Audience page

Scams targeting small businesses

Small businesses get targeted where there is operational pressure: invoices, payroll, vendor changes, platform support, account ownership, and urgent payment approval. These scams work because small teams move fast and often have fewer review layers.

219 scams in this audience viewAll audiences

Common searches

small business scaminvoice fraudvendor scampayroll scam

Why this audience gets targeted

  • Small teams often combine finance, operations, and admin responsibilities into one role, which reduces separation of duties.
  • Scammers know urgent vendor, payroll, or ad-account requests can slip through when the business is moving fast.
  • A business context makes fake authority easier because messages can sound operational instead of obviously emotional.

What to check first

  • Verify invoice, bank-detail, payroll, and ad-account changes through a second known channel.
  • Treat any urgent vendor or executive request that skips the normal approval chain as suspicious.
  • Confirm platform support contacts from the official dashboard, not from search results or random messages.
Government impersonation
↑ 121%

Tax refund verification phishing scam

A fake refund or filing problem message pressures the victim to verify tax identity through a counterfeit government portal.

What to do first

Go directly to the tax authority website instead of using message links.

Targets

Tax filers

Seen in

U.S.

AI impersonation
↓ 14%

Fake boss wire approval voice note scam

A finance employee receives a convincing voice note from what sounds like the CEO approving an urgent same-day wire.

What to do first

Call the executive or use the internal approval flow before sending funds.

Targets

Finance teams

Seen in

Global

AI impersonation
↑ 56%

Deepfake payroll change voice note scam

A payroll administrator receives a voice note from what sounds like the CFO asking for a confidential executive payroll update.

What to do first

Freeze the change until the executive confirms through the normal payroll process.

Targets

Payroll staff

Seen in

Global

Employment fraud
↑ 80%

Interview task equipment cheque scam

A fake employer sends a cheque for equipment during the interview stage and asks the candidate to forward part of the money to a vendor.

What to do first

Do not deposit employer cheques tied to urgent vendor payments.

Targets

Students

Seen in

U.S.

Employment fraud
↑ 80%

Payroll onboarding direct-deposit phishing scam

A fake HR portal appears during onboarding and captures banking, tax, and identity documents before the job is confirmed.

What to do first

Confirm onboarding links with the employer through a public number or known email.

Targets

New hires

Seen in

Global

Smishing
↓ 16%

Tax agency refund text link scam

A text says a refund or filing issue needs immediate identity confirmation through a mobile link.

What to do first

Use the tax authority's official website instead of the text.

Targets

Tax filers

Seen in

U.S.

Smishing
↑ 56%

Utility disconnection warning text scam

A text says electricity or gas will be disconnected within hours unless a payment is made through a mobile link.

What to do first

Contact the utility using the number on your statement.

Targets

Households

Seen in

U.S.

Smishing
↑ 56%

Payroll correction text phishing scam

An employee receives a text saying payroll failed and that banking details need immediate confirmation to avoid a pay delay.

What to do first

Contact payroll through your employer's real HR portal.

Targets

Employees

Seen in

Global

Recovery fraud
↑ 76%

Hacked Instagram recovery scam

After an account compromise, a supposed recovery expert promises to restore the profile faster than official support for an upfront fee.

What to do first

Use only official recovery tools and treat helper DMs as suspect.

Targets

Creators

Seen in

Global

Recovery fraud
↑ 17%

Chargeback specialist fee scam

A consultant offers to dispute card charges or investment losses for a sizable upfront retainer and vague promises.

What to do first

Ask your bank or card issuer directly about chargeback options before hiring anyone.

Targets

Small businesses

Seen in

Global

Recovery fraud
↑ 76%

Business page recovery service scam

A business whose social page was hijacked is targeted by a service promising fast admin restoration for a fee or remote access.

What to do first

Use the platform's official admin recovery path and avoid remote-control sessions.

Targets

Small businesses

Seen in

Global

Travel fraud
↑ 54%

Airline rebooking payment call scam

A traveler searching for support reaches a fake airline agent who charges rebooking or seat-protection fees over the phone.

What to do first

Use the airline app or official number from your itinerary.

Targets

Travelers

Seen in

Global

Account takeover
↑ 275%

Session cookie theft account takeover scam

A phishing page steals browser session tokens so attackers can enter accounts without triggering a normal password prompt.

What to do first

Sign out of all sessions and rotate passwords after suspected browser compromise.

Targets

Professionals

Seen in

Global

Account takeover
↑ 15%

One-time passcode support call scam

A fake support agent says they are stopping suspicious activity and needs the latest one-time passcode to secure the account.

What to do first

Never read one-time codes to inbound callers.

Targets

Bank users

Seen in

Global

Account takeover
↑ 76%

Meta business page takeover scam

A fake policy or copyright notice steals admin credentials and locks a business out of its page or ad account.

What to do first

Check account quality from the Meta dashboard before clicking anything.

Targets

Small businesses

Seen in

Global

Account takeover
↑ 54%

Hotel loyalty account takeover scam

A loyalty member receives a fake points-expiry notice that leads to account takeover and stolen reward balances.

What to do first

Sign in from the hotel's app or website directly to verify your points.

Targets

Frequent travelers

Seen in

Global

Government impersonation
↑ 52%

Census or survey data harvest scam

A fake government survey or census call collects identity, household, or banking data under the banner of compliance.

What to do first

Verify the survey through the agency website before participating.

Targets

Households

Seen in

Global

Government impersonation
↑ 68%

Business license renewal scam

A small business gets a renewal notice or call demanding immediate payment to keep permits or registrations active.

What to do first

Confirm renewal requirements with the actual registry or city office.

Targets

Small businesses

Seen in

U.S.

Identity theft
↓ 16%

W-2 identity theft scam

A fake executive or HR request leads staff to send employee tax forms or identity records to an attacker.

What to do first

Verify executive data requests through a second channel before sending records.

Targets

HR teams

Seen in

U.S.

Smishing
↓ 16%

Payroll tax link text scam

A text tells the employee there is a payroll or tax mismatch that must be corrected immediately through a mobile link.

What to do first

Contact payroll through your employer's official HR portal or known contact method.

Targets

Employees

Seen in

Global

Recovery fraud
↑ 76%

Instagram recovery helper scam

A victim locked out of Instagram is approached by a helper who promises fast recovery in exchange for payment, email access, or login codes.

What to do first

Use only the platform's official recovery flow and keep support inside the real app or site.

Targets

Creators

Seen in

Global

Recovery fraud
↑ 17%

Chargeback specialist fee scam

A recovery service promises to reverse payments through insider banking knowledge, but asks for an upfront fee and sensitive transaction data first.

What to do first

Open disputes directly with your bank or payment provider instead of paying a middleman first.

Targets

Fraud victims

Seen in

Global

Recovery fraud
↑ 17%

Stolen phone data recovery scam

After a phone is stolen, a fake support agent promises to restore data or locate the device if the victim signs in to a special portal or pays a fee.

What to do first

Use the device maker's official recovery tools instead of any message claiming a shortcut.

Targets

Travelers

Seen in

Global

Travel fraud
↑ 54%

Airline rebooking fee scam

A fake airline support flow says your flight changed and a fast rebooking payment is required to keep your seat.

What to do first

Open the airline app or booking portal directly and review your itinerary there.

Targets

Travelers

Seen in

Global

Romance scams
↑ 41%

Sugar dating verification fee scam

A match says they want to send support or begin an arrangement, but first the victim must pay a small verification or transfer-release fee.

What to do first

Do not pay any fee to receive money from a stranger who claims to be setting up support.

Targets

Students

Seen in

Global

Account takeover
↑ 60%

Microsoft 365 admin consent scam

A fake Microsoft security or compliance workflow asks a business user or admin to approve an app request that silently grants attacker access.

What to do first

Review app consent requests directly from the official admin console before approving anything.

Targets

IT admins

Seen in

Global

Account takeover
↑ 60%

Shopify admin security reset scam

A store owner gets a fake security or policy reset notice that steals credentials and takes over the store admin panel.

What to do first

Log into the Shopify admin from your saved bookmark and review alerts there.

Targets

Online stores

Seen in

Global

Account takeover
↑ 60%

PayPal Business security center scam

A merchant sees a fake PayPal security center page that captures credentials, approval flows, and sometimes bank confirmation steps.

What to do first

Open the PayPal business dashboard directly and review alerts there, not from a message link.

Targets

Small businesses

Seen in

Global

Government impersonation
↑ 17%

Biometric ID update scam

A fake public-service message says your national ID, passport, or residence record needs a biometric refresh and asks for payment or identity uploads.

What to do first

Check document-renewal requirements from the official government website, not the message.

Targets

Immigrants

Seen in

Global

Online shopping scams
↑ 166%

fake refund overpayment shopping scam

Scammers posing as sellers or customer support claim they accidentally refunded too much and ask victims to return the difference, but the original refund was fake.

What to do first

Never send money to anyone claiming an accidental overpayment without verifying through your bank directly

Targets

Online shoppers

Seen in

U.S.

Tech support scams
↑ 100%

fake virus popup alert scam

Alarming browser popups claim your computer is infected and urge you to call a fake tech support number, leading to remote access exploitation and payment demands.

What to do first

Force-close the browser using Task Manager or Activity Monitor without calling any number

Targets

Older adults

Seen in

U.S.

Tech support scams
↑ 64%

cold call tech support scam

Scammers call victims unprompted, claiming to be from a major tech company, and warn of a fictitious security issue to gain remote access or extract payment.

What to do first

Hang up immediately as legitimate tech companies never make unsolicited support calls

Targets

Older adults

Seen in

U.S.

Tech support scams
↑ 64%

remote access exploitation tech support scam

Scammers convince victims to install remote access software under the guise of tech support, then use it to steal banking credentials, files, and personal data.

What to do first

Never install remote access software at the request of someone who contacted you unsolicited

Targets

Older adults

Seen in

Global

Tech support scams
↑ 64%

fake antivirus software scam

Scammers distribute fake antivirus programs through deceptive ads or downloads that either do nothing, display fake threats to demand payment, or contain actual malware.

What to do first

Only download antivirus software from well-known, reputable vendors directly from their official websites

Targets

Non-technical users

Seen in

Global

Tech support scams
↑ 64%

Microsoft impersonator tech support scam

Scammers impersonate Microsoft support via calls, emails, or popups, claiming your Windows license or account is compromised and demanding payment or remote access.

What to do first

Microsoft never makes unsolicited tech support calls or sends unsolicited security warnings with phone numbers

Targets

Windows users

Seen in

U.S.

Tech support scams
↑ 31%

Apple impersonator tech support scam

Scammers pose as Apple Support via calls or emails, claiming your Apple ID is compromised or your iCloud account has been breached, to steal credentials or money.

What to do first

Apple never calls you unsolicited to ask for your password or verification codes

Targets

Apple users

Seen in

U.S.

Tech support scams
↑ 64%

tech support refund overpayment scam

Scammers claim you are owed a refund for a tech support subscription, then pretend to accidentally deposit too much and ask you to return the difference.

What to do first

Never allow remote access to process a refund as legitimate companies do not operate this way

Targets

Older adults

Seen in

U.S.

Tech support scams
↑ 64%

screen-sharing bank access trap scam

Scammers use screen-sharing during fake tech support sessions to watch victims log into bank accounts, then take control to transfer money.

What to do first

Never log into financial accounts during any screen-sharing session initiated by an incoming caller

Targets

Older adults

Seen in

U.S.

Tech support scams
↑ 64%

fake blue screen of death scam

Malicious websites or software trigger a fake Windows blue screen error with a tech support phone number, tricking victims into calling scammers.

What to do first

Press Ctrl+Alt+Delete or force-restart the computer as real blue screens never include phone numbers

Targets

Windows users

Seen in

U.S.

Tech support scams
↑ 64%

fake subscription renewal notification scam

Scammers send fake emails or calls claiming your antivirus, software, or tech support subscription is about to auto-renew for a large amount, urging you to call to cancel.

What to do first

Check your actual subscriptions through the software company's official website or your bank statements

Targets

Non-technical users

Seen in

Global

Business email compromise
↓ 14%

CEO wire transfer fraud

Scammers impersonate a company's CEO or executive via email, urgently requesting a large wire transfer to an account they control.

What to do first

Verify any unusual wire transfer request by calling the executive directly using a known phone number

Targets

Finance teams

Seen in

Global

Business email compromise
↓ 14%

vendor invoice payment redirect scam

Scammers impersonate a trusted vendor and send a fake notice that banking details have changed, diverting legitimate invoice payments to a fraudulent account.

What to do first

Always verify bank account change requests by calling the vendor at a number from your existing records

Targets

Accounts payable teams

Seen in

Global

Business email compromise
↓ 14%

payroll direct deposit redirect scam

Scammers impersonate an employee via email and request that their direct deposit payroll information be changed to a fraudulent bank account.

What to do first

Require in-person or phone verification for any direct deposit changes using a known employee phone number

Targets

HR departments

Seen in

U.S.

Business email compromise
↓ 14%

W-2 tax form data harvest scam

Scammers impersonate executives or HR leaders via email to request bulk W-2 or tax information for all employees, enabling identity theft at scale.

What to do first

Never email W-2 data or bulk employee information based on an email request alone

Targets

HR departments

Seen in

U.S.

Business email compromise
↓ 14%

attorney impersonation BEC scam

Scammers pose as a company's legal counsel or an external attorney, claiming a confidential legal matter requires an urgent wire transfer.

What to do first

Verify any attorney-initiated payment requests by calling the law firm using independently sourced contact information

Targets

Finance teams

Seen in

U.S.

Business email compromise
↓ 14%

supplier impersonation payment fraud

Scammers create fake supplier identities or compromise real supplier email accounts to submit fraudulent invoices for goods or services never provided.

What to do first

Verify all new suppliers through independent research and phone confirmation before making any payments

Targets

Procurement teams

Seen in

Global

Business email compromise
↓ 14%

merger and acquisition confidential BEC scam

Scammers impersonate executives or advisors involved in a pending deal, using the secrecy inherent in M&A transactions to authorize urgent, fraudulent wire transfers.

What to do first

Verify all M&A-related payment requests through pre-established secure communication channels

Targets

CFOs

Seen in

U.S.

Charity scams
↑ 57%

veteran and military charity scam

Fraudulent organizations use names similar to legitimate veteran charities to solicit donations, with most or all funds going to the operators rather than veterans.

What to do first

Verify veteran charities on Charity Navigator or the BBB Wise Giving Alliance before donating

Targets

Donors

Seen in

U.S.

Subscription scams
↑ 37%

auto-renewal trick subscription scam

A product quietly enables auto-renewal during checkout, then charges a higher rate when the initial term ends without adequate notice.

What to do first

Check for auto-renewal settings immediately after any subscription purchase.

Targets

Online subscribers

Seen in

U.S.

Subscription scams
↑ 37%

software license subscription scam

A website sells fake or unauthorized software licenses at a discount, then charges recurring fees for products the buyer never receives or cannot activate.

What to do first

Buy software only from official vendor websites or authorized resellers.

Targets

Small business owners

Seen in

U.S.

Social media scams
↑ 76%

Snapchat account takeover scam

Scammers trick Snapchat users into sharing login credentials or verification codes through fake support messages, then lock them out and use the account for further fraud.

What to do first

Never share verification codes with anyone β€” Snapchat will never ask you to share codes with friends

Targets

Young adults

Seen in

U.S.

Check and money order scams
↑ 37%

fake check overpayment scam

A buyer sends a check for more than the agreed price and asks the seller to wire back the difference before the check bounces.

What to do first

Never accept a check for more than the selling price.

Targets

Sellers

Seen in

U.S.

Check and money order scams
↑ 37%

mystery shopper check scam

Victims receive an unsolicited check with instructions to deposit it and evaluate a wire transfer service by sending money back.

What to do first

Never deposit unsolicited checks from unknown senders.

Targets

Job seekers

Seen in

U.S.

Check and money order scams
↑ 37%

cashier's check fraud

Scammers produce convincing counterfeit cashier's checks that initially pass bank verification but are later returned as fraudulent.

What to do first

Call the issuing bank directly using a number from their official website to verify any cashier's check.

Targets

Sellers

Seen in

U.S.

Check and money order scams
↑ 37%

check washing scam

Criminals steal mail containing checks, use chemicals to erase the payee and amount, then rewrite them for larger sums to different recipients.

What to do first

Use gel pens or security ink when writing checks, as they are resistant to chemical washing.

Targets

Small business owners

Seen in

U.S.

Check and money order scams
↑ 37%

payroll check scam

Scammers posing as employers send fake payroll checks to new hires, then request the employee return a portion for equipment or supplies.

What to do first

Research any new employer through your state's business registration database before accepting payment.

Targets

Job seekers

Seen in

U.S.

Check and money order scams
↑ 37%

stimulus check fraud

Scammers impersonate government agencies and claim victims must pay a fee or verify personal information to receive a stimulus payment.

What to do first

Remember that the IRS will never call, text, or email to ask for personal information or payment.

Targets

Sellers

Seen in

U.S.

Check and money order scams
↑ 37%

tax refund check scam

Fraudsters file fake tax returns using stolen personal information to intercept refund checks or direct deposits.

What to do first

File your tax return as early as possible each year to reduce the window for fraud.

Targets

Job seekers

Seen in

U.S.

Check and money order scams
↑ 37%

prize check advance fee scam

Victims receive a check along with a letter claiming they won a prize but must pay taxes or fees upfront to claim their winnings.

What to do first

Remember that legitimate sweepstakes never require upfront payment to claim a prize.

Targets

Sellers

Seen in

U.S.

Moving and relocation scams
↑ 26%

hostage furniture moving scam

A moving company loads belongings onto a truck, then refuses to deliver unless the customer pays a dramatically inflated price.

What to do first

Under federal law, movers must deliver for no more than 110 percent of a binding estimate β€” know this before moving day.

Targets

Relocating workers

Seen in

U.S.

IRS and tax scams
↑ 52%

tax refund phishing email scam

An email impersonating the IRS or a tax software company claims you are owed a refund and directs you to a fake website to steal your personal and financial information.

What to do first

Do not click links in unsolicited emails claiming to be from the IRS β€” the IRS does not initiate contact by email.

Targets

Taxpayers

Seen in

U.S.

IRS and tax scams
↑ 52%

W-2 employer phishing scam

Scammers impersonate a company executive via email and request that HR or payroll send employee W-2 forms, exposing names, SSNs, and income data for mass identity theft.

What to do first

Verify any executive request for tax data by calling the executive directly using a known phone number.

Targets

Small business owners

Seen in

U.S.

IRS and tax scams
↑ 52%

EIN identity theft scam

Criminals use stolen business information to obtain a fraudulent Employer Identification Number or hijack an existing one to file fake tax returns and open fraudulent accounts.

What to do first

Monitor your business credit reports regularly for unauthorized accounts.

Targets

Small business owners

Seen in

U.S.

IRS and tax scams
↑ 52%

state tax agency impersonator scam

Scammers impersonate a state department of revenue or taxation, claiming you owe state taxes and demanding immediate payment to avoid penalties or legal action.

What to do first

Hang up and call your state tax agency directly using the number on its official website.

Targets

Taxpayers

Seen in

U.S.

IRS and tax scams
↑ 52%

tax debt settlement scam

A company promises to settle your IRS tax debt for pennies on the dollar, charges large upfront fees, and then provides little or no actual help with the IRS.

What to do first

Check the IRS Offer in Compromise Pre-Qualifier tool at irs.gov before hiring any company.

Targets

Taxpayers

Seen in

U.S.

Package delivery scams
↑ 100%

USPS redelivery text scam

A text message impersonating USPS claims a package could not be delivered and provides a link to schedule redelivery, which leads to a phishing site that steals personal information.

What to do first

Do not click links in unsolicited delivery texts β€” check package status directly at usps.com.

Targets

Online shoppers

Seen in

U.S.

Package delivery scams
↑ 100%

UPS tracking phishing email scam

A phishing email impersonates UPS with a fake tracking update or delivery failure notice, directing victims to a spoofed website to steal login credentials or financial information.

What to do first

Track packages only through the official ups.com website or UPS mobile app.

Targets

Online shoppers

Seen in

U.S.

Package delivery scams
↑ 100%

DHL customs payment scam

A message posing as DHL claims your international package is held at customs and requires a fee to be released, directing you to a fraudulent payment portal.

What to do first

Verify customs charges directly through the official DHL website using your tracking number.

Targets

Online shoppers

Seen in

U.S.

Package delivery scams
↑ 100%

address verification delivery scam

A text or email claims a package cannot be delivered because your address is incomplete and asks you to verify it through a phishing link that collects your full personal information.

What to do first

Contact the shipping carrier directly if you believe there is a genuine address issue with a package.

Targets

Online shoppers

Seen in

U.S.

Package delivery scams
↑ 100%

package held at customs scam

Scammers send messages claiming your international package is stuck at customs and you must pay a fee or provide identification to release it, leading to financial theft or identity fraud.

What to do first

Verify any customs charges by contacting the shipping carrier or customs broker directly.

Targets

Online shoppers

Seen in

U.S.

Package delivery scams
↑ 100%

delivery preference update scam

A phishing email or text asks you to update your delivery preferences or notification settings through a fake carrier portal, capturing your login credentials.

What to do first

Manage delivery preferences only by logging in directly through the carrier's official website or app.

Targets

Online shoppers

Seen in

U.S.

Package delivery scams
↑ 100%

shipping label phishing scam

An email with an attachment labeled as a shipping label, invoice, or receipt contains malware that infects your device when opened.

What to do first

Never open email attachments from unknown senders or unexpected shipping notifications.

Targets

Online shoppers

Seen in

U.S.

Gift card scams
↑ 23%

tech support gift card payment scam

A fake tech support agent claims your computer is infected or your account is compromised and demands payment in gift cards to fix the issue.

What to do first

Legitimate tech companies never demand payment in gift cards β€” hang up or close the pop-up.

Targets

Older adults

Seen in

U.S.

Fake review scams
↑ 166%

influencer sponsorship scam

Scammers impersonate brands and offer content creators fake sponsorship deals, then request upfront fees for shipping, samples, or contracts that never materialize.

What to do first

Verify the offer by contacting the brand directly through their official website.

Targets

Content creators

Seen in

U.S.

Fake review scams
↑ 166%

fake Yelp review extortion scam

Scammers threaten small businesses with a flood of fake 1-star Yelp reviews unless the business pays them to stop.

What to do first

Do not pay β€” extortion payments almost always lead to repeated demands.

Targets

Small business owners

Seen in

U.S.

Fake review scams
↑ 166%

fake testimonial service scam

Companies sell fabricated customer testimonials, reviews, and case studies to businesses, enabling them to deceive potential customers with manufactured social proof.

What to do first

Reverse image search testimonial photos to check if they are stock images.

Targets

Small business owners

Seen in

U.S.

Fake ticket scams
↓ 18%

fake airline ticket booking scam

Scam websites or social media ads offer extremely cheap airline tickets, collect payment and personal data, then provide fake confirmation numbers that do not correspond to any real reservation.

What to do first

Book flights directly through the airline website or use well-known travel aggregators with established reputations

Targets

Travelers

Seen in

U.S.

Fake ticket scams
↓ 18%

fake theater ticket scam

Scammers sell fraudulent tickets to popular Broadway, West End, or touring theater productions through unofficial websites and street vendors.

What to do first

Buy tickets only from the theater box office or authorized resellers listed on the production official website

Targets

Concertgoers

Seen in

U.S.

Warranty scams
↑ 13%

phone screen protection plan scam

Scammers sell fake or worthless phone screen protection plans through pop-up ads, SMS, or in-person kiosk sales, collecting monthly fees for coverage that does not exist.

What to do first

Purchase device protection only through your carrier, the phone manufacturer, or a well-known insurer like Asurion or AppleCare

Targets

Phone users

Seen in

U.S.

Fake app scams
↑ 11%

Google Play Store clone app scam

Malicious clone apps on Google Play copy the branding and functionality of popular apps to harvest user data, inject ads, or install additional malware.

What to do first

Download apps only from verified developer accounts and check that the developer matches the official company

Targets

Android users

Seen in

U.S.

Fake app scams
↑ 11%

fake VPN app scam

Malicious apps posing as free VPN services actually log user browsing data, inject ads, or route traffic through servers controlled by the scammer.

What to do first

Use only well-established VPN providers with transparent privacy policies and third-party security audits

Targets

Smartphone users

Seen in

U.S.

Fake app scams
↑ 11%

fake QR scanner app scam

Malicious QR code scanner apps request excessive permissions and display aggressive ads or install malware, despite smartphones having built-in QR scanning capability.

What to do first

Use your phone built-in camera QR scanning feature rather than downloading a third-party scanner app

Targets

Smartphone users

Seen in

U.S.

Small business scams
↑ 68%

fake supplier scam

A fraudulent supplier offers products at below-market prices, collects payment, and either delivers counterfeit goods, inferior products, or nothing at all.

What to do first

Verify the supplier's business registration, physical address, and trade references before placing orders.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

directory listing scam

A company sends an invoice or renewal notice for a business directory listing that was never ordered, pressuring the business to pay for a worthless or nonexistent listing.

What to do first

Review all invoices against actual purchase orders β€” never pay without verifying the service was ordered.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

SEO guarantee scam

An SEO company guarantees first-page Google rankings for a fixed fee, collects payment, and delivers either nothing, black-hat tactics that get the site penalized, or fabricated reports.

What to do first

Be skeptical of any SEO company that guarantees specific rankings β€” legitimate agencies discuss strategy, not guaranteed outcomes.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

business loan advance fee scam

A fraudulent lender guarantees approval for a business loan but requires upfront fees for processing, insurance, or collateral β€” after payment, the loan never materializes.

What to do first

Never pay upfront fees to secure a loan β€” legitimate lenders deduct costs from loan proceeds or charge at closing.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

fake government compliance notice scam

Businesses receive official-looking letters or emails claiming they must pay a fee or file paperwork to comply with a government regulation that is either fake or already handled by existing filings.

What to do first

Verify any compliance requirement directly with the government agency referenced in the notice.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

office supply overcharge scam

A caller claims to confirm an existing supply order and ships unrequested products at inflated prices, then aggressively invoices the business.

What to do first

Establish a policy that only authorized personnel can approve supply orders, and never confirm orders with unknown callers.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

vanity award scam

A company informs a business they have won a prestigious award, then charges fees for a trophy, plaque, or event attendance β€” the award has no real selection criteria.

What to do first

Research the awarding organization independently β€” check for reviews, Better Business Bureau complaints, and verifiable past winners.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

fake BBB accreditation scam

Scammers impersonate the Better Business Bureau and contact businesses offering accreditation, threatening negative ratings, or charging fees for listing improvements that the real BBB never initiated.

What to do first

Hang up and call your local BBB directly using the number from bbb.org to verify any communication.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

domain name renewal scam

A company sends a deceptive notice urging a business to renew or transfer its domain name at an inflated price, designed to look like an official renewal from the current registrar.

What to do first

Always renew domains directly through your current registrar's website β€” never through unsolicited notices.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

advertising insertion order fraud

A scammer sends a business an insertion order or invoice for advertising in a publication, directory, or event program that the business never agreed to.

What to do first

Require all advertising commitments to be in writing with authorized signatures before any work begins.

Targets

Small business owners

Seen in

U.S.

Rideshare scams
↑ 14%

fake Lyft support call scam

A caller posing as Lyft support contacts drivers or riders claiming there is an account issue, then steals login credentials or payment information.

What to do first

Never provide passwords, verification codes, or payment details to inbound callers β€” Lyft and Uber will never ask for these by phone.

Targets

Rideshare users

Seen in

U.S.

Fake government grant scams
↑ 48%

free money from government scam

Scammers claim the government is giving away free grants to individuals, requiring only a small processing fee β€” no such program exists, and the fee is the scam.

What to do first

The government does not contact people to offer free money β€” any such contact is a scam.

Targets

Low-income households

Seen in

U.S.

Fake government grant scams
↑ 48%

small business grant application fee scam

A fake organization offers small business grants but requires an application fee, using professional websites and fake testimonials to appear legitimate.

What to do first

Legitimate government grants are listed on grants.gov and never require application fees.

Targets

Low-income households

Seen in

U.S.

Fake government grant scams
↑ 48%

pandemic relief grant scam

Scammers exploit public awareness of pandemic relief programs by offering fake COVID-19 recovery grants, collecting personal information and fees from applicants.

What to do first

Verify any relief program through official government websites β€” usa.gov, sba.gov, or your country's equivalent.

Targets

Low-income households

Seen in

U.S.

Fake government grant scams
↑ 48%

HUD housing grant scam

Scammers impersonate HUD or local housing authorities, offering grants for home purchases or repairs in exchange for upfront fees or personal information.

What to do first

HUD does not call individuals to offer grants β€” contact your local HUD office directly at hud.gov for legitimate programs.

Targets

Low-income households

Seen in

U.S.

Fake government grant scams
↑ 48%

minority business grant scam

Scammers target minority business owners with fake grants designed specifically for underrepresented entrepreneurs, collecting fees and personal data.

What to do first

Research any grant opportunity through the Minority Business Development Agency (MBDA) at mbda.gov.

Targets

Low-income households

Seen in

U.S.

Fake government grant scams
↑ 48%

research grant impersonation scam

Scammers impersonate research funding agencies like the NSF or NIH, sending fake award notifications that require fees or personal information to claim.

What to do first

Verify any grant notification directly through the funding agency's official website and your institution's grants office.

Targets

Low-income households

Seen in

U.S.

Fake government grant scams
↑ 48%

FEMA grant advance fee scam

After a natural disaster, scammers pose as FEMA representatives offering disaster relief grants that require an upfront fee to process.

What to do first

FEMA never charges application fees for disaster assistance β€” apply directly at disasterassistance.gov or call 1-800-621-FEMA.

Targets

Low-income households

Seen in

U.S.

Fake government grant scams
↑ 48%

state grant phishing scam

Phishing emails impersonate state government agencies, directing recipients to fake portals that harvest credentials and personal information under the guise of a grant application.

What to do first

Access state grant programs only through official .gov websites β€” never through links in unsolicited emails.

Targets

Low-income households

Seen in

U.S.

Fake government grant scams
↑ 48%

education grant scam

Scammers contact students or parents claiming they qualify for an education grant or scholarship that requires a fee to apply or a tax payment to receive.

What to do first

Search for legitimate scholarships through your school's financial aid office, the Department of Education, or studentaid.gov.

Targets

Low-income households

Seen in

U.S.

Fake government grant scams
↑ 48%

women-owned business grant scam

Fake grant programs claim to offer funding exclusively for women-owned businesses, collecting application fees and personal information from female entrepreneurs.

What to do first

Research women-owned business programs through the SBA's Office of Women's Business Ownership at sba.gov.

Targets

Low-income households

Seen in

U.S.

Health product scams
↑ 109%

miracle weight loss pill scam

Ads promote a pill that guarantees dramatic weight loss without diet or exercise changes, using fake before-and-after photos and fabricated clinical study claims.

What to do first

Be skeptical of any weight loss product that promises results without diet or exercise β€” the FDA has not approved any pill that does this.

Targets

Health-conscious consumers

Seen in

U.S.

Health product scams
↑ 109%

celebrity-endorsed supplement scam

Fraudulent ads use deepfakes or fabricated quotes from celebrities to promote unproven health supplements, creating a false sense of credibility.

What to do first

Verify celebrity endorsements through the celebrity's official social media accounts or website.

Targets

Health-conscious consumers

Seen in

U.S.

Fake antivirus scams
↑ 100%

browser popup virus alert scam

A full-screen browser popup mimics a Windows or macOS system alert, claiming your computer is infected and urging you to call a phone number or download software immediately.

What to do first

Force-close the browser using Task Manager (Ctrl+Alt+Delete) or Force Quit (Cmd+Option+Esc) β€” do not call the number.

Targets

Non-technical users

Seen in

U.S.

Fake antivirus scams
↑ 100%

fake Windows Defender alert scam

A webpage or popup imitates a Windows Defender notification, warning of detected threats and directing the user to call a support number or download a removal tool.

What to do first

Close the browser tab or force-quit the browser β€” real Windows Defender alerts never appear in a browser.

Targets

Non-technical users

Seen in

U.S.

Fake antivirus scams
↑ 100%

tech support popup scam

A persistent browser popup warns of a critical security issue and instructs you to call a toll-free number, where scammers charge for unnecessary remote support services.

What to do first

Press Ctrl+Shift+Esc (Windows) or Cmd+Option+Esc (Mac) to force-quit the browser without calling the number.

Targets

Non-technical users

Seen in

U.S.

Fake antivirus scams
↑ 100%

fake Norton renewal email scam

A phishing email impersonates Norton LifeLock with a fake invoice for annual renewal, directing you to call a number where scammers attempt to gain remote access to your computer.

What to do first

Do not call the number β€” go to norton.com directly and check your account for any active subscriptions.

Targets

Non-technical users

Seen in

U.S.

Fake antivirus scams
↑ 100%

mobile security app scam

A fake mobile security app on an unofficial app store or sideloaded APK claims to protect your phone but actually collects personal data, displays intrusive ads, or subscribes you to premium services.

What to do first

Uninstall the app immediately and review all app permissions in your phone's settings.

Targets

Non-technical users

Seen in

U.S.

Dating verification scams
↑ 41%

video chat verification scam

A dating match insists on verifying identity through a specific video chat app that requires payment or downloads malware onto your device.

What to do first

Suggest a mainstream video app like FaceTime, Zoom, or Google Meet β€” a legitimate person will agree.

Targets

Online daters

Seen in

U.S.

Dating verification scams
↑ 41%

premium membership phishing scam

A message claiming to be from a dating app offers a free premium membership upgrade via a link that leads to a phishing page designed to steal your login credentials.

What to do first

Only upgrade your dating app membership through the official app or website β€” never through external links.

Targets

Online daters

Seen in

U.S.

Fake invoice scams
↓ 7%

vendor invoice spoofing scam

Scammers impersonate a company's existing vendor and send a fake invoice with updated banking details, diverting legitimate payments to a fraudulent account.

What to do first

Always verify banking detail changes by calling the vendor directly using a phone number from your records β€” not from the email.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

domain renewal invoice scam

A fake invoice arrives by mail or email urging you to renew your domain name through an unauthorized registrar at an inflated price, sometimes transferring your domain away.

What to do first

Check your actual registrar account directly to verify your domain's renewal status and expiry date.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

SEO services invoice scam

An unsolicited invoice for SEO or website listing services is sent to businesses that never ordered them, hoping the accounts payable team will pay without questioning it.

What to do first

Verify every invoice against purchase orders and approved vendor lists before authorizing payment.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

office supplies invoice scam

Scammers send fake invoices for office supplies such as toner, paper, or printer cartridges that were never ordered, targeting businesses that process many similar invoices.

What to do first

Instruct staff to never provide equipment or ordering details to unsolicited callers.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

subscription service invoice scam

A fake invoice for a software subscription or SaaS product is sent to businesses, mimicking real services like cloud storage, CRM tools, or collaboration platforms.

What to do first

Maintain a central registry of all software subscriptions and cross-reference every invoice against it.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

cloud hosting invoice scam

A fake invoice claiming to be from AWS, Google Cloud, or another hosting provider demands payment for services, targeting companies that use multiple cloud vendors.

What to do first

Verify all cloud invoices by logging directly into your provider's billing console β€” AWS, Google Cloud, and Azure all have online billing dashboards.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

advertising invoice scam

A fake invoice for advertising services β€” such as a Yellow Pages listing, online directory, or Google Ads β€” is sent to businesses that never authorized the purchase.

What to do first

Read every invoice carefully, including fine print β€” look for disclaimers indicating it is a solicitation, not a bill.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

trademark registration invoice scam

After filing a trademark, businesses receive fake invoices from unofficial entities demanding payment for trademark registration, monitoring, or publication services.

What to do first

Only pay trademark fees through the official trademark office website (USPTO.gov in the US) or through your registered attorney.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

annual report filing fee scam

A company receives an official-looking notice demanding payment for its annual report filing, but the notice comes from a private company charging far more than the actual government fee.

What to do first

File your annual report directly through your state's Secretary of State website to pay only the actual government fee.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

government compliance invoice scam

A fake invoice demands payment for mandatory government compliance services such as labor law poster updates, OSHA certifications, or ADA compliance reviews that were never ordered.

What to do first

Verify any compliance requirements directly with the relevant government agency β€” OSHA, DOL, or your state's labor department.

Targets

Small business owners

Seen in

U.S.

HOA and condo scams
↑ 27%

fake HOA maintenance vendor scam

Scammers pose as maintenance vendors approved by the HOA, collecting upfront payment from homeowners for landscaping, painting, or repairs that never get completed.

What to do first

Verify any vendor by checking with your HOA board or management company before paying.

Targets

Homeowners

Seen in

U.S.

HOA and condo scams
↑ 27%

HOA board embezzlement scam

A corrupt HOA board member or treasurer diverts association funds into personal accounts, often through inflated vendor contracts or fictitious expenses.

What to do first

Request annual independent financial audits and attend board meetings to review financial reports.

Targets

HOA members

Seen in

U.S.

DNA and ancestry scams
↑ 15%

DNA diet plan scam

Companies sell expensive personalized diet and nutrition plans claiming to be based on DNA analysis, but the recommendations are generic and not scientifically supported by the test results.

What to do first

Consult a registered dietitian before following any DNA-based diet plan.

Targets

Health-conscious consumers

Seen in

U.S.

Email phishing scams
↑ 80%

invoice attachment malware scam

An email with a fake invoice attachment installs malware when opened, giving attackers access to the victim's computer and network.

What to do first

Never open attachments from unknown senders β€” verify invoices by contacting the vendor directly.

Targets

Office workers

Seen in

U.S.

Email phishing scams
↑ 80%

unsubscribe link trap scam

Phishing emails include a malicious unsubscribe link that, when clicked, confirms your email address is active and leads to credential theft or malware installation.

What to do first

Do not click unsubscribe in emails from unknown senders β€” mark the email as spam instead.

Targets

Office workers

Seen in

U.S.

Email phishing scams
↑ 80%

reply-chain hijacking scam

Attackers compromise an email account and insert malicious messages into existing email threads, exploiting the trust established in ongoing conversations.

What to do first

Be cautious of unexpected attachments or links even in existing email threads.

Targets

Office workers

Seen in

U.S.

Fake government website scams
↑ 125%

fake court summons email scam

An email claims you have been issued a court summons and must click a link to view the details, leading to malware installation or credential theft.

What to do first

Remember that real courts serve legal notices by mail or in person β€” never by email.

Targets

Citizens

Seen in

U.S.

Fake government website scams
↑ 125%

fake building permit website scam

Scam websites pose as local government permit offices, charging homeowners and contractors for building permits that are never filed or processed.

What to do first

Apply for building permits only through your city or county's official government website or in person at the permit office.

Targets

Small business owners

Seen in

U.S.

Fake government website scams
↑ 125%

fake business registration website scam

Fraudulent websites mimic Secretary of State or business registration portals, charging inflated fees for LLC formations, EIN applications, or annual filings that are never processed.

What to do first

File business registrations only through your state's official Secretary of State .gov website.

Targets

Small business owners

Seen in

U.S.

Fake government website scams
↑ 125%

fake tax filing portal scam

Fraudulent websites impersonate IRS or tax authority portals, tricking taxpayers into entering Social Security numbers, income data, and banking details for identity theft and fraudulent refund claims.

What to do first

File taxes only through IRS-authorized e-file providers listed at irs.gov or use IRS Free File.

Targets

Citizens

Seen in

U.S.

Multi-channel phishing scams
↑ 275%

chatbot to phishing link scam

A fake customer support chatbot on a legitimate-looking website builds trust through conversation before directing the user to a phishing page to verify their account or process a refund.

What to do first

Only use chatbots on verified official websites β€” check the URL matches the real company's domain.

Targets

Online users

Seen in

U.S.

Multi-channel phishing scams
↑ 275%

search ad to fake site scam

Scammers buy search engine ads for popular services, placing fake websites above legitimate results where they capture login credentials and payment information.

What to do first

Skip sponsored search results and scroll to organic listings, or type the URL directly into your browser.

Targets

All consumers

Seen in

U.S.

Multi-channel phishing scams
↑ 275%

video call then credential harvest scam

Scammers set up a video call posing as IT support, a vendor, or colleague, then share a screen link or chat message during the call that leads to credential theft.

What to do first

Never enter credentials while sharing your screen in a video call.

Targets

Business professionals

Seen in

U.S.

Brand impersonation scams
↑ 60%

Amazon fake customer service number scam

Scammers post fake Amazon customer service phone numbers on search engines and social media. When victims call, the fake agents request remote access to their computer or demand payment via gift cards.

What to do first

Only contact Amazon support through the official app or website β€” never search for phone numbers online.

Targets

Older adults

Seen in

U.S.

Brand impersonation scams
↑ 60%

Amazon order confirmation phishing scam

You receive an email or text confirming a large purchase you never made, with a link to 'cancel' the order that leads to a phishing site designed to steal your Amazon credentials and payment information.

What to do first

Do not click any links β€” log into your Amazon account directly at amazon.com and check 'Your Orders' for the supposed purchase.

Targets

Online shoppers

Seen in

U.S.

Online shopping scams
↑ 166%

Amazon fake return refund scam

Scammers contact Amazon sellers or buyers claiming a return was never received or a refund is owed, manipulating the process to keep both the product and the money.

What to do first

Sellers should photograph and weigh all outgoing shipments and use tracking with signature confirmation.

Targets

Amazon sellers

Seen in

U.S.

Brand impersonation scams
↑ 60%

Amazon Web Services phishing scam

Phishing emails impersonate AWS, claiming account suspension, billing issues, or security alerts, directing cloud service users to fake login portals that steal credentials and compromise business infrastructure.

What to do first

Never click links in AWS notification emails β€” go directly to the AWS Management Console at console.aws.amazon.com.

Targets

Developers

Seen in

U.S.

Brand impersonation scams
↑ 60%

PayPal invoice scam

Scammers send real PayPal invoices for products or services you never ordered β€” such as cryptocurrency purchases or tech support β€” hoping you will call the embedded phone number and hand over personal information or remote access.

What to do first

If you receive an invoice for something you did not buy, do not call the phone number β€” log into PayPal directly and decline the invoice.

Targets

PayPal users

Seen in

U.S.

Brand impersonation scams
↑ 60%

PayPal account limitation phishing scam

Phishing emails or texts claim your PayPal account has been limited or suspended due to suspicious activity, directing you to a fake login page that harvests your credentials.

What to do first

Never click links in PayPal alert emails β€” open a browser and go directly to paypal.com to check your account status.

Targets

PayPal users

Seen in

U.S.

Online shopping scams
↑ 166%

PayPal overpayment refund scam

A buyer 'accidentally' overpays a seller through PayPal using a stolen credit card or bad check, then asks the seller to refund the excess β€” when the original payment reverses, the seller loses both the product and the refunded amount.

What to do first

Never refund overpayments to a different account or by a different payment method β€” refund only through PayPal's built-in refund feature to the original sender.

Targets

Online sellers

Seen in

U.S.

Brand impersonation scams
↑ 60%

fake PayPal app scam

Scammers show in-person sellers a fake PayPal app with a fabricated payment confirmation screen, making it appear that payment was sent when no real transaction occurred.

What to do first

Never release goods based on a buyer's screen β€” always verify the payment has arrived in your own PayPal account or email.

Targets

In-person sellers

Seen in

U.S.

Brand impersonation scams
↑ 60%

PayPal business account phishing scam

Targeted phishing emails impersonate PayPal Business communications, warning of compliance issues, tax form requirements, or payment holds to trick business owners into surrendering account credentials.

What to do first

PayPal will never ask you to submit tax documents or verify business details through an email link β€” always use the PayPal Business dashboard directly.

Targets

Small business owners

Seen in

U.S.

Email phishing scams
↑ 80%

PayPal fake payment confirmation scam

A buyer sends a forged PayPal confirmation email to a seller to make it appear that payment has been sent, tricking the seller into shipping goods before discovering no actual payment was received.

What to do first

Never rely on email notifications alone β€” always verify payments by logging into your PayPal account directly.

Targets

Online sellers

Seen in

U.S.

Brand impersonation scams
↑ 60%

fake Zelle notification scam

Scammers send fake Zelle payment notifications via email or text claiming someone sent you money, with a phishing link to 'accept' the payment that leads to a credential-stealing website.

What to do first

Zelle payments are deposited automatically if you are enrolled β€” there is no need to click a link to accept payments.

Targets

Zelle users

Seen in

U.S.

Brand impersonation scams
↑ 60%

Zelle account upgrade phishing scam

An email or text claims you need to upgrade your Zelle account to a business or premium tier to receive a pending payment, directing you to a phishing site that steals your banking credentials.

What to do first

Zelle does not have account tiers, business upgrades, or premium accounts that require fees β€” this is always a scam.

Targets

Zelle users

Seen in

U.S.

Brand impersonation scams
↑ 60%

Zelle unauthorized transfer alert scam

A fake fraud alert warns of an unauthorized Zelle transfer from your account, directing you to call a number or click a link that connects you to a scammer posing as bank support.

What to do first

Do not respond to fraud alert texts β€” call your bank directly using the official number on your card or bank statement.

Targets

Bank customers

Seen in

U.S.

Brand impersonation scams
↑ 60%

Zelle support impersonator scam

Scammers pose as Zelle customer support on social media or fake websites, offering to help resolve payment issues but instead stealing credentials or tricking victims into sending money.

What to do first

Zelle does not have its own customer support β€” all Zelle issues are handled by your bank's customer service.

Targets

Zelle users

Seen in

U.S.

Brand impersonation scams
↑ 60%

Zelle business payment scam

A scammer posing as a client or vendor requests business payments via Zelle, exploiting the fact that Zelle transfers are instant and irreversible β€” once sent, the money cannot be recovered through the platform.

What to do first

Verify all payment requests by calling the vendor or client at a known phone number β€” do not use contact information from the email requesting payment.

Targets

Small business owners

Seen in

U.S.

Online shopping scams
↑ 166%

Venmo stolen credit card payment scam

A buyer pays for goods using Venmo funded by a stolen credit card. When the card owner disputes the charge, Venmo reverses the payment β€” the seller loses both the product and the money.

What to do first

Venmo is designed for payments between people who know and trust each other β€” do not use it for transactions with strangers.

Targets

Marketplace sellers

Seen in

U.S.

Brand impersonation scams
↑ 60%

Venmo support phishing scam

Scammers impersonate Venmo customer support on social media or via phone, offering help with account issues while stealing login credentials or convincing victims to send test payments.

What to do first

Venmo support will never ask for your password or ask you to send a payment to verify your account.

Targets

Venmo users

Seen in

U.S.

Brand impersonation scams
↑ 60%

fake Venmo link in text message scam

Scammers send SMS messages with fake Venmo links claiming you received a payment, your account is locked, or your identity needs verification β€” the link installs malware or leads to a credential-stealing site.

What to do first

Never click links in unexpected text messages claiming to be from Venmo β€” open the app directly to check your account.

Targets

Venmo users

Seen in

U.S.

Brand impersonation scams
↑ 60%

Cash App fake customer support scam

Scammers pose as Cash App support agents on social media, phone, or fake websites, requesting login credentials, PINs, or sign-in codes to 'resolve' account issues while actually stealing account access.

What to do first

Cash App support is only available through the app itself β€” tap the profile icon and select 'Support.' There is no official Cash App phone number for customer support.

Targets

Cash App users

Seen in

U.S.

Brand impersonation scams
↑ 60%

Cash App fake payment screenshot scam

A buyer sends a doctored Cash App screenshot showing a completed payment, convincing the seller to hand over goods β€” but no actual payment was ever sent.

What to do first

Never release goods based on a screenshot β€” always verify that the payment appears in your own Cash App activity feed.

Targets

Marketplace sellers

Seen in

U.S.

Brand impersonation scams
↑ 60%

fake App Store purchase alert scam

A fraudulent email claims you made an expensive App Store purchase you did not authorize, urging you to click a cancellation link that leads to a credential-stealing site.

What to do first

Check your actual purchase history in the App Store app or at reportaproblem.apple.com.

Targets

iPhone users

Seen in

U.S.

Tech support scams
↑ 64%

fake AppleCare warranty scam

Scammers call or email claiming your AppleCare warranty is expiring, pressuring you to renew immediately through a fraudulent payment process.

What to do first

Hang up on unsolicited calls about AppleCare β€” Apple does not make outbound warranty renewal calls.

Targets

iPhone users

Seen in

U.S.

Tech support scams
↑ 64%

FaceTime screen recording scam

Scammers initiate a FaceTime call, trick the victim into sharing sensitive information on screen, then use the recording for blackmail or identity theft.

What to do first

Never share your screen on FaceTime with anyone you did not initiate the call with.

Targets

Young adults

Seen in

U.S.

Tech support scams
↑ 64%

fake Apple support call scam

Robocalls or live callers impersonate Apple Support, claiming your iCloud account has been breached and requesting remote access to your device or payment to fix the issue.

What to do first

Hang up immediately β€” Apple never makes unsolicited phone calls about account problems.

Targets

Older adults

Seen in

U.S.

Tech support scams
↑ 64%

Find My iPhone ransom scam

After compromising an Apple ID, scammers use Find My to remotely lock the victim's iPhone or Mac and display a ransom message demanding payment to unlock it.

What to do first

Contact Apple Support directly at support.apple.com with proof of ownership to regain access to your account.

Targets

iPhone users

Seen in

U.S.

Tech support scams
↑ 64%

Windows license expired popup scam

A fake browser popup claims your Windows license has expired and you must call a support number or pay immediately to reactivate, leading to tech support fraud.

What to do first

Close the browser using Task Manager (Ctrl+Alt+Delete) if the popup cannot be dismissed normally.

Targets

Windows users

Seen in

U.S.

Brand impersonation scams
↑ 60%

Microsoft 365 renewal phishing scam

A phishing email claims your Microsoft 365 subscription is expiring and you must update your payment information, redirecting to a fake Microsoft login page.

What to do first

Check your subscription status directly at account.microsoft.com, never through email links.

Targets

Business professionals

Seen in

U.S.

Email phishing scams
↑ 80%

Teams meeting invite phishing scam

A fake Microsoft Teams meeting invitation arrives by email, and clicking the join link leads to a credential harvesting page disguised as the Teams login.

What to do first

Hover over the meeting link before clicking to verify it points to a legitimate Microsoft domain.

Targets

Business professionals

Seen in

U.S.

Tech support scams
↑ 64%

fake Microsoft support call scam

A caller claiming to be from Microsoft says they have detected a virus or security problem on your computer and requests remote access to fix it for a fee.

What to do first

Hang up immediately β€” Microsoft will never call you unsolicited about your computer.

Targets

Older adults

Seen in

U.S.

Email phishing scams
↑ 80%

OneDrive sharing notification phishing scam

A fake OneDrive sharing notification email claims someone shared a document with you, but the link leads to a credential-stealing page.

What to do first

Verify the sender by contacting them through a separate channel before clicking any shared document link.

Targets

Business professionals

Seen in

U.S.

Tech support scams
↑ 64%

Windows Defender alert popup scam

A fake browser popup mimics a Windows Defender alert claiming your computer is infected, urging you to call a fraudulent support number immediately.

What to do first

Press Ctrl+Alt+Delete and use Task Manager to force-close the browser β€” do not call the number.

Targets

Windows users

Seen in

U.S.

Brand impersonation scams
↑ 60%

Azure billing phishing scam

IT administrators receive fake Azure billing alerts claiming unusual charges or failed payments, leading to credential theft through a fake Azure portal login.

What to do first

Verify billing directly at portal.azure.com β€” never use links from email notifications.

Targets

IT administrators

Seen in

U.S.

Brand impersonation scams
↑ 60%

Google Business Profile verification scam

Scammers posing as Google contact business owners claiming their Google Business Profile needs immediate verification or will be removed from search results.

What to do first

Know that Google does not charge for business profile verification and rarely makes unsolicited calls about it.

Targets

Small business owners

Seen in

U.S.

Brand impersonation scams
↑ 60%

Google Ads billing scam

Advertisers receive fake Google Ads billing notifications about failed payments or suspicious charges, leading to phishing pages that steal account credentials.

What to do first

Check your billing status directly at ads.google.com β€” never through email links.

Targets

Digital marketers

Seen in

U.S.

Fake review scams
↑ 166%

fake Google review extortion scam

Scammers threaten to flood a business with fake negative Google reviews unless the business pays a fee, or offer to remove existing negative reviews for a price.

What to do first

Do not pay β€” report the fake reviews to Google through your Business Profile by flagging each one as inappropriate.

Targets

Small business owners

Seen in

U.S.

Email phishing scams
↑ 80%

Google Workspace admin phishing scam

IT administrators receive fake Google Workspace notifications about policy changes, license issues, or security alerts, leading to admin credential theft.

What to do first

Access the admin console directly at admin.google.com β€” never through email links.

Targets

IT administrators

Seen in

U.S.

Brand impersonation scams
↑ 60%

Google Maps business listing scam

Scammers create or hijack Google Maps business listings with fake phone numbers, intercepting calls meant for legitimate businesses to redirect customers or steal information.

What to do first

Always verify a business phone number by checking their official website before calling a number from Google Maps.

Targets

Consumers

Seen in

U.S.

Brand impersonation scams
↑ 60%

Chrome extension malware scam

Malicious Chrome extensions disguised as useful tools steal browsing data, inject ads, or capture credentials from every website the victim visits.

What to do first

Review installed extensions regularly at chrome://extensions and remove any you do not recognize or no longer use.

Targets

Chrome users

Seen in

U.S.

Online shopping scams
↑ 166%

Craigslist romance through personal ads scam

Scammers use Craigslist personal ads or community sections to initiate fake romantic relationships, eventually requesting money for emergencies, travel, or medical bills.

What to do first

Never send money to someone you have not met in person, regardless of how strong the emotional connection feels.

Targets

Older adults

Seen in

U.S.

Social media scams
↑ 76%

LinkedIn connection request phishing scam

Attackers send connection requests with phishing links disguised as shared documents or professional resources, leading to credential-harvesting pages.

What to do first

Never click links in LinkedIn connection requests from people you do not recognize.

Targets

Professionals

Seen in

U.S.

Social media scams
↑ 76%

LinkedIn verification badge scam

Phishing messages offer to help users get a 'verified' badge on LinkedIn, directing them to fake sites that steal credentials or charge fraudulent fees.

What to do first

LinkedIn's identity verification is done through the official app using a government ID and selfie β€” never through external links or payments.

Targets

Professionals

Seen in

U.S.

Social media scams
↑ 76%

LinkedIn endorsement-for-access scam

Scammers offer to endorse your LinkedIn skills in exchange for clicking a link or downloading a file, which installs malware or leads to a credential-harvesting page.

What to do first

Never download files or click links from LinkedIn connections you do not know personally.

Targets

Professionals

Seen in

U.S.

Cryptocurrency scams
↓ 8%

fake Coinbase Wallet app scam

Counterfeit Coinbase Wallet apps published on unofficial app stores or promoted through ads steal seed phrases and drain cryptocurrency holdings.

What to do first

Only download Coinbase Wallet from the official Apple App Store or Google Play Store β€” verify the developer is Coinbase Inc.

Targets

Cryptocurrency investors

Seen in

U.S.

Brand impersonation scams
↑ 60%

Coinbase customer support impersonator scam

Scammers pose as Coinbase support agents via phone calls, social media, or fake support websites to trick users into sharing login credentials or granting remote access to their devices.

What to do first

Coinbase support will never call you first, ask for your password, or request remote access to your device.

Targets

Cryptocurrency investors

Seen in

U.S.

Cryptocurrency scams
↓ 8%

fake Coinbase Pro upgrade scam

Scammers promote a fraudulent 'Coinbase Pro upgrade' through emails or ads, tricking users into transferring cryptocurrency to a fake platform where funds are stolen.

What to do first

Coinbase merged Coinbase Pro into its main platform as Advanced Trade β€” there is no separate upgrade process requiring fund transfers.

Targets

Active traders

Seen in

U.S.

Brand impersonation scams
↑ 60%

Coinbase Commerce invoice scam

Fraudulent invoices sent via Coinbase Commerce or mimicking its interface trick businesses and individuals into paying for goods or services they never ordered.

What to do first

Never pay an invoice you did not expect β€” verify with the supposed sender through a separate communication channel.

Targets

Small business owners

Seen in

U.S.

Brand impersonation scams
↑ 60%

fake Uber support call scam

Scammers call Uber riders or drivers claiming to be from Uber support, requesting login credentials or payment information to resolve a fabricated account issue.

What to do first

Uber support communicates primarily through the app β€” hang up on unsolicited calls claiming to be from Uber.

Targets

Uber riders

Seen in

U.S.

Rideshare scams
↑ 14%

Uber gift card payment for ride scam

Fake Uber drivers or scammers posing as Uber support demand payment via gift cards instead of the app, often targeting elderly passengers or those unfamiliar with the platform.

What to do first

Uber never requests payment through gift cards β€” all ride payments are processed through the app.

Targets

Older adults

Seen in

U.S.

Brand impersonation scams
↑ 60%

fake Airbnb support scam

Scammers impersonate Airbnb customer support via phone calls, emails, or fake help websites to steal login credentials, payment information, or trick users into making off-platform payments.

What to do first

Contact Airbnb support only through the official app or airbnb.com β€” never through phone numbers found in Google search results.

Targets

Travelers

Seen in

U.S.

Package delivery scams
↑ 100%

USPS tracking number phishing scam

Phishing emails provide a fake USPS tracking number and link, directing recipients to a spoofed tracking page that installs malware or steals personal information.

What to do first

Track packages only by entering the tracking number directly at usps.com β€” never click tracking links in emails.

Targets

Online shoppers

Seen in

U.S.

Package delivery scams
↑ 100%

USPS postage due notice scam

Fake postage due notifications arrive via email or text claiming additional postage is required for a package, directing victims to pay a small fee on a phishing website.

What to do first

USPS handles postage-due items by attaching a notice to the physical mail piece and collecting payment upon delivery or at the post office β€” never through online links.

Targets

Online shoppers

Seen in

U.S.

Brand impersonation scams
↑ 60%

UPS tracking update phishing email

A phishing email mimics UPS tracking notifications with a fake tracking number and a link that installs malware or captures login credentials.

What to do first

Never click tracking links in emails β€” copy the tracking number and enter it directly at ups.com.

Targets

Online shoppers

Seen in

U.S.

Package delivery scams
↑ 100%

UPS customs clearance fee scam

A message claims your UPS international shipment is held at customs and you must pay a clearance fee via a link, which is a phishing page designed to steal payment information.

What to do first

Contact UPS directly through the official website or phone number to verify any customs charges.

Targets

International shoppers

Seen in

U.S.

Brand impersonation scams
↑ 60%

The UPS Store impersonator scam

Scammers impersonate The UPS Store via email or phone, offering fake notary, printing, or mailbox services to collect personal documents and payment information.

What to do first

Verify any UPS Store communication by calling the specific store location directly using the number listed on theupsstore.com.

Targets

Small business owners

Seen in

U.S.

Brand impersonation scams
↑ 60%

UPS shipping label email malware scam

A phishing email claims to contain a UPS shipping label attachment, but the file is malware disguised as a PDF or ZIP that installs a trojan or ransomware on the victim's computer.

What to do first

Never open unexpected attachments β€” UPS does not send shipping labels via unsolicited email.

Targets

Small business owners

Seen in

U.S.

Package delivery scams
↑ 100%

UPS driver impersonation scam

A person wearing a UPS-like uniform arrives at a home or business claiming a COD payment is required, additional fees are owed, or requesting a signature on a device that captures personal information.

What to do first

Verify any COD shipment by calling UPS at 1-800-742-5877 before making any payment.

Targets

Homeowners

Seen in

U.S.

Package delivery scams
↑ 100%

FedEx Express customs fee scam

A phishing email claims your FedEx Express international shipment requires a customs clearance payment before delivery, directing to a fake payment portal.

What to do first

Contact FedEx directly at 1-800-463-3339 to verify any customs charges.

Targets

International shoppers

Seen in

U.S.

Brand impersonation scams
↑ 60%

FedEx Office phishing scam

A phishing email impersonates FedEx Office, claiming a print order or document is ready for pickup with a link that installs malware or harvests login credentials.

What to do first

If you did not place a FedEx Office order, ignore and delete the email.

Targets

Small business owners

Seen in

U.S.

Brand impersonation scams
↑ 60%

FedEx commercial invoice phishing scam

A phishing email targets businesses with a fake FedEx commercial invoice attachment that contains malware or links to a credential-harvesting portal.

What to do first

Verify any FedEx invoices by logging in to your FedEx Billing Online account at fedex.com.

Targets

Small business owners

Seen in

U.S.

Brand impersonation scams
↑ 60%

FedEx account billing scam

A phishing email claims there is an issue with your FedEx shipping account billing, directing you to a fake portal to update payment information.

What to do first

Access your FedEx account billing by navigating directly to fedex.com.

Targets

Small business owners

Seen in

U.S.

Package delivery scams
↑ 100%

FedEx delivery exception notification scam

A phishing message claims a delivery exception has occurred on your FedEx shipment, urging you to click a link to resolve the issue β€” leading to a fake site that steals credentials or installs malware.

What to do first

Check for legitimate delivery exceptions by logging in to fedex.com directly.

Targets

Online shoppers

Seen in

U.S.

Brand impersonation scams
↑ 60%

Zillow mortgage rate bait scam

Deceptive ads or emails promise unrealistically low mortgage rates through Zillow, collecting personal and financial information from hopeful borrowers.

What to do first

Compare mortgage rates on trusted sites like zillow.com, bankrate.com, or your own bank.

Targets

Homebuyers

Seen in

U.S.

Brand impersonation scams
↑ 60%

fake eBay invoice email scam

A phishing email mimics an eBay invoice for a purchase you never made, prompting you to click a link to dispute or cancel the charge, which leads to a credential-harvesting page.

What to do first

Check your eBay purchase history by logging in directly at ebay.com β€” do not click email links.

Targets

eBay users

Seen in

U.S.

Brand impersonation scams
↑ 60%

Robinhood free stock promotion scam

Fake ads or messages promise free stocks from Robinhood, directing victims to phishing sites that collect personal information and Robinhood login credentials.

What to do first

Robinhood referral promotions are only available through the official app and website at robinhood.com.

Targets

Young adults

Seen in

U.S.

Brand impersonation scams
↑ 60%

Robinhood support impersonator scam

Scammers pose as Robinhood customer support on social media, forums, or phone calls, convincing users to share credentials or grant remote access to their devices.

What to do first

Contact Robinhood support only through the Help section within the official Robinhood app.

Targets

Robinhood users

Seen in

U.S.

Tax season scams
↑ 66%

W-2 phishing scam targeting employers

Cybercriminals send spoofed emails to company payroll or HR departments posing as executives, requesting all employee W-2 forms, which are then used for mass identity theft.

What to do first

Verify all W-2 requests by calling the executive directly using a known phone number β€” never respond to the email.

Targets

HR professionals

Seen in

U.S.

Tax season scams
↑ 66%

tax transcript request phishing scam

Phishing emails impersonate the IRS or tax software providers, directing victims to fake sites where they enter credentials to download a tax transcript, which is then used for identity theft.

What to do first

Access your tax transcript only through irs.gov/individuals/get-transcript β€” never through emailed links.

Targets

Taxpayers

Seen in

U.S.

Tax season scams
↑ 66%

employee retention credit scam

Aggressive promoters convince businesses they qualify for the Employee Retention Credit when they do not, charging large upfront fees and filing fraudulent claims that trigger IRS audits and penalties.

What to do first

Consult a trusted, independent tax professional about ERC eligibility before engaging any promoter.

Targets

Small business owners

Seen in

U.S.

Tax season scams
↑ 66%

charitable donation receipt fraud

Scammers sell fake charitable donation receipts to taxpayers seeking inflated deductions, or fraudulent charities issue inflated receipts for minimal donations to enable tax fraud.

What to do first

Verify any charity's tax-exempt status using the IRS Tax Exempt Organization Search at irs.gov/charities.

Targets

Taxpayers

Seen in

U.S.

Holiday shopping scams
β†’ 0%

black friday fake deal scam

Scammers create fake online stores or social media ads offering impossibly low Black Friday prices on popular electronics and brand-name goods, then steal payment information or ship counterfeit items.

What to do first

Verify deals by going directly to the retailer's official website rather than clicking social media ads.

Targets

Online shoppers

Seen in

U.S.

Holiday shopping scams
β†’ 0%

fake shipping notification scam

Scammers send fake shipping notifications via text or email impersonating carriers like USPS, FedEx, or UPS during the holidays, leading victims to phishing sites or malware downloads.

What to do first

Do not click links in unexpected shipping notifications β€” track packages directly on the carrier's official website.

Targets

Online shoppers

Seen in

U.S.

Back-to-school scams
↑ 21%

laptop deal phishing scam

Phishing ads and emails target students with fake back-to-school laptop deals from major brands, leading to credential theft or purchase of nonexistent products.

What to do first

Purchase electronics only from authorized retailers or your school's official technology store with education pricing.

Targets

College students

Seen in

U.S.

Natural disaster scams
↑ 55%

disaster loan advance fee scam

Scammers pose as SBA disaster loan agents or private lenders, promising fast approval for disaster relief loans in exchange for upfront application fees that are never refunded.

What to do first

Apply for SBA disaster loans only at sba.gov/disaster or by visiting a local SBA disaster center β€” the SBA never charges application fees.

Targets

Small business owners

Seen in

U.S.

Senior-targeted scams
↑ 42%

computer repair door-to-door scam

Individuals go door to door offering computer repair or virus removal services to seniors, then install malware, steal data, or charge exorbitant fees for unnecessary work.

What to do first

Never allow unsolicited visitors access to your computer β€” legitimate tech companies do not make door-to-door service calls.

Targets

Seniors

Seen in

U.S.

Student-targeted scams
↑ 22%

fake study abroad program scam

Fraudulent companies advertise study abroad programs that collect thousands in fees for housing, tuition, and visa assistance but provide no actual program or support upon arrival.

What to do first

Only use study abroad programs vetted by your university's international programs office.

Targets

College students

Seen in

U.S.

Remote worker scams
↑ 20%

remote job equipment purchase scam

New remote hires are told to purchase equipment from a specific vendor using a company check that later bounces, leaving the employee out of pocket for the full amount.

What to do first

Legitimate employers provide equipment directly or reimburse after verified purchase β€” they never send checks to buy from unknown vendors.

Targets

Remote workers

Seen in

U.S.

Remote worker scams
↑ 20%

payroll redirect scam targeting remote workers

Scammers compromise or impersonate an employee's email and send payroll or HR a request to change direct deposit information, diverting paychecks to the scammer's account.

What to do first

Always verify direct deposit change requests through a phone call to the employee using a known number, not the one in the email.

Targets

Remote workers

Seen in

U.S.

Toll road text scams
β†’ 0%

highway camera violation text scam

Fraudulent texts claim a highway camera captured the recipient's vehicle committing a violation, with a link to view the photo and pay the fine, which actually leads to a malware or phishing site.

What to do first

Do not click links to view alleged violation photos β€” legitimate citations arrive by mail.

Targets

Drivers

Seen in

U.S.

QR code scams
↑ 27%

business card QR code scam

Scammers distribute fake business cards with QR codes at networking events or public places that lead to malware downloads or credential-harvesting phishing sites.

What to do first

Search for the person and company online independently rather than scanning the QR code.

Targets

Professionals

Seen in

U.S.

Financial relief scams
↑ 16%

tariff relief application scam

Scammers exploit confusion around tariff changes by impersonating government agencies offering fake tariff relief applications that collect Social Security numbers and financial information.

What to do first

Verify any government relief program through official .gov websites or by calling the agency directly.

Targets

Small business owners

Seen in

U.S.

Financial relief scams
↑ 16%

small business disaster loan scam

Scammers impersonate the SBA or state agencies, offering fake disaster relief loans to small business owners and collecting application fees and sensitive business financial data.

What to do first

Apply for SBA disaster loans only through sba.gov or by calling the SBA directly at their published number.

Targets

Small business owners

Seen in

U.S.

Misinformation scams
↑ 80%

fake celebrity death clickbait scam

Viral social media posts falsely report a celebrity's death to generate clicks on links that lead to malware downloads, phishing sites, or ad-fraud pages.

What to do first

Verify any celebrity death news by checking reputable news outlets before clicking social media links.

Targets

Social media users

Seen in

U.S.

Ponzi and pyramid schemes
↓ 3%

Energy and utility MLM scheme

An energy company uses MLM recruitment to sell electricity or gas plans, with agents earning more from signing up new agents than from providing competitive energy rates.

What to do first

Compare the offered rate, including all fees, to your current utility rate before switching.

Targets

Homeowners

Seen in

U.S.

Ponzi and pyramid schemes
↓ 3%

Legal services MLM scheme

A company sells prepaid legal service plans through MLM recruitment, where agents earn more from signing up new agents than from the legal plans providing value to members.

What to do first

Compare the monthly plan cost to simply paying for legal consultations as needed.

Targets

Adults

Seen in

U.S.

Related audiences