency theft tools. Criminal networks have trafficked approximately 200,000 people into compounds across Myanmar, Cambodia, and Laos over the past five years to operate scams, with "pig butchering" investment schemes alone defrauding victims of around $75 billion, while organized crime groups in the region earned an estimated $37 billion last year. These criminal operations are increasingly using AI-generated content, deepfake videos, and automated tools to overcome language barriers and scale their scams globally, low

This article discusses the growing threat of real-time video deepfakes used for fraud, describing how Reality Defender and other companies are developing detection tools to combat the problem. Recent cases include a US Senate chairman being deceived by a fake Ukrainian official video call and an engineering company losing millions to deepfake video fraud, with romance scams also employing the technique. Multiple approaches are being developed, including Reality Defender's planned Zoom plug-in and academic research on challenge-based authentication, though these detection tools remain unavailable to the general public.

Maharashtra Cyber Department warned citizens about deepfake scams using AI to create realistic fake videos and audio of celebrities and high-profile individuals to impersonate them and request urgent financial transfers or sensitive information. In one documented case, a 68-year-old businessman from Powai lost Rs 80,000 after receiving a fake call with an AI-cloned voice of his son, falsely claiming he was arrested by the Indian Embassy in Dubai. The alert recommends restricting social media privacy settings, avoiding unknown friend requests, and reporting suspicious communications to authorities.

Scammers are sending fraudulent text messages claiming recipients are not registered to vote, directing them to fake websites like all-vote.com and votewin.org to harvest personal information including names, addresses, emails, dates of birth, and phone numbers. Election officials in Michigan and Pennsylvania warned voters to be cautious of these messages, which can be identified as scams by their unsolicited nature, suspicious domains, requests for unnecessary personal data, and grammatical errors. To verify voter registration safely, Americans should use the official government website vote.gov rather than clicking links in unsolicited texts.

A sophisticated AI-powered phishing scam targeting Gmail users uses fake account recovery notifications, spoofed Google phone numbers, AI-generated voice calls, and email spoofing via Salesforce CRM to impersonate Google support and trick victims into confirming passwords or account access. The scam is harder to detect than traditional phishing because it combines multiple deceptive tactics including legitimate-appearing caller IDs, professional-sounding AI voices, and emails spoofed from Google domains. Users should verify requests by checking email addresses for non-Google domains, remembering that Google does not call users proactively unless they have a Business Profile, and avoiding clicking links or downloading attachments from suspicious emails.

Hong Kong police arrested 27 people in October for operating a crypto romance investment scam that used AI deepfakes to defraud victims of $46.3 million. The scammers, mostly targeting men from mainland China, Taiwan, India, and Singapore, posed as women using deepfake technology to lure victims into fake cryptocurrency investment schemes operated from an industrial building in Hung Hom. The operation employed university graduates in digital media and overseas IT professionals to build the fraudulent platform and develop training materials for the deepfake scams.

The FBI operates the Internet Crime Complaint Center (IC3) website to help the public report cybercrime, receiving over 880,000 complaints in 2023 with estimated losses exceeding $12.5 billion. Seniors are particularly vulnerable to scams including investment fraud, ransomware, phishing, and tech support schemes, with nearly 60 percent of call center scam losses coming from people over 60, and Americans over 60 losing over $1.1 billion to cryptocurrency scammers alone. The FBI emphasizes prevention through awareness and due diligence rather than investigation alone, and successfully prosecuted a tech support scam ring originating from an IC3 complaint that affected over

Americans lost $5.6 billion to cryptocurrency scams in 2023, a 45% increase from 2022, with over 69,000 complaints filed to the FBI's Internet Crime Complaint Center. People aged 60 and older were disproportionately affected, reporting over $1.6 billion in losses across 16,806 complaints, primarily through investment fraud schemes and relationship-building scams that use fake websites and recovery schemes. Common tactics include scammers promising unrealistic returns via unsolicited contact, building trust through dating apps and social media before pushing crypto investment, and impersonating recovery specialists to steal additional funds from victims.

Americans lost an estimated $12.5 billion to online scams in the past year, with artificial intelligence-generated "deepfake" videos making investment frauds increasingly difficult to detect—the FBI estimates 39% of victims fell for deepfake-based schemes involving fabricated videos of business leaders, celebrities, or romantic interests. Scammers exploit AI to duplicate voices, crack passwords, and process large volumes of data, while most stolen money goes unrecovered, particularly when criminals demand payment in cryptocurrency and operate from overseas. Common defenses include using strong passwords, enabling two-factor authentication, and scrutinizing videos for unnatural movements, inconsistent lighting, and mismatched lip movements

This educational piece warns that AI-powered misinformation poses significant cybersecurity risks during elections, with bad actors using generative AI to rapidly create fake news, deepfakes, phishing emails, and coordinated social media campaigns. A Trend Micro study found a critical gap in consumer awareness: while 79% of U.S. respondents felt confident identifying online scams, 62% actually failed to recognize a specific scam example, suggesting people underestimate the sophistication of AI-generated election-related misinformation. The article advises readers to recognize that election-related scams and misinformation have become increasingly difficult to spot without proper awareness and skepticism of suspicious content.

Online scams are becoming increasingly sophisticated, with fraudsters employing impersonation, voice-changing technology, and emotional manipulation to steal money and personal information from victims. Common schemes include "nude video call" blackmail on WhatsApp, voice-mimicking scams impersonating distressed family members, fake customs fees for parcels, lottery winnings requiring upfront payments, and romance scams. The article advises verifying caller identities through callbacks, avoiding unsolicited video calls from unknown numbers, confirming with legitimate companies before payments, and exercising caution when sharing personal information with people met only online.

Scammers are sending sextortion emails that include photos of victims' houses obtained from Google Street View, claiming to have compromising videos and demanding Bitcoin ransom while threatening to expose the content to contacts. The scams exploit data from previous breaches to personalize threats and create false credibility, though scammers do not actually possess any videos or camera access. Victims should not pay ransom or respond to emails but instead report the scam to the FBI's Internet Crime Division, monitor their credit, and check for unauthorized charges.

Scammers are sending extortion emails that include photos of victims' houses obtained from Google Street View, threatening to expose supposed explicit content videos and demanding Bitcoin payment within a short timeframe. The emails falsely claim the scammers have stolen passwords, installed malware, and recorded victims through their cameras, but these threats are fabricated—the scammers have no actual compromising videos or camera access. Victims should not pay the ransom or respond to emails, and should instead report the scam to the FBI's Internet Crime Division at IC3.gov.

Scammers are sending sextortion emails that include photos of victims' homes (obtained from Google Street View) and falsely claim to have installed malware, recorded compromising videos, and stolen passwords, demanding Bitcoin payment within a short timeframe. The scam exploits personal information from data breaches and uses intimidation tactics, but the threats are not genuine—scammers have no actual videos or camera access. Victims should not pay, report the emails to the FBI's Internet Crime Division at IC3.gov, monitor their credit for fraud, and ignore all communication from the scammers.

Scammers attempted to defraud a Florida title company by using an AI-generated deepfake video to impersonate a missing woman and fraudulently sell a vacant property. The scheme was caught before completion, but property appraiser Marty Kiar warns that AI-enabled title fraud will likely increase as criminals leverage automated tools to synthesize public property records and create sophisticated impersonations faster than ever before.

The BBC is launching "Scam Safe Week" (November 23-29, 2024), a multi-platform educational initiative featuring TV, radio, and online content designed to help the public recognize and prevent scams. With fraud now comprising over 40% of all crime in the UK, the week will include the TV-BAFTA winning series "Scam Interceptors," live roadshow events across the country, and expert advice from fraud specialists, in partnership with organizations including Age UK and Stop Scams UK.