Scam category
Account takeover scams
Account takeover scams focus on access first and theft second. Search demand usually comes from people trying to understand suspicious login alerts, MFA code requests, or hacked accounts.
Category activity
“SIM swap scam”
↑ 587%Watch for
- A support agent asks for a one-time passcode or MFA approval.
- The reset or appeal message sends you to an unfamiliar login page.
- A recovery helper claims insider access to restore the account faster.
Common searches
OpenScam News Feed
SIM swap account takeover scam
A criminal takes over a target's phone number through carrier manipulation and then resets passwords, intercepts OTPs, and drains financial or social accounts.
Set a carrier account PIN.
Professionals
U.S.
Session cookie theft account takeover scam
A phishing page steals browser session tokens so attackers can enter accounts without triggering a normal password prompt.
Sign out of all sessions and rotate passwords after suspected browser compromise.
Professionals
Global
One-time passcode support call scam
A fake support agent says they are stopping suspicious activity and needs the latest one-time passcode to secure the account.
Never read one-time codes to inbound callers.
Bank users
Global
Verified badge phishing takeover scam
A message promises badge verification or page appeals but steals the creator's password and session.
Use the platform's in-app support center instead of message links.
Creators
Global
Apple ID security alert takeover scam
A polished alert page claims your Apple ID is locked and captures credentials plus device passcodes or MFA approvals.
Open device settings directly and review security alerts there.
iPhone users
Global
Meta business page takeover scam
A fake policy or copyright notice steals admin credentials and locks a business out of its page or ad account.
Check account quality from the Meta dashboard before clicking anything.
Small businesses
Global
Cloud storage password reset scam
A fake cloud-storage notice says files were shared suspiciously and captures the victim's account credentials or approval codes.
Use the storage provider app or website directly to review security alerts.
Remote workers
Global
Gaming account trade takeover scam
A fake trader or marketplace asks for temporary login or verification and takes over a valuable gaming account.
Do not enter game credentials into third-party trade or verification pages.
Gamers
Global
Hotel loyalty account takeover scam
A loyalty member receives a fake points-expiry notice that leads to account takeover and stolen reward balances.
Sign in from the hotel's app or website directly to verify your points.
Frequent travelers
Global
Microsoft 365 admin consent scam
A fake Microsoft security or compliance workflow asks a business user or admin to approve an app request that silently grants attacker access.
Review app consent requests directly from the official admin console before approving anything.
IT admins
Global
Shopify admin security reset scam
A store owner gets a fake security or policy reset notice that steals credentials and takes over the store admin panel.
Log into the Shopify admin from your saved bookmark and review alerts there.
Online stores
Global
PayPal Business security center scam
A merchant sees a fake PayPal security center page that captures credentials, approval flows, and sometimes bank confirmation steps.
Open the PayPal business dashboard directly and review alerts there, not from a message link.
Small businesses
Global
Airline loyalty password reset scam
A frequent flyer gets an urgent password reset notice and loses loyalty miles after entering credentials into a fake airline security page.
Open the airline app or site directly and review security events there.
Frequent travelers
Global
Related categories