Profession page

Scams targeting freelancers and contractors

Freelancers and contractors get targeted anywhere trust has to form quickly: inbound project offers, recruiter outreach, portfolio requests, contract setup, and remote-work onboarding. This page groups scams that exploit that speed and informality.

298 scams in this profession viewAll professions

Common searches

freelancer scamfake client scamremote contract scamproject payment scam

Why this profession gets targeted

  • Independent workers often deal with new clients and recruiters without a long trust history.
  • Project urgency makes fake deposits, contract changes, and setup-fee stories easier to sell.
  • Portfolio reviews, NDA requests, and onboarding docs can be used to harvest identity or account access.

What to check first

  • Verify the client, recruiter, or company through a website, switchboard, or public company profile you found independently.
  • Never pay to unlock work, equipment, training, or a project portal.
  • Treat invoice changes, wallet requests, and off-platform contract pushes as suspicious until verified through a second channel.
Tech support scams
↑ 64%

fake subscription renewal notification scam

Scammers send fake emails or calls claiming your antivirus, software, or tech support subscription is about to auto-renew for a large amount, urging you to call to cancel.

What to do first

Check your actual subscriptions through the software company's official website or your bank statements

Targets

Non-technical users

Seen in

Global

Recovery fraud
↑ 138%

Lawsuit settlement recovery scam

A fake legal team says your prior scam loss is part of a settlement, but court taxes or release fees are needed before payment.

What to do first

Independently verify any legal claim before sending release fees.

Targets

Prior fraud victims

Seen in

Global

Government impersonation
↑ 52%

Police fine payment link scam

A fake police notice says there is an unpaid fine or investigation and directs the victim to a payment or identity portal.

What to do first

Search for the agency site manually rather than following the notice.

Targets

Drivers

Seen in

Global

Charity scams
↑ 57%

religious charity donation scam

Scammers exploit religious trust by posing as faith-based charities or church representatives to solicit donations that are never used for their stated religious or charitable purpose.

What to do first

Verify religious charities through your denomination's official directories and on Charity Navigator

Targets

Religious communities

Seen in

U.S.

Charity scams
↑ 57%

fake child sponsorship charity scam

Scammers impersonate or create fake child sponsorship programs, collecting monthly donations that never reach any children in need.

What to do first

Only sponsor children through well-established organizations verified on Charity Navigator or GuideStar

Targets

Donors

Seen in

U.S.

Charity scams
↑ 57%

fake political donation scam

Scammers create fake political action committees or impersonate real campaigns to collect donations that go to personal enrichment instead of political causes.

What to do first

Verify political organizations through the FEC's database at fec.gov before donating

Targets

Donors

Seen in

U.S.

Charity scams
↑ 57%

crowdfunding community project fraud

Scammers create crowdfunding campaigns for fake community projects such as parks, memorials, or neighborhood improvements, collect donations, and disappear.

What to do first

Verify that community project campaigns are endorsed by local government or established nonprofits

Targets

Donors

Seen in

U.S.

IRS and tax scams
↑ 52%

tax refund phishing email scam

An email impersonating the IRS or a tax software company claims you are owed a refund and directs you to a fake website to steal your personal and financial information.

What to do first

Do not click links in unsolicited emails claiming to be from the IRS β€” the IRS does not initiate contact by email.

Targets

Taxpayers

Seen in

U.S.

IRS and tax scams
↑ 52%

W-2 employer phishing scam

Scammers impersonate a company executive via email and request that HR or payroll send employee W-2 forms, exposing names, SSNs, and income data for mass identity theft.

What to do first

Verify any executive request for tax data by calling the executive directly using a known phone number.

Targets

Small business owners

Seen in

U.S.

IRS and tax scams
↑ 52%

property tax lien scam

Scammers send official-looking letters or make calls claiming there is a lien on your property due to unpaid taxes and demand immediate payment to remove it.

What to do first

Contact your county tax assessor's office directly to verify any claims about liens on your property.

Targets

Taxpayers

Seen in

U.S.

Smishing
↑ 56%

Payroll correction text phishing scam

An employee receives a text saying payroll failed and that banking details need immediate confirmation to avoid a pay delay.

What to do first

Contact payroll through your employer's real HR portal.

Targets

Employees

Seen in

Global

Account takeover
↑ 60%

Apple ID security alert takeover scam

A polished alert page claims your Apple ID is locked and captures credentials plus device passcodes or MFA approvals.

What to do first

Open device settings directly and review security alerts there.

Targets

iPhone users

Seen in

Global

Account takeover
↑ 60%

Microsoft 365 admin consent scam

A fake Microsoft security or compliance workflow asks a business user or admin to approve an app request that silently grants attacker access.

What to do first

Review app consent requests directly from the official admin console before approving anything.

Targets

IT admins

Seen in

Global

Account takeover
↑ 60%

Shopify admin security reset scam

A store owner gets a fake security or policy reset notice that steals credentials and takes over the store admin panel.

What to do first

Log into the Shopify admin from your saved bookmark and review alerts there.

Targets

Online stores

Seen in

Global

Brand impersonation scams
↑ 60%

Amazon account suspension scam

An email or text claims your Amazon account has been suspended due to suspicious activity and directs you to a fake login page to steal your Amazon credentials and payment information.

What to do first

Log in to Amazon directly by typing amazon.com into your browser β€” never through email links.

Targets

Online consumers

Seen in

U.S.

Brand impersonation scams
↑ 60%

Apple ID locked scam

A message claims your Apple ID has been locked or will be disabled and directs you to a fake Apple website to enter your credentials, giving scammers access to your iCloud, payments, and devices.

What to do first

Check your Apple ID status by going directly to appleid.apple.com β€” never through links in emails.

Targets

Online consumers

Seen in

U.S.

Brand impersonation scams
↑ 60%

ISP service interruption scam

An email or call impersonating your internet service provider claims there is a billing issue or security threat and asks you to verify your account by providing personal or payment details.

What to do first

Log in to your ISP account directly through the official website to check for any genuine billing issues.

Targets

Online consumers

Seen in

U.S.

Brand impersonation scams
↑ 60%

streaming account compromised scam

A phishing email claims your Netflix, Disney+, or other streaming account has been compromised or your payment failed, directing you to a fake login page to steal your credentials.

What to do first

Go directly to the streaming service's website or app to check your account status.

Targets

Online consumers

Seen in

U.S.

Brand impersonation scams
↑ 60%

social media platform impersonation scam

A message claims your Facebook, Instagram, or other social media account has been flagged for violation and asks you to verify your identity through a fake login page to avoid account deletion.

What to do first

Check account status by logging into the platform directly β€” not through links in messages.

Targets

Online consumers

Seen in

U.S.

Brand impersonation scams
↑ 60%

antivirus subscription renewal scam

A fake email or pop-up claims your antivirus subscription is expiring or has been auto-renewed for a large amount and directs you to call a number or click a link to cancel or get a refund.

What to do first

Check your actual antivirus subscription status by logging into the official vendor's website directly.

Targets

Online consumers

Seen in

U.S.

Brand impersonation scams
↑ 60%

Amazon Web Services phishing scam

Phishing emails impersonate AWS, claiming account suspension, billing issues, or security alerts, directing cloud service users to fake login portals that steal credentials and compromise business infrastructure.

What to do first

Never click links in AWS notification emails β€” go directly to the AWS Management Console at console.aws.amazon.com.

Targets

Developers

Seen in

U.S.

Brand impersonation scams
↑ 60%

PayPal account limitation phishing scam

Phishing emails or texts claim your PayPal account has been limited or suspended due to suspicious activity, directing you to a fake login page that harvests your credentials.

What to do first

Never click links in PayPal alert emails β€” open a browser and go directly to paypal.com to check your account status.

Targets

PayPal users

Seen in

U.S.

Brand impersonation scams
↑ 60%

PayPal business account phishing scam

Targeted phishing emails impersonate PayPal Business communications, warning of compliance issues, tax form requirements, or payment holds to trick business owners into surrendering account credentials.

What to do first

PayPal will never ask you to submit tax documents or verify business details through an email link β€” always use the PayPal Business dashboard directly.

Targets

Small business owners

Seen in

U.S.

Brand impersonation scams
↑ 60%

Zelle business payment scam

A scammer posing as a client or vendor requests business payments via Zelle, exploiting the fact that Zelle transfers are instant and irreversible β€” once sent, the money cannot be recovered through the platform.

What to do first

Verify all payment requests by calling the vendor or client at a known phone number β€” do not use contact information from the email requesting payment.

Targets

Small business owners

Seen in

U.S.

Brand impersonation scams
↑ 60%

LinkedIn Learning impersonator scam

Fake messages claim to offer free or discounted LinkedIn Learning courses, directing users to phishing sites that steal login credentials or payment information.

What to do first

Access LinkedIn Learning only through the official LinkedIn website or app β€” never through links in unsolicited messages.

Targets

Professionals

Seen in

U.S.

Brand impersonation scams
↑ 60%

LinkedIn Premium account phishing scam

Phishing emails disguised as LinkedIn Premium upgrade offers or billing alerts trick users into entering credentials on fake login pages.

What to do first

Check your LinkedIn subscription status by logging in directly at linkedin.com β€” never through emailed links.

Targets

Professionals

Seen in

U.S.

Brand impersonation scams
↑ 60%

LinkedIn CEO impersonation InMail scam

Scammers create fake LinkedIn profiles of company executives and send InMail to employees requesting urgent wire transfers, gift card purchases, or confidential data.

What to do first

Always verify financial requests through a separate channel β€” call the executive directly using a known phone number.

Targets

Finance professionals

Seen in

U.S.

Brand impersonation scams
↑ 60%

LinkedIn fake company page scam

Fraudulent LinkedIn company pages impersonate legitimate businesses to post fake job listings, collect applicant data, and redirect users to malicious websites.

What to do first

Verify the company page by checking for a matching official website, cross-referencing employee profiles, and looking at the page's creation date.

Targets

Job seekers

Seen in

U.S.

Brand impersonation scams
↑ 60%

Coinbase Commerce invoice scam

Fraudulent invoices sent via Coinbase Commerce or mimicking its interface trick businesses and individuals into paying for goods or services they never ordered.

What to do first

Never pay an invoice you did not expect β€” verify with the supposed sender through a separate communication channel.

Targets

Small business owners

Seen in

U.S.

Utility scams
↑ 56%

solar panel door-to-door scam

High-pressure door-to-door salespeople misrepresent solar panel costs, savings, and government incentive programs to lock homeowners into predatory contracts or collect large upfront deposits.

What to do first

Never sign a contract on the same day β€” take time to get competing quotes from licensed solar installers

Targets

Homeowners

Seen in

U.S.

Utility scams
↑ 56%

utility rebate phishing scam

Scammers send emails or texts posing as your utility, claiming you qualify for an energy rebate or refund, then steal your bank details through a fake claim form.

What to do first

Do not click links in unsolicited rebate offers β€” visit your utility company website directly to check for legitimate programs

Targets

Homeowners

Seen in

U.S.

Utility scams
↑ 56%

energy audit scam

Fraudulent contractors offer free or low-cost home energy audits, then pressure homeowners into overpriced and unnecessary repairs or equipment installations.

What to do first

Only schedule energy audits through your utility company or certified programs like ENERGY STAR Home Advisor

Targets

Homeowners

Seen in

U.S.

Social media scams
↑ 76%

LinkedIn fake recruiter scam

Scammers pose as recruiters on LinkedIn, offering fake job opportunities to collect personal information, Social Security numbers, or upfront training fees from job seekers.

What to do first

Verify any job offer by contacting the company directly through their official careers page or HR department

Targets

Job seekers

Seen in

U.S.

Social media scams
↑ 76%

LinkedIn connection request phishing scam

Attackers send connection requests with phishing links disguised as shared documents or professional resources, leading to credential-harvesting pages.

What to do first

Never click links in LinkedIn connection requests from people you do not recognize.

Targets

Professionals

Seen in

U.S.

Social media scams
↑ 76%

LinkedIn verification badge scam

Phishing messages offer to help users get a 'verified' badge on LinkedIn, directing them to fake sites that steal credentials or charge fraudulent fees.

What to do first

LinkedIn's identity verification is done through the official app using a government ID and selfie β€” never through external links or payments.

Targets

Professionals

Seen in

U.S.

Social media scams
↑ 76%

LinkedIn salary survey data harvest scam

Fake salary surveys circulated on LinkedIn collect sensitive employment and financial data under the guise of industry benchmarking research.

What to do first

Only participate in salary surveys from verified organizations β€” check the research firm's website and reputation independently.

Targets

Professionals

Seen in

U.S.

Social media scams
↑ 76%

LinkedIn endorsement-for-access scam

Scammers offer to endorse your LinkedIn skills in exchange for clicking a link or downloading a file, which installs malware or leads to a credential-harvesting page.

What to do first

Never download files or click links from LinkedIn connections you do not know personally.

Targets

Professionals

Seen in

U.S.

Tax season scams
↑ 66%

fake IRS refund deposit scam

Scammers send emails or texts claiming an IRS tax refund has been deposited into the wrong account and ask victims to provide banking details to redirect the funds.

What to do first

Never provide banking details in response to unsolicited messages β€” the IRS initiates refunds based on the return you filed.

Targets

Taxpayers

Seen in

U.S.

Tax season scams
↑ 66%

W-2 phishing scam targeting employers

Cybercriminals send spoofed emails to company payroll or HR departments posing as executives, requesting all employee W-2 forms, which are then used for mass identity theft.

What to do first

Verify all W-2 requests by calling the executive directly using a known phone number β€” never respond to the email.

Targets

HR professionals

Seen in

U.S.

Tax season scams
↑ 66%

tax transcript request phishing scam

Phishing emails impersonate the IRS or tax software providers, directing victims to fake sites where they enter credentials to download a tax transcript, which is then used for identity theft.

What to do first

Access your tax transcript only through irs.gov/individuals/get-transcript β€” never through emailed links.

Targets

Taxpayers

Seen in

U.S.

Tax season scams
↑ 66%

state tax refund phishing scam

Phishing emails and texts impersonate state tax agencies, claiming the recipient is owed a state refund and directing them to fake portals that harvest personal and financial data.

What to do first

Check your state refund status only through your state's official tax agency website, accessed by typing the URL directly.

Targets

Taxpayers

Seen in

U.S.

Fake scholarship scams
↑ 66%

application fee scholarship scam

A scholarship opportunity requires an upfront application or processing fee, which legitimate scholarships never charge, and the scholarship itself does not exist.

What to do first

Never pay to apply for a scholarship β€” legitimate scholarships do not charge application fees.

Targets

High school students

Seen in

U.S.

Fake scholarship scams
↑ 66%

scholarship seminar fee scam

A company invites students to a free scholarship seminar that turns into a high-pressure sales pitch for expensive financial aid consulting services.

What to do first

Never sign up for paid services under pressure at a seminar β€” take materials home and research the company first.

Targets

High school students

Seen in

U.S.

Fake scholarship scams
↑ 66%

FAFSA impersonator scam

A website or email impersonates the Federal Student Aid office, tricking students into entering personal and financial information on a fraudulent portal.

What to do first

Always navigate directly to studentaid.gov β€” never click links in emails claiming to be from Federal Student Aid.

Targets

High school students

Seen in

U.S.

Fake scholarship scams
↑ 66%

athletic scholarship scam

A recruiting service claims a college scout noticed your child and charges thousands for a recruiting package that produces no actual scholarship offers.

What to do first

Contact college coaches directly or use the NCAA Eligibility Center β€” legitimate recruiting does not require upfront fees from families.

Targets

High school students

Seen in

U.S.

Misinformation scams
↑ 80%

fake product recall notification scam

Fraudulent emails or posts mimic official product recall notices from the CPSC or manufacturers, directing recipients to phishing sites that collect personal data under the guise of processing refunds.

What to do first

Verify all product recalls at cpsc.gov or the manufacturer's official website before taking any action.

Targets

Parents

Seen in

U.S.

Misinformation scams
↑ 80%

fake data breach notification scam

Scammers send fake data breach notification emails impersonating well-known companies, directing recipients to phishing sites where they re-enter credentials or financial data to check if they were affected.

What to do first

Go directly to the company's official website to check for any breach announcements.

Targets

Account holders

Seen in

U.S.

Contractor and home repair scams
↑ 63%

storm chaser roofer scam

After a major storm, out-of-town contractors go door to door offering cheap roof repairs, collect deposits, and do shoddy work or disappear.

What to do first

Verify the contractor's license, insurance, and local business registration before signing any contract.

Targets

Homeowners

Seen in

U.S.

Contractor and home repair scams
↑ 63%

foundation crack repair scam

A contractor exaggerates the severity of cosmetic foundation cracks, claiming the home is at risk of structural failure to sell unnecessary repairs.

What to do first

Hire a licensed structural engineer β€” not a contractor β€” for an independent foundation assessment.

Targets

Homeowners

Seen in

U.S.

Contractor and home repair scams
↑ 63%

contractor permit fraud

A contractor skips required building permits to save money and speed up work, leaving the homeowner liable for code violations and potentially unsafe work.

What to do first

Check with your local building department about what work requires permits before hiring any contractor.

Targets

Homeowners

Seen in

U.S.

Contractor and home repair scams
↑ 63%

contractor material upcharge scam

A contractor inflates the cost of materials far above retail price, uses cheaper materials than specified, or charges for materials never purchased.

What to do first

Require an itemized materials list in the contract specifying brand, model, and unit cost.

Targets

Homeowners

Seen in

U.S.

Contractor and home repair scams
↑ 63%

disaster repair advance fee scam

After a natural disaster, a contractor demands a large advance payment for emergency repairs and then performs little or no work.

What to do first

Check your state's limits on contractor advance payments β€” many states cap deposits at one-third of the total contract.

Targets

Homeowners

Seen in

U.S.

Employment fraud
↑ 80%

Fake job offer advance payment scam

A victim receives what looks like a legitimate remote job offer and is asked to pay upfront for equipment, training, or background checks.

What to do first

Verify the recruiter and company domain independently.

Targets

Job seekers

Seen in

Global

Employment fraud
↑ 80%

Interview task equipment cheque scam

A fake employer sends a cheque for equipment during the interview stage and asks the candidate to forward part of the money to a vendor.

What to do first

Do not deposit employer cheques tied to urgent vendor payments.

Targets

Students

Seen in

U.S.

Employment fraud
↑ 80%

Background check fee hiring scam

A candidate is told they passed the interview and only need to pay for a background check through a partner site.

What to do first

Ask the employer to confirm the screening provider from a public company email.

Targets

Job seekers

Seen in

Global

Employment fraud
↑ 80%

Freelance project unlock fee scam

A freelancer wins a project but is told they must buy a platform license, ID badge, or portfolio review to start.

What to do first

Do not buy access tools or badges to start freelance work.

Targets

Freelancers

Seen in

Global

Employment fraud
↑ 80%

Payroll onboarding direct-deposit phishing scam

A fake HR portal appears during onboarding and captures banking, tax, and identity documents before the job is confirmed.

What to do first

Confirm onboarding links with the employer through a public number or known email.

Targets

New hires

Seen in

Global

Employment fraud
↑ 80%

Paid training portal job scam

A fake employer says the role is secured, but the candidate must buy access to a training portal or certification dashboard before day one.

What to do first

Ask the employer to confirm any required platform or certification through a public company email.

Targets

Job seekers

Seen in

Global

Employment fraud
↑ 80%

Freelance style-guide payment scam

A client offers a freelance role, then says the contractor must purchase a mandatory style guide, briefing pack, or brand kit before work starts.

What to do first

Do not buy starter materials or internal brand kits from a client to begin work.

Targets

Freelancers

Seen in

Global

Employment fraud
↑ 80%

Warehouse shift scheduling fee scam

A warehouse role promises immediate shifts, but the worker must first pay for scheduling access, safety clearance, or a badge deposit.

What to do first

Do not pay for scheduling apps, roster access, or badge deposits before a verified contract exists.

Targets

Hourly workers

Seen in

Global

Employment fraud
↑ 80%

Coding test malware job scam

A fake tech employer sends a take-home exercise or coding test that installs malware or steals credentials from the candidate's device.

What to do first

Open interview files in a sandbox and never disable device protections for a candidate task.

Targets

Developers

Seen in

Global

Employment fraud
↑ 80%

LinkedIn fake recruiter message scam

Scammers pose as recruiters from well-known companies on LinkedIn, sending unsolicited messages about high-paying job opportunities to harvest personal information or advance fees.

What to do first

Verify the recruiter by checking the actual company's website and calling their HR department directly.

Targets

Job seekers

Seen in

U.S.

Employment fraud
↑ 80%

LinkedIn fake job posting scam

Fraudulent job listings on LinkedIn collect applicant data or trick candidates into paying for equipment, certifications, or background checks that never materialize into real employment.

What to do first

Research the company independently β€” check their official website and look for the job listing there.

Targets

Job seekers

Seen in

U.S.

Employment fraud
↑ 80%

fake Uber job posting scam

Scammers post fake Uber corporate or driver recruitment listings that require applicants to pay for background checks, training, or equipment upfront.

What to do first

Sign up to drive for Uber only through the official website at uber.com/drive or the Uber Driver app.

Targets

Job seekers

Seen in

U.S.

Employment fraud
↑ 80%

USPS job application scam

Fake job postings claim to recruit USPS mail carriers or clerks, charging applicants fees for applications, background checks, or training that USPS provides at no cost.

What to do first

Apply for USPS jobs only through the official portal at usps.com/careers β€” all USPS job applications are free.

Targets

Job seekers

Seen in

U.S.

Natural disaster scams
↑ 55%

storm chaser contractor scam

Unlicensed contractors travel to disaster-affected areas, demand large upfront payments for emergency repairs, then perform shoddy work or disappear without completing the job.

What to do first

Verify any contractor's license, insurance, and references through your state's contractor licensing board before signing anything.

Targets

Homeowners

Seen in

U.S.

Fake antivirus scams
↑ 100%

antivirus subscription auto-renew scam

An email or popup claims your antivirus subscription has auto-renewed for a large amount, urging you to call to cancel β€” the goal is to gain remote access or steal payment info.

What to do first

Check your bank or credit card statement directly β€” do not use the phone number in the email.

Targets

Non-technical users

Seen in

U.S.

Fake antivirus scams
↑ 100%

fake Norton renewal email scam

A phishing email impersonates Norton LifeLock with a fake invoice for annual renewal, directing you to call a number where scammers attempt to gain remote access to your computer.

What to do first

Do not call the number β€” go to norton.com directly and check your account for any active subscriptions.

Targets

Non-technical users

Seen in

U.S.

Military scams
↑ 100%

VA loan scam

Scammers pose as VA-approved lenders offering exclusive mortgage deals to veterans, then collect application fees and personal financial information without providing any actual loan.

What to do first

Verify any VA lender through the VA's official lender search at va.gov before providing information.

Targets

Veterans

Seen in

U.S.

Military scams
↑ 100%

military discount phishing scam

Fake websites or emails offer exclusive military discounts that require you to verify your service by entering personal information, military ID details, or login credentials.

What to do first

Access military discounts only through official channels like ID.me, SheerID, or the retailer's official military page.

Targets

Active duty

Seen in

U.S.

Email phishing scams
↑ 80%

CEO urgent request phishing scam

An email appears to come from a company executive urgently requesting a wire transfer, gift card purchase, or sensitive data, exploiting the recipient's desire to comply with authority.

What to do first

Always verify unusual financial or data requests through a separate communication channel β€” call the executive directly.

Targets

Office workers

Seen in

U.S.

Email phishing scams
↑ 80%

password reset phishing scam

A fake password reset notification urges the recipient to click a link and enter their current credentials, which are captured by attackers.

What to do first

Never click password reset links you did not request β€” navigate directly to the service's website.

Targets

Office workers

Seen in

U.S.

Email phishing scams
↑ 80%

shared document notification phishing scam

A fake notification claims someone has shared a document with you via Google Drive, OneDrive, or Dropbox, leading to a credential-harvesting login page.

What to do first

Hover over the link to inspect the URL before clicking β€” legitimate shares come from official domains.

Targets

Office workers

Seen in

U.S.

Email phishing scams
↑ 80%

invoice attachment malware scam

An email with a fake invoice attachment installs malware when opened, giving attackers access to the victim's computer and network.

What to do first

Never open attachments from unknown senders β€” verify invoices by contacting the vendor directly.

Targets

Office workers

Seen in

U.S.

Email phishing scams
↑ 80%

account suspension notice phishing scam

A fake email warns that your email, bank, or streaming account will be suspended unless you verify your identity immediately, directing you to a credential-stealing page.

What to do first

Log into your account directly by typing the URL in your browser β€” never use links from warning emails.

Targets

Office workers

Seen in

U.S.

Email phishing scams
↑ 80%

two-factor authentication bypass phishing scam

Attackers use real-time phishing toolkits to capture both passwords and two-factor authentication codes simultaneously, defeating standard MFA protections.

What to do first

Use hardware security keys (FIDO2/WebAuthn) which are resistant to real-time phishing proxy attacks.

Targets

IT administrators

Seen in

U.S.

Email phishing scams
↑ 80%

email forwarding rule hijack scam

After compromising an email account, attackers silently create forwarding rules that copy all incoming messages to an external address, enabling long-term surveillance.

What to do first

After any account compromise, immediately check your email rules and forwarding settings β€” remove anything you did not create.

Targets

Office workers

Seen in

U.S.

Email phishing scams
↑ 80%

calendar invite phishing scam

Attackers send calendar invitations containing phishing links in the event description or location field, which automatically appear in the victim's calendar.

What to do first

Change your calendar settings to not automatically add events from email invitations.

Targets

Office workers

Seen in

U.S.

Email phishing scams
↑ 80%

unsubscribe link trap scam

Phishing emails include a malicious unsubscribe link that, when clicked, confirms your email address is active and leads to credential theft or malware installation.

What to do first

Do not click unsubscribe in emails from unknown senders β€” mark the email as spam instead.

Targets

Office workers

Seen in

U.S.

Email phishing scams
↑ 80%

reply-chain hijacking scam

Attackers compromise an email account and insert malicious messages into existing email threads, exploiting the trust established in ongoing conversations.

What to do first

Be cautious of unexpected attachments or links even in existing email threads.

Targets

Office workers

Seen in

U.S.

Email phishing scams
↑ 80%

Teams meeting invite phishing scam

A fake Microsoft Teams meeting invitation arrives by email, and clicking the join link leads to a credential harvesting page disguised as the Teams login.

What to do first

Hover over the meeting link before clicking to verify it points to a legitimate Microsoft domain.

Targets

Business professionals

Seen in

U.S.

Email phishing scams
↑ 80%

OneDrive sharing notification phishing scam

A fake OneDrive sharing notification email claims someone shared a document with you, but the link leads to a credential-stealing page.

What to do first

Verify the sender by contacting them through a separate channel before clicking any shared document link.

Targets

Business professionals

Seen in

U.S.

Health product scams
↑ 109%

subscription vitamin trap scam

A personalized vitamin quiz funnels consumers into an expensive monthly subscription that is nearly impossible to cancel, with auto-ship charges that escalate over time.

What to do first

Read the full subscription terms before providing payment information, especially the renewal price and cancellation policy.

Targets

Health-conscious consumers

Seen in

U.S.

Extension fraud
↑ 131%

Malicious browser extension data harvest scam

A seemingly useful browser extension captures browsing activity, credentials, or payment behavior after a short period of benign use.

What to do first

Review permissions before installing.

Targets

Remote workers

Seen in

Global

Travel fraud
↑ 54%

Airline luggage fee link scam

A message says your bag will not board unless you settle an outstanding luggage or customs fee through a link.

What to do first

Check baggage status in the airline app instead of using the message.

Targets

Air travelers

Seen in

Global

Travel fraud
↑ 54%

Tour reservation WhatsApp deposit scam

A tour operator contact moves a booking into chat and requests a deposit to hold your place outside the official booking flow.

What to do first

Book tours only through verified operators or trusted platforms.

Targets

Tourists

Seen in

Global

Account takeover
↑ 54%

Hotel loyalty account takeover scam

A loyalty member receives a fake points-expiry notice that leads to account takeover and stolen reward balances.

What to do first

Sign in from the hotel's app or website directly to verify your points.

Targets

Frequent travelers

Seen in

Global

Travel fraud
↑ 54%

Airline rebooking fee scam

A fake airline support flow says your flight changed and a fast rebooking payment is required to keep your seat.

What to do first

Open the airline app or booking portal directly and review your itinerary there.

Targets

Travelers

Seen in

Global

Travel fraud
↑ 54%

Airport transfer prepay scam

A transport provider or host pushes for advance payment for an airport pickup that either never happens or routes through a fake payment page.

What to do first

Book transport through the official platform or pay in person only after verification.

Targets

Tourists

Seen in

Global

Account takeover
↑ 54%

Airline loyalty password reset scam

A frequent flyer gets an urgent password reset notice and loses loyalty miles after entering credentials into a fake airline security page.

What to do first

Open the airline app or site directly and review security events there.

Targets

Frequent travelers

Seen in

Global

Summer travel scams
↑ 54%

airline ticket phishing scam

Phishing emails and fake websites impersonate major airlines offering flash sales or notification of itinerary changes, stealing credit card details and frequent flyer credentials.

What to do first

Access airline deals and booking changes only through the airline's official app or by typing the airline URL directly.

Targets

Travelers

Seen in

U.S.

Summer travel scams
↑ 54%

timeshare presentation lure scam

Travelers are lured to high-pressure timeshare sales presentations with promises of free gifts, cheap vacations, or prize money, then subjected to aggressive tactics to sign expensive contracts.

What to do first

Never sign a timeshare contract on the same day β€” take the documents home and review them with a lawyer.

Targets

Travelers

Seen in

U.S.

Summer travel scams
↑ 54%

travel insurance scam

Fraudulent companies sell fake travel insurance policies that provide no actual coverage, leaving travelers without protection when they need to file claims for cancellations or emergencies.

What to do first

Purchase travel insurance only from providers rated by AM Best or listed on your state's insurance department website.

Targets

Travelers

Seen in

U.S.

Government impersonation
↑ 68%

Business license renewal scam

A small business gets a renewal notice or call demanding immediate payment to keep permits or registrations active.

What to do first

Confirm renewal requirements with the actual registry or city office.

Targets

Small businesses

Seen in

U.S.

Small business scams
↑ 68%

fake supplier scam

A fraudulent supplier offers products at below-market prices, collects payment, and either delivers counterfeit goods, inferior products, or nothing at all.

What to do first

Verify the supplier's business registration, physical address, and trade references before placing orders.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

directory listing scam

A company sends an invoice or renewal notice for a business directory listing that was never ordered, pressuring the business to pay for a worthless or nonexistent listing.

What to do first

Review all invoices against actual purchase orders β€” never pay without verifying the service was ordered.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

SEO guarantee scam

An SEO company guarantees first-page Google rankings for a fixed fee, collects payment, and delivers either nothing, black-hat tactics that get the site penalized, or fabricated reports.

What to do first

Be skeptical of any SEO company that guarantees specific rankings β€” legitimate agencies discuss strategy, not guaranteed outcomes.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

business loan advance fee scam

A fraudulent lender guarantees approval for a business loan but requires upfront fees for processing, insurance, or collateral β€” after payment, the loan never materializes.

What to do first

Never pay upfront fees to secure a loan β€” legitimate lenders deduct costs from loan proceeds or charge at closing.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

fake government compliance notice scam

Businesses receive official-looking letters or emails claiming they must pay a fee or file paperwork to comply with a government regulation that is either fake or already handled by existing filings.

What to do first

Verify any compliance requirement directly with the government agency referenced in the notice.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

office supply overcharge scam

A caller claims to confirm an existing supply order and ships unrequested products at inflated prices, then aggressively invoices the business.

What to do first

Establish a policy that only authorized personnel can approve supply orders, and never confirm orders with unknown callers.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

vanity award scam

A company informs a business they have won a prestigious award, then charges fees for a trophy, plaque, or event attendance β€” the award has no real selection criteria.

What to do first

Research the awarding organization independently β€” check for reviews, Better Business Bureau complaints, and verifiable past winners.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

fake BBB accreditation scam

Scammers impersonate the Better Business Bureau and contact businesses offering accreditation, threatening negative ratings, or charging fees for listing improvements that the real BBB never initiated.

What to do first

Hang up and call your local BBB directly using the number from bbb.org to verify any communication.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

domain name renewal scam

A company sends a deceptive notice urging a business to renew or transfer its domain name at an inflated price, designed to look like an official renewal from the current registrar.

What to do first

Always renew domains directly through your current registrar's website β€” never through unsolicited notices.

Targets

Small business owners

Seen in

U.S.

Small business scams
↑ 68%

advertising insertion order fraud

A scammer sends a business an insertion order or invoice for advertising in a publication, directory, or event program that the business never agreed to.

What to do first

Require all advertising commitments to be in writing with authorized signatures before any work begins.

Targets

Small business owners

Seen in

U.S.

Account takeover
↑ 275%

Cloud storage password reset scam

A fake cloud-storage notice says files were shared suspiciously and captures the victim's account credentials or approval codes.

What to do first

Use the storage provider app or website directly to review security alerts.

Targets

Remote workers

Seen in

Global

Identity theft
↑ 275%

Healthcare portal credential theft scam

A fake healthcare portal update captures login details, insurance numbers, and sensitive medical identifiers.

What to do first

Log into the patient portal through the provider site directly.

Targets

Patients

Seen in

U.S.

Identity theft
↑ 275%

School parent portal identity phishing scam

A fake school portal update captures guardian credentials, contact details, and sometimes payment information.

What to do first

Open the school portal from your saved bookmark or app only.

Targets

Parents

Seen in

U.S.

Fake government website scams
↑ 125%

fake court summons email scam

An email claims you have been issued a court summons and must click a link to view the details, leading to malware installation or credential theft.

What to do first

Remember that real courts serve legal notices by mail or in person β€” never by email.

Targets

Citizens

Seen in

U.S.

Fake government website scams
↑ 125%

fake building permit website scam

Scam websites pose as local government permit offices, charging homeowners and contractors for building permits that are never filed or processed.

What to do first

Apply for building permits only through your city or county's official government website or in person at the permit office.

Targets

Small business owners

Seen in

U.S.

Multi-channel phishing scams
↑ 275%

fake app notification then email scam

A push notification from a malicious app warns of a security issue, followed by a phishing email with instructions to resolve it, creating a convincing multi-channel attack.

What to do first

Open the official app directly from your home screen rather than clicking links in emails referencing notifications.

Targets

Online users

Seen in

U.S.

Multi-channel phishing scams
↑ 275%

video call then credential harvest scam

Scammers set up a video call posing as IT support, a vendor, or colleague, then share a screen link or chat message during the call that leads to credential theft.

What to do first

Never enter credentials while sharing your screen in a video call.

Targets

Business professionals

Seen in

U.S.

Online shopping scams
↑ 166%

fake refund overpayment shopping scam

Scammers posing as sellers or customer support claim they accidentally refunded too much and ask victims to return the difference, but the original refund was fake.

What to do first

Never send money to anyone claiming an accidental overpayment without verifying through your bank directly

Targets

Online shoppers

Seen in

U.S.

Online shopping scams
↑ 166%

fake coupon and discount code phishing scam

Scammers distribute fake coupons or discount codes through email, social media, and websites to harvest personal information or install malware.

What to do first

Verify coupons directly on the retailer's official website or app before using them

Targets

Bargain hunters

Seen in

Global

Fake review scams
↑ 166%

fake Amazon review job scam

A message offers a lucrative work-from-home job writing Amazon reviews, but the real goal is to collect your personal information or get you to make purchases you will never be reimbursed for.

What to do first

Never pay out of pocket for a job opportunity β€” legitimate employers do not require this.

Targets

Side hustle seekers

Seen in

U.S.

Fake review scams
↑ 166%

influencer sponsorship scam

Scammers impersonate brands and offer content creators fake sponsorship deals, then request upfront fees for shipping, samples, or contracts that never materialize.

What to do first

Verify the offer by contacting the brand directly through their official website.

Targets

Content creators

Seen in

U.S.

Fake review scams
↑ 166%

review-for-refund scheme scam

An Amazon seller contacts buyers after purchase and offers a full refund in exchange for a 5-star review, artificially inflating their product ratings.

What to do first

Decline the offer and report the seller to Amazon for review manipulation.

Targets

Online shoppers

Seen in

U.S.

Fake review scams
↑ 166%

fake Yelp review extortion scam

Scammers threaten small businesses with a flood of fake 1-star Yelp reviews unless the business pays them to stop.

What to do first

Do not pay β€” extortion payments almost always lead to repeated demands.

Targets

Small business owners

Seen in

U.S.

Online shopping scams
↑ 166%

PayPal overpayment refund scam

A buyer 'accidentally' overpays a seller through PayPal using a stolen credit card or bad check, then asks the seller to refund the excess β€” when the original payment reverses, the seller loses both the product and the refunded amount.

What to do first

Never refund overpayments to a different account or by a different payment method β€” refund only through PayPal's built-in refund feature to the original sender.

Targets

Online sellers

Seen in

U.S.

Online shopping scams
↑ 166%

Zelle peer-to-peer overpayment scam

A scammer sends you a Zelle payment for more than the agreed amount using a compromised account, then asks you to return the excess β€” when the fraudulent payment is reversed, you lose the refunded amount.

What to do first

Never refund Zelle overpayments β€” ask the buyer to contact their bank to reverse the excess amount themselves.

Targets

Marketplace sellers

Seen in

U.S.

Government impersonation
↑ 121%

Tax refund verification phishing scam

A fake refund or filing problem message pressures the victim to verify tax identity through a counterfeit government portal.

What to do first

Go directly to the tax authority website instead of using message links.

Targets

Tax filers

Seen in

U.S.

Employment fraud
↑ 100%

Reshipping assistant work-from-home scam

A new hire is told to receive packages at home and forward them using labels provided by the employer.

What to do first

Do not handle goods or forward packages for an employer you cannot verify.

Targets

Job seekers

Seen in

Global

Government impersonation
↑ 100%

Customs duty release scam

A shipment or parcel is said to be held by customs, and the victim must clear it with a duty payment and identity upload through a fake portal.

What to do first

Check the shipment directly with the courier or customs office using a trusted channel.

Targets

Online shoppers

Seen in

Global

Debt collection scams
↑ 100%

student loan forgiveness scam

Scammers pose as government or loan servicer representatives, charging upfront fees for student loan forgiveness applications that are actually free.

What to do first

Apply for forgiveness programs directly at studentaid.gov at no cost.

Targets

Students

Seen in

U.S.

Student loan scams
↑ 100%

student loan consolidation scam

Fraudulent companies offer to consolidate your student loans for a fee, performing a service that the federal government provides for free, and may worsen your repayment terms.

What to do first

Apply for federal Direct Consolidation Loans for free at StudentAid.gov

Targets

Borrowers

Seen in

U.S.

Student loan scams
↑ 100%

fake student loan servicer scam

Scammers impersonate well-known loan servicers like Nelnet or MOHELA, sending official-looking correspondence to steal payments or personal information.

What to do first

Always log in to your loan servicer account by typing the URL directly into your browser, not by clicking email links

Targets

Borrowers

Seen in

U.S.

Student loan scams
↑ 100%

FSA ID phishing scam

Phishing emails and texts impersonate Federal Student Aid, tricking borrowers into entering their FSA ID credentials on fake login pages, giving scammers full control of their loan accounts.

What to do first

Never enter your FSA ID credentials through a link in an email β€” always navigate directly to StudentAid.gov

Targets

Students

Seen in

U.S.

Package delivery scams
↑ 100%

UPS tracking phishing email scam

A phishing email impersonates UPS with a fake tracking update or delivery failure notice, directing victims to a spoofed website to steal login credentials or financial information.

What to do first

Track packages only through the official ups.com website or UPS mobile app.

Targets

Online shoppers

Seen in

U.S.

Package delivery scams
↑ 100%

Amazon package confirmation scam

A message claims you have an Amazon package arriving and asks you to confirm your address or payment method through a fake Amazon page, stealing your account credentials.

What to do first

Check your orders by logging in directly at amazon.com β€” never through email links.

Targets

Online shoppers

Seen in

U.S.

Package delivery scams
↑ 100%

DHL customs payment scam

A message posing as DHL claims your international package is held at customs and requires a fee to be released, directing you to a fraudulent payment portal.

What to do first

Verify customs charges directly through the official DHL website using your tracking number.

Targets

Online shoppers

Seen in

U.S.

Package delivery scams
↑ 100%

package held at customs scam

Scammers send messages claiming your international package is stuck at customs and you must pay a fee or provide identification to release it, leading to financial theft or identity fraud.

What to do first

Verify any customs charges by contacting the shipping carrier or customs broker directly.

Targets

Online shoppers

Seen in

U.S.

Package delivery scams
↑ 100%

delivery preference update scam

A phishing email or text asks you to update your delivery preferences or notification settings through a fake carrier portal, capturing your login credentials.

What to do first

Manage delivery preferences only by logging in directly through the carrier's official website or app.

Targets

Online shoppers

Seen in

U.S.

Package delivery scams
↑ 100%

shipping label phishing scam

An email with an attachment labeled as a shipping label, invoice, or receipt contains malware that infects your device when opened.

What to do first

Never open email attachments from unknown senders or unexpected shipping notifications.

Targets

Online shoppers

Seen in

U.S.

Timeshare and vacation scams
↑ 16%

timeshare exit company fraud

A company charges thousands of dollars upfront promising to legally cancel a timeshare contract, then fails to deliver or uses ineffective methods.

What to do first

Contact your timeshare resort's exit or deedback program directly first β€” many resorts now offer voluntary exit options.

Targets

Timeshare owners

Seen in

U.S.

Timeshare and vacation scams
↑ 16%

travel voucher scam

Victims receive travel vouchers promising free or deeply discounted trips, but the vouchers come with hidden fees, blackout dates, and unusable restrictions.

What to do first

Read all terms and conditions of any travel voucher before paying any activation or processing fees.

Targets

Vacationers

Seen in

U.S.

Timeshare and vacation scams
↑ 16%

timeshare points exchange scam

A company offers to convert timeshare points into airline miles, hotel points, or cash but charges fees and delivers nothing of value.

What to do first

Never share your timeshare account login credentials with any third-party company.

Targets

Timeshare owners

Seen in

U.S.

Romance and investment fraud
↑ 24%

Romance-led investment scam

A relationship begins on social or dating platforms and gradually shifts toward a fake investing opportunity with fabricated gains and escalating deposits.

What to do first

Never invest based on a romantic contact's recommendation.

Targets

Online daters

Seen in

Global

Recovery fraud
↑ 41%

Romance scam recovery lawyer fraud

A fake lawyer claims they already tracked your romance scammer and only need filing fees to start the recovery.

What to do first

Treat recovery outreach after a romance scam as likely secondary fraud.

Targets

Romance scam victims

Seen in

Global

Romance scams
↑ 41%

Romance gift card emergency scam

A romantic contact says their phone, rent, or food emergency can be solved quickly if you send gift cards or instant payment.

What to do first

Never move money to a romantic contact you have not met and verified.

Targets

Online daters

Seen in

Global

Romance scams
↑ 41%

Sugar dating verification fee scam

A match promises an allowance but first requests verification payments, subscription fees, or gift cards to activate the arrangement.

What to do first

Treat any payment-before-payment arrangement as fraud.

Targets

Students

Seen in

Global

Romance scams
↑ 41%

Romance customs package scam

A romantic contact says they sent a valuable package, but customs, courier, or anti-terror fees must be paid before delivery.

What to do first

Do not pay package release fees for gifts from online-only partners.

Targets

Online daters

Seen in

Global

Romance scams
↑ 41%

Romance-to-forex bait scam

A romantic contact slowly shifts the conversation into a special forex or crypto opportunity that only trusted people can access.

What to do first

Separate emotional relationships from financial decisions entirely.

Targets

Professionals

Seen in

Global

Romance scams
↑ 41%

Inheritance release romance scam

A romantic contact says money is tied up in inheritance, customs, or attorney fees and asks the victim to help unlock it so they can be together.

What to do first

Do not send funds to unlock inheritance, estates, or cross-border transfers for a romantic contact.

Targets

Older adults

Seen in

Global

Romance scams
↑ 41%

Celebrity romance chat scam

A victim believes they are in private contact with a celebrity or creator who eventually asks for gift cards, crypto, or help escaping a contract.

What to do first

Assume direct romantic or financial outreach from famous figures is fraudulent unless proven through official channels.

Targets

Fans

Seen in

Global

Marketplace fraud
β†’ 0%

Fake escrow release marketplace scam

A seller insists on a private escrow site that mimics a trusted payment service and claims funds are protected there.

What to do first

Use only major payment tools or in-person transactions you can verify.

Targets

Collectors

Seen in

Global

Senior-targeted scams
↑ 42%

home security pushy sales scam targeting seniors

Aggressive door-to-door salespeople pressure seniors into signing long-term home security contracts with hidden fees, equipment charges, and difficult cancellation terms.

What to do first

Never sign a contract at the door β€” take the materials, read everything, and consult family or a lawyer first.

Targets

Seniors

Seen in

U.S.

Senior-targeted scams
↑ 42%

fake pharmacy discount card scam

Scammers offer seniors free or low-cost pharmacy discount cards that either do not work, charge hidden membership fees, or are used to harvest personal health and financial information.

What to do first

Use only verified discount programs like Medicare Extra Help or GoodRx, and verify any card with your pharmacist before providing personal information.

Targets

Seniors

Seen in

U.S.

Recovery fraud
↑ 17%

Chargeback specialist fee scam

A consultant offers to dispute card charges or investment losses for a sizable upfront retainer and vague promises.

What to do first

Ask your bank or card issuer directly about chargeback options before hiring anyone.

Targets

Small businesses

Seen in

Global

Recovery fraud
↑ 17%

Stolen phone data recovery scam

A victim of phone theft finds a service claiming it can recover iCloud, photo, or wallet access in exchange for credentials.

What to do first

Use official device recovery channels and rotate credentials instead.

Targets

Phone theft victims

Seen in

Global

Sextortion scams
↑ 8%

webcam blackmail email scam

A mass-sent email claims the sender hacked your webcam and recorded you during intimate activity, demanding cryptocurrency payment to prevent release of the footage.

What to do first

Do not reply or send any payment β€” these are mass-sent with no actual footage.

Targets

Adults

Seen in

U.S.

Sextortion scams
↑ 8%

password reveal sextortion email scam

An email includes one of your real passwords in the subject line and claims a hacker used it to access your device and record compromising footage.

What to do first

Do not pay β€” the scammer has only your leaked password, not access to your device.

Targets

Adults

Seen in

U.S.

Sextortion scams
↑ 8%

compromised photos sextortion threat scam

A scammer claims to have obtained intimate photos from your phone or cloud storage and threatens to distribute them unless you pay.

What to do first

Do not pay or engage β€” most of these threats are bluffs with no actual photos.

Targets

Adults

Seen in

U.S.

Sextortion scams
↑ 8%

workplace affair sextortion threat scam

An email or message threatens to reveal an alleged extramarital affair or inappropriate workplace relationship to the victim's employer and spouse unless a payment is made.

What to do first

Do not respond or pay β€” these are untargeted mass emails with no actual evidence.

Targets

Professionals

Seen in

U.S.

Recovery fraud
↑ 41%

Crypto recovery agent scam

After a person loses money in crypto, a second scam appears claiming funds can be recovered for a fee or wallet access.

What to do first

Assume unsolicited recovery outreach is fraudulent.

Targets

Previous fraud victims

Seen in

Global

Lottery and prize scams
↑ 24%

email lottery winner notification scam

Victims receive an official-looking email claiming they won a lottery they never entered, then are asked to pay taxes or processing fees to claim the prize.

What to do first

Legitimate lotteries never require upfront payment to claim winnings

Targets

Older adults

Seen in

Global

Lottery and prize scams
↑ 24%

foreign lottery advance fee scam

Victims are told they won a foreign lottery, often claiming to be from Spain, the Netherlands, or the UK, and must pay customs, taxes, or legal fees to collect.

What to do first

It is illegal for US residents to participate in foreign lotteries, so any notification is fraudulent by definition

Targets

Older adults

Seen in

Global

Lottery and prize scams
↑ 24%

sweepstakes processing fee scam

Victims receive official-looking letters or emails claiming they won a sweepstakes but must pay a processing fee to receive their prize check.

What to do first

Never pay any fee to claim a sweepstakes prize as legitimate sweepstakes cover all costs

Targets

Older adults

Seen in

U.S.

Lottery and prize scams
↑ 24%

inheritance from unknown relative scam

Scammers pose as attorneys or bank officials claiming the victim has inherited money from a distant or unknown relative, requiring fees to release the funds.

What to do first

Verify any inheritance claim through an independent attorney, not through contacts provided in the email

Targets

Older adults

Seen in

Global

Gift card scams
↑ 23%

boss gift card request scam

An email or text impersonating your boss or company executive urgently asks you to buy gift cards for clients or employees and send the card numbers β€” a business email compromise variant.

What to do first

Verify any unusual request from a supervisor by calling or speaking to them in person β€” not by replying to the email.

Targets

Employees

Seen in

U.S.

QR code scams
↑ 27%

fake WiFi login QR code scam

QR codes posted in public spaces promise free WiFi access but lead to a fake login portal that captures email credentials and personal data or installs malware.

What to do first

Ask staff for the official WiFi name and password rather than scanning posted QR codes.

Targets

Travelers

Seen in

U.S.

Recovery fraud
↑ 15%

Refund specialist recovery scam

A victim of bank transfer fraud is told a refund specialist can reverse the payment for a consultancy fee.

What to do first

Work with your bank and official complaint channels, not unsolicited specialists.

Targets

Fraud victims

Seen in

Global

DNA and ancestry scams
↑ 15%

genetic health report upsell scam

After a legitimate or fake DNA test, scammers contact consumers offering expensive genetic health reports that provide generic or medically meaningless advice.

What to do first

Consult a licensed genetic counselor or your doctor before paying for genetic health interpretations.

Targets

Health-conscious consumers

Seen in

U.S.

DNA and ancestry scams
↑ 15%

fake heritage discovery scam

Scammers contact people claiming their DNA results reveal a connection to royalty, a wealthy family, or an unclaimed inheritance, then charge fees to pursue the claim.

What to do first

Treat any unsolicited claim of wealthy or royal ancestry as a scam β€” legitimate genealogists do not cold-contact people.

Targets

Genealogy enthusiasts

Seen in

U.S.

DNA and ancestry scams
↑ 15%

relative matching phishing scam

Scammers send emails posing as DNA testing services claiming a new relative match has been found, directing victims to fake login pages that steal their credentials.

What to do first

Never click login links in emails β€” go directly to the testing company's website by typing the URL in your browser.

Targets

Genealogy enthusiasts

Seen in

U.S.

Remote worker scams
↑ 20%

fake remote job posting scam

Scammers post attractive remote job listings on legitimate job boards, conducting fake interviews and collecting personal information or upfront fees from applicants before disappearing.

What to do first

Verify any job offer by visiting the company's official website and contacting their HR department directly.

Targets

Remote workers

Seen in

U.S.

Remote worker scams
↑ 20%

remote job equipment purchase scam

New remote hires are told to purchase equipment from a specific vendor using a company check that later bounces, leaving the employee out of pocket for the full amount.

What to do first

Legitimate employers provide equipment directly or reimburse after verified purchase β€” they never send checks to buy from unknown vendors.

Targets

Remote workers

Seen in

U.S.

Remote worker scams
↑ 20%

fake coworking membership scam

Scammers create fake coworking space listings or websites offering discounted memberships, collecting payments for spaces that do not exist or are not affiliated with the real location.

What to do first

Verify coworking spaces by visiting the location in person or checking their verified profiles on Google Maps before paying.

Targets

Remote workers

Seen in

U.S.

Remote worker scams
↑ 20%

VPN phishing scam targeting remote workers

Phishing emails impersonate corporate IT departments and direct remote workers to fake VPN login pages that capture their corporate credentials.

What to do first

Never click VPN login links in emails β€” always access your corporate VPN through the official application or bookmark.

Targets

Remote workers

Seen in

U.S.

Remote worker scams
↑ 20%

fake HR onboarding scam for remote workers

Scammers impersonate HR departments of companies and send fake onboarding documents to new remote hires, collecting tax forms, identification, and bank details for identity theft.

What to do first

Verify the onboarding process by calling the company's main number and asking to speak with the HR contact who sent the documents.

Targets

Remote workers

Seen in

U.S.

Remote worker scams
↑ 20%

payroll redirect scam targeting remote workers

Scammers compromise or impersonate an employee's email and send payroll or HR a request to change direct deposit information, diverting paychecks to the scammer's account.

What to do first

Always verify direct deposit change requests through a phone call to the employee using a known number, not the one in the email.

Targets

Remote workers

Seen in

U.S.

Remote worker scams
↑ 20%

fake home office stipend scam

Scammers posing as employers offer remote workers a home office stipend via check that is fraudulent, asking the worker to purchase items and return the excess funds.

What to do first

Legitimate home office stipends are reimbursed after purchase or provided through corporate purchasing β€” never through personal check overpayment.

Targets

Remote workers

Seen in

U.S.

Remote worker scams
↑ 20%

Slack impersonation scam targeting remote workers

Scammers gain access to a Slack workspace or create convincing fake Slack notifications to trick remote workers into clicking malicious links or sharing credentials.

What to do first

Never click links in Slack notification emails β€” open Slack directly through the app or bookmark.

Targets

Remote workers

Seen in

U.S.

Remote worker scams
↑ 20%

fake freelance platform scam

Scammers create counterfeit versions of popular freelance platforms like Upwork or Fiverr, tricking freelancers into creating accounts and accepting fake projects that lead to payment theft.

What to do first

Always navigate to freelance platforms by typing the URL directly β€” never through ads or email links.

Targets

Remote workers

Seen in

U.S.

Remote worker scams
↑ 20%

time tracking malware scam targeting remote workers

Employers or scammers require remote workers to install time tracking software that secretly contains spyware, keyloggers, or cryptocurrency miners.

What to do first

Only install time tracking software from verified developers β€” check reviews and the developer's reputation before installing.

Targets

Remote workers

Seen in

U.S.

Investment scams
↑ 30%

WhatsApp stock tip group scam

A private chat group pushes coordinated stock buys while fake members post profits to create trust and urgency.

What to do first

Never trade based on private group pressure or unverifiable gains.

Targets

Retail investors

Seen in

Global

Investment scams
↑ 30%

Copy trading mentor scam

A mentor offers copy trading access and asks the victim to fund an account or connect an API to mirror guaranteed profits.

What to do first

Avoid trading services that rely on chat-only mentorship and guaranteed returns.

Targets

Crypto traders

Seen in

Global

Investment scams
↑ 30%

Gold mining club investment scam

An investment club says pooled money is being used in gold or commodity extraction projects with fast fixed returns.

What to do first

Check licenses and filings before sending funds to private clubs.

Targets

Retirees

Seen in

Global

Investment scams
↑ 30%

Pre-IPO share allocation scam

A broker-like contact offers access to exclusive pre-IPO shares if you reserve quickly with a wire payment.

What to do first

Only pursue pre-IPO investments through regulated, documented channels.

Targets

Professionals

Seen in

Global

Investment scams
↑ 30%

Copy trading WhatsApp group scam

A private group promotes a mentor or analyst whose picks appear to win consistently, then funnels members into fake broker or wallet deposits.

What to do first

Do not fund broker or wallet accounts shared only inside a chat group.

Targets

Retail investors

Seen in

Global

Insurance scams
↑ 25%

identity theft protection scam

A company sells an identity theft protection plan that provides little or no actual monitoring, while collecting sensitive personal data that increases the customer's risk.

What to do first

Use the free credit monitoring offered by breached companies or annualcreditreport.com.

Targets

Data breach victims

Seen in

U.S.

Pet scams
↑ 23%

pet shipping fee scam

After a puppy or kitten purchase, the buyer is told the pet requires a special climate-controlled crate, insurance, or customs fees that escalate indefinitely.

What to do first

Legitimate pet shipping companies provide all-inclusive quotes upfront.

Targets

Pet seekers

Seen in

U.S.

Pet scams
↑ 23%

online vet bill scam

A scammer contacts a pet buyer claiming the animal needs emergency veterinary care during transit and demands immediate payment to save the pet's life.

What to do first

Ask for the specific vet clinic name, address, and phone number β€” then call directly.

Targets

Pet seekers

Seen in

U.S.

Moving and relocation scams
↑ 26%

military PCS move scam

Scammers target military families during permanent change of station relocations with fraudulent moving companies that exploit tight PCS timelines.

What to do first

Use only movers registered in the Defense Personal Property System or recommended by your installation's Transportation Office.

Targets

Military families

Seen in

U.S.

Financial relief scams
↑ 16%

tariff relief application scam

Scammers exploit confusion around tariff changes by impersonating government agencies offering fake tariff relief applications that collect Social Security numbers and financial information.

What to do first

Verify any government relief program through official .gov websites or by calling the agency directly.

Targets

Small business owners

Seen in

U.S.

Financial relief scams
↑ 16%

student loan pause extension scam

Scammers impersonate the Department of Education or loan servicers, offering fake extensions to student loan repayment pauses in exchange for personal information or upfront fees.

What to do first

Manage your student loans exclusively through studentaid.gov and your official loan servicer.

Targets

Student loan borrowers

Seen in

U.S.

Financial relief scams
↑ 16%

small business disaster loan scam

Scammers impersonate the SBA or state agencies, offering fake disaster relief loans to small business owners and collecting application fees and sensitive business financial data.

What to do first

Apply for SBA disaster loans only through sba.gov or by calling the SBA directly at their published number.

Targets

Small business owners

Seen in

U.S.

Financial relief scams
↑ 16%

fake unemployment benefits extension scam

Scammers contact unemployed individuals claiming they qualify for a benefits extension and need to verify their identity through a fake state workforce portal that steals their personal information.

What to do first

Access your unemployment account only through your state workforce agency's official website.

Targets

Unemployed workers

Seen in

U.S.

Subscription scams
↑ 37%

fake streaming service subscription scam

Scammers impersonate popular streaming platforms and collect payment for subscriptions that never grant access to any content.

What to do first

Always navigate to streaming services directly by typing the URL β€” never click email links.

Targets

Online subscribers

Seen in

U.S.

Subscription scams
↑ 37%

software license subscription scam

A website sells fake or unauthorized software licenses at a discount, then charges recurring fees for products the buyer never receives or cannot activate.

What to do first

Buy software only from official vendor websites or authorized resellers.

Targets

Small business owners

Seen in

U.S.

Subscription scams
↑ 37%

cloud storage upsell scam

A pop-up or email warns that cloud storage is full and directs the user to a fake upgrade page that charges for storage never delivered.

What to do first

Check storage usage directly in your device settings β€” not through email links.

Targets

App users

Seen in

U.S.

Auto purchase scams
↑ 28%

vehicle export scam

A buyer claims to purchase a vehicle for export, sends a fake payment, and arranges for a shipper to pick up the car before the fraud is detected.

What to do first

Be suspicious of any buyer who agrees to the full asking price without seeing the vehicle.

Targets

Car buyers

Seen in

U.S.

HOA and condo scams
↑ 27%

fake HOA fee notice scam

Homeowners receive official-looking letters or emails demanding immediate HOA dues payment to a fraudulent account, often mimicking their real association's branding.

What to do first

Always verify payment changes by calling your HOA management company directly using the number on your original contract.

Targets

Homeowners

Seen in

U.S.

HOA and condo scams
↑ 27%

fake HOA maintenance vendor scam

Scammers pose as maintenance vendors approved by the HOA, collecting upfront payment from homeowners for landscaping, painting, or repairs that never get completed.

What to do first

Verify any vendor by checking with your HOA board or management company before paying.

Targets

Homeowners

Seen in

U.S.

HOA and condo scams
↑ 27%

HOA board embezzlement scam

A corrupt HOA board member or treasurer diverts association funds into personal accounts, often through inflated vendor contracts or fictitious expenses.

What to do first

Request annual independent financial audits and attend board meetings to review financial reports.

Targets

HOA members

Seen in

U.S.

HOA and condo scams
↑ 27%

amenity access fee scam

Scammers contact residents claiming they must pay a separate fee to access community amenities like pools, gyms, or clubhouses, collecting payments for access that is already included in HOA dues.

What to do first

Check your HOA governing documents to confirm what amenities are included in your dues.

Targets

Homeowners

Seen in

U.S.

HOA and condo scams
↑ 27%

fake HOA election scam

Scammers send fraudulent proxy ballots or online voting links to HOA members, harvesting personal information or manipulating board election outcomes.

What to do first

Verify election communications by contacting your HOA board or management company directly.

Targets

HOA members

Seen in

U.S.

Rental scams
↑ 27%

rental deposit wire fraud scam

A supposed landlord insists that the security deposit and first month's rent be wired before move-in, then disappears after receiving the funds.

What to do first

Never wire money to a landlord you have not met β€” wire transfers cannot be reversed.

Targets

Relocating workers

Seen in

U.S.

Medicare and health scams
↑ 15%

health insurance marketplace phishing scam

Phishing emails and fake websites impersonate Healthcare.gov or state marketplace sites to steal personal information and financial data during enrollment periods.

What to do first

Always navigate directly to Healthcare.gov or your state marketplace β€” never click enrollment links in emails

Targets

Patients

Seen in

U.S.

Student-targeted scams
↑ 22%

fake internship offer scam targeting students

Students receive unsolicited emails offering prestigious internships that require upfront fees for training materials, background checks, or equipment, but the internship does not exist.

What to do first

Verify any internship offer by contacting the company's HR department directly through their official website.

Targets

College students

Seen in

U.S.

Student-targeted scams
↑ 22%

fake university email phishing scam

Phishing emails disguised as official university communications trick students into entering their login credentials on fake portals, giving attackers access to student accounts, financial aid, and personal data.

What to do first

Never click login links in emails β€” navigate directly to your university's portal by typing the URL in your browser.

Targets

College students

Seen in

U.S.

Student-targeted scams
↑ 22%

fake research assistant job scam

Students receive emails offering paid research assistant positions at their university that require purchasing supplies or software upfront with a fraudulent check that later bounces.

What to do first

Verify any job offer by contacting the professor or department directly through your university's directory.

Targets

College students

Seen in

U.S.

Travel fraud
↑ 15%

Airport Wi-Fi captive portal scam

A fake Wi-Fi portal at an airport asks for payment details, email credentials, or identity information before granting access.

What to do first

Use a hotspot or VPN and confirm the exact airport network name.

Targets

Travelers

Seen in

Global

Fake government grant scams
↑ 48%

pandemic relief grant scam

Scammers exploit public awareness of pandemic relief programs by offering fake COVID-19 recovery grants, collecting personal information and fees from applicants.

What to do first

Verify any relief program through official government websites β€” usa.gov, sba.gov, or your country's equivalent.

Targets

Low-income households

Seen in

U.S.

Fake government grant scams
↑ 48%

research grant impersonation scam

Scammers impersonate research funding agencies like the NSF or NIH, sending fake award notifications that require fees or personal information to claim.

What to do first

Verify any grant notification directly through the funding agency's official website and your institution's grants office.

Targets

Low-income households

Seen in

U.S.

Fake government grant scams
↑ 48%

state grant phishing scam

Phishing emails impersonate state government agencies, directing recipients to fake portals that harvest credentials and personal information under the guise of a grant application.

What to do first

Access state grant programs only through official .gov websites β€” never through links in unsolicited emails.

Targets

Low-income households

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

hotel WiFi phishing scam

A fake hotel WiFi login page mimics the hotel's branding and asks for your room number, name, and credit card to provide internet access, stealing your payment information.

What to do first

Verify the exact WiFi network name and login procedure at the front desk before connecting.

Targets

Travelers

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

coffee shop man-in-the-middle scam

An attacker on the same coffee shop WiFi network intercepts communications between your device and the router, capturing sensitive data or injecting malicious content.

What to do first

Always use a VPN on public WiFi β€” it encrypts all traffic and prevents interception.

Targets

Remote workers

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

fake captive portal scam

A rogue WiFi network presents a convincing login page that mimics a legitimate business, collecting your email, social media credentials, or payment information.

What to do first

Never enter social media or email passwords on a WiFi login page β€” legitimate portals do not require them.

Targets

Public WiFi users

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

fake mobile hotspot scam

An attacker shares a mobile hotspot with a generic name like 'Free WiFi' in a public area, capturing all traffic from users who connect.

What to do first

Be suspicious of generic open WiFi networks, especially in areas without advertised free internet.

Targets

Travelers

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

WiFi Pineapple attack scam

A WiFi Pineapple device is used to automatically impersonate saved WiFi networks on your device, tricking it into connecting and exposing your data to the attacker.

What to do first

Regularly clear saved WiFi networks from your device, especially open networks from hotels, airports, and cafes.

Targets

Business travelers

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

public library WiFi spoofing scam

An attacker creates a fake WiFi network mimicking a public library's hotspot, targeting patrons who use library computers and WiFi for banking, email, and job applications.

What to do first

Confirm the exact WiFi name with library staff and look for posted network information at the help desk.

Targets

Public WiFi users

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

event venue fake network scam

A fake WiFi network at a conference, concert, or sporting event mimics the venue's official network to capture data from thousands of attendees simultaneously.

What to do first

Check the event program, app, or organizer's website for official WiFi network details before connecting.

Targets

Travelers

Seen in

U.S.

AI impersonation
↑ 34%

Cloned voice kidnapping message scam

A victim receives a voice note and chat messages claiming a loved one has been kidnapped and must not be contacted.

What to do first

Contact the loved one through a separate channel and alert local police if needed.

Targets

Families

Seen in

Global

Investment scams
↑ 19%

AI trading bot dashboard scam

A platform promises AI-managed profits, shows a convincing dashboard, and keeps asking for larger deposits while withdrawals quietly fail.

What to do first

Attempt a small withdrawal before trusting any AI or automated trading platform.

Targets

Retail investors

Seen in

Global

Robocall scams
↑ 3%

extended car warranty robocall scam

An automated call claims your vehicle's warranty is about to expire and urges you to call back or press a number to renew, leading to a high-pressure sale for a worthless or overpriced service contract.

What to do first

Hang up β€” do not press any number or call back.

Targets

Phone users

Seen in

U.S.

AI deepfake scams
↑ 19%

deepfake job interview scam

Scammers use AI deepfake technology to impersonate hiring managers during video interviews, collecting personal information and upfront fees from job seekers for positions that do not exist.

What to do first

Verify the interviewer's identity by contacting the company directly through their official website.

Targets

Job seekers

Seen in

U.S.

Real estate wire fraud
↑ 38%

closing wire instruction hijack scam

Hackers intercept or spoof emails between homebuyers and title companies, sending fraudulent wire instructions that redirect the closing funds to a criminal's account.

What to do first

Always verify wire instructions by calling the title company at a phone number from their official website β€” never from the email itself.

Targets

Homebuyers

Seen in

U.S.

Real estate wire fraud
↑ 38%

title company impersonation scam

Scammers create fake email addresses and websites that closely mimic a real title company, sending buyers fraudulent closing documents and wire instructions.

What to do first

Verify the sender's exact email domain character by character before acting on any wire instructions.

Targets

Homebuyers

Seen in

U.S.

Real estate wire fraud
↑ 38%

down payment redirect scam

A fraudulent email intercepted during a real estate transaction redirects the buyer's down payment to a criminal's account by providing altered wiring details.

What to do first

Never wire money based solely on email instructions β€” always confirm by phone using a known, verified number.

Targets

Homebuyers

Seen in

U.S.

Real estate wire fraud
↑ 38%

earnest money theft scam

Scammers intercept real estate communications and send fake instructions for the earnest money deposit early in the transaction, stealing funds before closing even begins.

What to do first

Verify earnest money instructions directly with your real estate agent and the escrow company by phone.

Targets

Homebuyers

Seen in

U.S.

Real estate wire fraud
↑ 38%

real estate agent email compromise scam

Hackers breach a real estate agent's email account and use it to send fraudulent wire instructions to the agent's active clients, leveraging the trusted relationship.

What to do first

Always verify financial instructions through a separate communication channel β€” call your agent on their known phone number.

Targets

Homebuyers

Seen in

U.S.

Real estate wire fraud
↑ 38%

escrow account phishing scam

Scammers send phishing emails disguised as escrow account login pages, capturing credentials that allow them to redirect funds or steal transaction information.

What to do first

Never click login links in emails β€” navigate directly to the escrow company's website by typing the URL.

Targets

Homebuyers

Seen in

U.S.

Real estate wire fraud
↑ 38%

mortgage payoff redirect scam

Scammers intercept mortgage payoff communications and redirect the final payment to a fraudulent account, stealing the homeowner's entire remaining mortgage balance.

What to do first

Verify mortgage payoff wire instructions by calling the lender directly at the number on your mortgage statement.

Targets

Homebuyers

Seen in

U.S.

Real estate wire fraud
↑ 38%

property tax payment redirect scam

Scammers send fake property tax notices directing homeowners to pay overdue or delinquent taxes to a fraudulent account, often threatening liens or penalties for non-payment.

What to do first

Verify any tax notice by contacting your county tax assessor's office directly using the number from their official website.

Targets

Homebuyers

Seen in

U.S.

Real estate wire fraud
↑ 38%

HOA fee redirect scam

Scammers impersonate a homeowners association and send emails with updated payment instructions, redirecting HOA dues to a criminal's account.

What to do first

Verify any payment change by contacting your HOA management company or board president directly by phone.

Targets

Homebuyers

Seen in

U.S.

Real estate wire fraud
↑ 38%

real estate attorney impersonation scam

Scammers impersonate the buyer's or seller's real estate attorney, sending fraudulent wire instructions for closing funds from an email that closely resembles the attorney's real address.

What to do first

Verify all wire instructions by calling your attorney at the number on their business card or official website.

Targets

Homebuyers

Seen in

U.S.

Back-to-school scams
↑ 21%

student loan disbursement phishing scam

Phishing emails impersonate financial aid offices or loan servicers, claiming there is an issue with the student's loan disbursement that requires immediate action to resolve.

What to do first

Log in to your school's financial aid portal directly by typing the URL β€” never through links in emails.

Targets

College students

Seen in

U.S.

Back-to-school scams
↑ 21%

fake campus job scam

Fraudulent job offers sent to student email addresses promise easy on-campus or remote work with high pay, then trick students into depositing fake checks or sharing personal data.

What to do first

Verify campus job offers through your university's official career center or human resources office.

Targets

College students

Seen in

U.S.

Back-to-school scams
↑ 21%

laptop deal phishing scam

Phishing ads and emails target students with fake back-to-school laptop deals from major brands, leading to credential theft or purchase of nonexistent products.

What to do first

Purchase electronics only from authorized retailers or your school's official technology store with education pricing.

Targets

College students

Seen in

U.S.

Back-to-school scams
↑ 21%

fake scholarship deadline scam

Scammers contact students claiming they have won or been selected for a scholarship but must pay processing fees or provide personal information by an urgent deadline to claim it.

What to do first

Legitimate scholarships never require application or processing fees β€” any request for payment is a scam.

Targets

High school seniors

Seen in

U.S.

Employment fraud
↑ 12%

Visa sponsorship placement fee scam

An overseas role promises fast visa sponsorship but asks for processing, embassy, or medical coordination fees upfront.

What to do first

Check the employer and visa process through official immigration channels before paying.

Targets

Migrant job seekers

Seen in

Global

Travel fraud
↑ 12%

Visa processing agent scam

A traveler or student is told a visa application can be accelerated if they pay a private agent through chat or an unofficial portal.

What to do first

Use only official government visa channels or verified legal advisers for application steps.

Targets

International students

Seen in

Global

Government impersonation
↑ 12%

Student visa deadline penalty scam

A student is told there is a deadline or filing defect in their visa record and must pay a penalty or share documents immediately.

What to do first

Verify any visa or study permit notice from the official immigration portal only.

Targets

International students

Seen in

Canada

Immigrant-targeted scams
↑ 12%

visa lottery scam targeting immigrants

Scammers send emails or create websites claiming victims have won the Diversity Visa Lottery and must pay processing fees, when the real DV Lottery is free and does not notify winners by email.

What to do first

The official DV Lottery is free to enter and results are only available at dvprogram.state.gov β€” never pay for lottery processing.

Targets

Immigrants

Seen in

U.S.

Employment fraud
↑ 37%

Mystery shopper training check scam

A mystery shopper role sends a large check and instructs the new hire to buy gift cards or evaluate money transfer services.

What to do first

Void the check and stop communicating if a job asks you to purchase gift cards.

Targets

Part-time workers

Seen in

U.S.

Check and money order scams
↑ 37%

fake check overpayment scam

A buyer sends a check for more than the agreed price and asks the seller to wire back the difference before the check bounces.

What to do first

Never accept a check for more than the selling price.

Targets

Sellers

Seen in

U.S.

Check and money order scams
↑ 37%

payroll check scam

Scammers posing as employers send fake payroll checks to new hires, then request the employee return a portion for equipment or supplies.

What to do first

Research any new employer through your state's business registration database before accepting payment.

Targets

Job seekers

Seen in

U.S.

Check and money order scams
↑ 37%

rental deposit check scam

A fake landlord sends a check for more than the deposit, then asks the prospective tenant to wire back the excess before the check bounces.

What to do first

Never accept a check for more than the agreed amount in any rental transaction.

Targets

Renters

Seen in

U.S.

Warranty scams
↑ 13%

extended car warranty robocall scam

Robocallers claim your vehicle warranty is about to expire and pressure you into purchasing an expensive extended warranty from a fraudulent third-party company.

What to do first

Hang up on unsolicited warranty calls and add your number to the National Do Not Call Registry at DoNotCall.gov

Targets

Car owners

Seen in

U.S.

Warranty scams
↑ 13%

electronics warranty phishing scam

Scammers send phishing emails disguised as warranty registration confirmations for recently purchased electronics, directing victims to fake sites that steal personal and financial data.

What to do first

Register warranties only through the manufacturer official website by navigating directly rather than clicking email links

Targets

Consumers

Seen in

U.S.

Warranty scams
↑ 13%

home warranty upsell scam

Telemarketers aggressively sell overpriced home warranty plans to new homeowners, promising comprehensive coverage that is riddled with exclusions and denial triggers.

What to do first

Research any home warranty company thoroughly on BBB, state insurance department records, and consumer review sites before purchasing

Targets

Homeowners

Seen in

U.S.

Warranty scams
↑ 13%

warranty expiration phishing email scam

Phishing emails claiming your product warranty is about to expire direct you to fraudulent websites designed to steal login credentials and payment information.

What to do first

Never click links in unsolicited warranty expiration emails and instead log in to your account directly on the manufacturer website

Targets

Consumers

Seen in

U.S.

Warranty scams
↑ 13%

third-party warranty scam

Unaffiliated third-party companies sell vehicle or home service contracts with misleading mailers designed to look like official manufacturer notices.

What to do first

Read the fine print on any warranty mailer carefully to determine if it is from your actual manufacturer

Targets

Car owners

Seen in

U.S.

Warranty scams
↑ 13%

warranty renewal auto-charge scam

Companies enroll consumers in recurring warranty plans with hidden auto-renewal clauses, making it extremely difficult to cancel and continuing to charge credit cards after the coverage period.

What to do first

Read all warranty contract terms for auto-renewal clauses before providing payment information

Targets

Car owners

Seen in

U.S.

Parent and family scams
↑ 18%

fake baby product recall scam

Scammers send emails or social media messages about fake baby product recalls, directing parents to phishing websites that collect personal and financial information under the pretense of processing a refund.

What to do first

Verify any product recall at cpsc.gov before clicking any links or providing information.

Targets

Parents

Seen in

U.S.

Parent and family scams
↑ 18%

child modeling agency scam

Fake talent agencies approach parents claiming their child has been scouted for modeling or acting, then charge thousands in upfront fees for portfolios, classes, and registration that lead to no real opportunities.

What to do first

Legitimate talent agencies never charge upfront fees β€” they earn commissions only when your child books paid work.

Targets

Parents

Seen in

U.S.

Ponzi and pyramid schemes
↓ 3%

gifting circle scam

Participants are told to give a cash gift to join a circle with the promise of receiving a larger payout when they recruit enough new members, which is an illegal pyramid scheme.

What to do first

Understand that gifting circles are illegal pyramid schemes regardless of what they are called

Targets

Low-income households

Seen in

U.S.

Ponzi and pyramid schemes
↓ 3%

blessing loom scam

The blessing loom is a pyramid scheme presented as a board or flower diagram where participants pay to enter and are promised a large payout when enough new members join below them.

What to do first

Recognize that the blessing loom is an illegal pyramid scheme regardless of the language used to describe it

Targets

Low-income households

Seen in

U.S.

Ponzi and pyramid schemes
↓ 3%

crowdfunding Ponzi scheme

Scammers use crowdfunding platforms or create their own to collect funds for fictional projects, using new contributions to pay fake returns to early backers before disappearing.

What to do first

Research the project team independently and verify their identities and past work before backing a campaign

Targets

Investors

Seen in

U.S.

Ponzi and pyramid schemes
↓ 3%

Crypto MLM token recruitment scheme

A cryptocurrency project uses MLM-style recruitment to attract investors who earn commissions by recruiting others, with the token having little real utility or market value.

What to do first

Verify the token is listed on major exchanges and has real trading volume independent of the recruitment program.

Targets

Crypto traders

Seen in

U.S.

Ponzi and pyramid schemes
↓ 3%

Insurance and financial services MLM scheme

A financial services or insurance company uses MLM recruitment to sell policies, with agents earning more from recruiting new agents than from providing sound financial advice.

What to do first

Research the company's reputation with your state insurance department and the BBB.

Targets

Young adults

Seen in

U.S.

Ponzi and pyramid schemes
↓ 3%

MLM targeting college students

MLM companies aggressively recruit on college campuses, targeting students with promises of financial independence, flexible schedules, and entrepreneurship experience.

What to do first

Research the company name before attending any info session β€” search the company name plus scam or MLM.

Targets

College students

Seen in

U.S.

Ponzi and pyramid schemes
↓ 3%

MLM recruitment after job loss

MLM recruiters target people who have recently lost their jobs, framing the opportunity as a way to replace income quickly, when most participants earn less than minimum wage.

What to do first

Remember that a legitimate employer pays you β€” you do not pay them to start working.

Targets

Job seekers

Seen in

U.S.

AI impersonation
↓ 14%

Fake boss wire approval voice note scam

A finance employee receives a convincing voice note from what sounds like the CEO approving an urgent same-day wire.

What to do first

Call the executive or use the internal approval flow before sending funds.

Targets

Finance teams

Seen in

Global

Business email compromise
↓ 14%

CEO wire transfer fraud

Scammers impersonate a company's CEO or executive via email, urgently requesting a large wire transfer to an account they control.

What to do first

Verify any unusual wire transfer request by calling the executive directly using a known phone number

Targets

Finance teams

Seen in

Global

Business email compromise
↓ 14%

vendor invoice payment redirect scam

Scammers impersonate a trusted vendor and send a fake notice that banking details have changed, diverting legitimate invoice payments to a fraudulent account.

What to do first

Always verify bank account change requests by calling the vendor at a number from your existing records

Targets

Accounts payable teams

Seen in

Global

Business email compromise
↓ 14%

payroll direct deposit redirect scam

Scammers impersonate an employee via email and request that their direct deposit payroll information be changed to a fraudulent bank account.

What to do first

Require in-person or phone verification for any direct deposit changes using a known employee phone number

Targets

HR departments

Seen in

U.S.

Business email compromise
↓ 14%

W-2 tax form data harvest scam

Scammers impersonate executives or HR leaders via email to request bulk W-2 or tax information for all employees, enabling identity theft at scale.

What to do first

Never email W-2 data or bulk employee information based on an email request alone

Targets

HR departments

Seen in

U.S.

Business email compromise
↓ 14%

attorney impersonation BEC scam

Scammers pose as a company's legal counsel or an external attorney, claiming a confidential legal matter requires an urgent wire transfer.

What to do first

Verify any attorney-initiated payment requests by calling the law firm using independently sourced contact information

Targets

Finance teams

Seen in

U.S.

Business email compromise
↓ 14%

real estate closing wire fraud

Scammers intercept real estate transaction emails and send fake closing instructions with fraudulent wire transfer details, stealing down payments and closing funds.

What to do first

Always verify wire instructions by calling the title company at a number from their official website, never from the email

Targets

Homebuyers

Seen in

U.S.

Business email compromise
↓ 14%

supplier impersonation payment fraud

Scammers create fake supplier identities or compromise real supplier email accounts to submit fraudulent invoices for goods or services never provided.

What to do first

Verify all new suppliers through independent research and phone confirmation before making any payments

Targets

Procurement teams

Seen in

Global

Business email compromise
↓ 14%

executive gift card request scam

Scammers impersonate a company executive and ask employees to urgently purchase gift cards for clients, employees, or events, then request the card numbers and PINs.

What to do first

Always verify gift card requests by speaking directly with the executive who supposedly sent the email

Targets

Administrative assistants

Seen in

U.S.

Business email compromise
↓ 14%

employee data theft BEC phishing

Scammers impersonate executives or IT staff to request sensitive employee data including Social Security numbers, addresses, and financial information.

What to do first

Never send bulk employee personal data via email regardless of who requests it

Targets

HR departments

Seen in

U.S.

Business email compromise
↓ 14%

merger and acquisition confidential BEC scam

Scammers impersonate executives or advisors involved in a pending deal, using the secrecy inherent in M&A transactions to authorize urgent, fraudulent wire transfers.

What to do first

Verify all M&A-related payment requests through pre-established secure communication channels

Targets

CFOs

Seen in

U.S.

Employment fraud
↓ 8%

Fake LinkedIn recruiter crypto role scam

A recruiter claims to fill an exclusive crypto role, then pushes the candidate into downloading a wallet, trading app, or identity kit.

What to do first

Verify the recruiter from the company's actual careers page before engaging.

Targets

Tech workers

Seen in

Global

Recovery fraud
↓ 8%

NFT asset recovery service scam

A supposed blockchain investigator says lost NFTs or tokens can be restored if you sign a recovery transaction or pay an unlock fee.

What to do first

Never sign recovery transactions from unverified helpers.

Targets

NFT holders

Seen in

Global

Investment scams
↓ 8%

Token presale whitelist scam

A crypto project promises early access or whitelist allocation, but the sale page, wallet, or smart contract is controlled by attackers.

What to do first

Verify token sales from official project channels and never trust a wallet address shared in DMs.

Targets

Crypto users

Seen in

Global

Cryptocurrency scams
↓ 8%

rug pull token scam

Developers launch a new cryptocurrency token with heavy promotion, attract investor funds into the liquidity pool, then drain all liquidity and disappear with investors' money.

What to do first

Check if liquidity is locked using tools like Team Finance or Unicrypt before investing in any new token

Targets

Crypto investors

Seen in

Global

Cryptocurrency scams
↓ 8%

crypto wallet drainer scam

Malicious smart contracts or phishing sites trick users into signing a transaction that grants the attacker unlimited permission to transfer tokens from their wallet.

What to do first

Always review transaction details carefully in your wallet before signing β€” revoke approvals regularly using tools like Revoke.cash

Targets

Crypto investors

Seen in

Global

Cryptocurrency scams
↓ 8%

fake crypto airdrop scam

Scammers impersonate real crypto projects and announce fake airdrops on social media, directing users to malicious claim sites that steal wallet credentials or drain funds.

What to do first

Verify any airdrop announcement through the project's official website and verified social media channels

Targets

Crypto investors

Seen in

Global

Cryptocurrency scams
↓ 8%

crypto pump and dump group scam

Organized groups on Telegram or Discord coordinate mass purchases to inflate a low-cap token price, then sell their pre-purchased holdings at the peak, leaving latecomers with losses.

What to do first

Recognize that pump and dump schemes are illegal market manipulation β€” participants can face legal consequences

Targets

Crypto investors

Seen in

Global

Identity theft
↓ 16%

Tax account identity lock scam

A fake identity-protection service says your tax profile is frozen and needs reactivation, while real fraud may also be underway.

What to do first

Check with the tax authority or credit bureaus directly instead of the message.

Targets

Tax filers

Seen in

U.S.

Identity theft
↓ 16%

W-2 identity theft scam

A fake executive or HR request leads staff to send employee tax forms or identity records to an attacker.

What to do first

Verify executive data requests through a second channel before sending records.

Targets

HR teams

Seen in

U.S.

Smishing
↓ 16%

Payroll tax link text scam

A text tells the employee there is a payroll or tax mismatch that must be corrected immediately through a mobile link.

What to do first

Contact payroll through your employer's official HR portal or known contact method.

Targets

Employees

Seen in

Global

Fake airdrop scams
↓ 27%

wallet connect phishing airdrop scam

Scammers create fake airdrop claim sites that prompt users to connect their crypto wallet, then use malicious smart contract approvals to drain all tokens from the wallet.

What to do first

Never connect your wallet to unknown websites and verify any airdrop through the project official channels

Targets

Crypto users

Seen in

U.S.

Fake airdrop scams
↓ 27%

NFT mint drain scam

Fake NFT minting sites disguised as free airdrops or early access mints use malicious smart contracts to drain ETH or approved tokens from connected wallets during the minting process.

What to do first

Only use minting links from the project official website and verify through multiple official channels before clicking

Targets

NFT collectors

Seen in

U.S.

Fake airdrop scams
↓ 27%

airdrop verification phishing scam

Fake airdrops require identity verification that collects personal documents and selfies, enabling identity theft or KYC bypass on crypto exchanges using the victim credentials.

What to do first

Never upload identity documents to claim a free airdrop, as legitimate airdrops rarely require KYC

Targets

Crypto users

Seen in

U.S.

Fake airdrop scams
↓ 27%

layer-2 bridge exploit airdrop scam

Fake airdrops impersonate layer-2 scaling solutions and direct users to fraudulent bridge interfaces that steal deposited funds instead of bridging them to another network.

What to do first

Use bridge interfaces only from the official project website and verify the URL through multiple trusted sources

Targets

DeFi participants

Seen in

U.S.

Fake airdrop scams
↓ 27%

fake DEX launch airdrop scam

Scammers announce fake decentralized exchange launches with airdrop incentives, collecting wallet connections and token approvals that enable theft of user funds.

What to do first

Research any new DEX thoroughly before connecting your wallet, checking for audits, team identity, and community history

Targets

DeFi participants

Seen in

U.S.

Fake invoice scams
↓ 7%

vendor invoice spoofing scam

Scammers impersonate a company's existing vendor and send a fake invoice with updated banking details, diverting legitimate payments to a fraudulent account.

What to do first

Always verify banking detail changes by calling the vendor directly using a phone number from your records β€” not from the email.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

domain renewal invoice scam

A fake invoice arrives by mail or email urging you to renew your domain name through an unauthorized registrar at an inflated price, sometimes transferring your domain away.

What to do first

Check your actual registrar account directly to verify your domain's renewal status and expiry date.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

SEO services invoice scam

An unsolicited invoice for SEO or website listing services is sent to businesses that never ordered them, hoping the accounts payable team will pay without questioning it.

What to do first

Verify every invoice against purchase orders and approved vendor lists before authorizing payment.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

office supplies invoice scam

Scammers send fake invoices for office supplies such as toner, paper, or printer cartridges that were never ordered, targeting businesses that process many similar invoices.

What to do first

Instruct staff to never provide equipment or ordering details to unsolicited callers.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

subscription service invoice scam

A fake invoice for a software subscription or SaaS product is sent to businesses, mimicking real services like cloud storage, CRM tools, or collaboration platforms.

What to do first

Maintain a central registry of all software subscriptions and cross-reference every invoice against it.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

cloud hosting invoice scam

A fake invoice claiming to be from AWS, Google Cloud, or another hosting provider demands payment for services, targeting companies that use multiple cloud vendors.

What to do first

Verify all cloud invoices by logging directly into your provider's billing console β€” AWS, Google Cloud, and Azure all have online billing dashboards.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

advertising invoice scam

A fake invoice for advertising services β€” such as a Yellow Pages listing, online directory, or Google Ads β€” is sent to businesses that never authorized the purchase.

What to do first

Read every invoice carefully, including fine print β€” look for disclaimers indicating it is a solicitation, not a bill.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

trademark registration invoice scam

After filing a trademark, businesses receive fake invoices from unofficial entities demanding payment for trademark registration, monitoring, or publication services.

What to do first

Only pay trademark fees through the official trademark office website (USPTO.gov in the US) or through your registered attorney.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

annual report filing fee scam

A company receives an official-looking notice demanding payment for its annual report filing, but the notice comes from a private company charging far more than the actual government fee.

What to do first

File your annual report directly through your state's Secretary of State website to pay only the actual government fee.

Targets

Small business owners

Seen in

U.S.

Fake invoice scams
↓ 7%

government compliance invoice scam

A fake invoice demands payment for mandatory government compliance services such as labor law poster updates, OSHA certifications, or ADA compliance reviews that were never ordered.

What to do first

Verify any compliance requirements directly with the relevant government agency β€” OSHA, DOL, or your state's labor department.

Targets

Small business owners

Seen in

U.S.

Pig butchering scams
↓ 6%

LinkedIn professional connection pig butchering scam

Scammers create polished LinkedIn profiles impersonating professionals and connect with targets, using business credibility to build trust before steering them into fraudulent investment schemes.

What to do first

Verify LinkedIn connections by checking their employment history with the actual companies listed.

Targets

Professionals

Seen in

U.S.

Pig butchering scams
↓ 6%

WhatsApp group investment pig butchering scam

Victims are added to WhatsApp groups posing as exclusive investment communities where fake members share fabricated profit screenshots, pressuring newcomers to invest in fraudulent platforms.

What to do first

Leave immediately if you are added to a WhatsApp investment group without your consent.

Targets

Aspiring investors

Seen in

U.S.

Pig butchering scams
↓ 6%

crypto trading mentorship pig butchering scam

Scammers pose as successful crypto traders offering mentorship, guiding victims through increasingly larger trades on a fake exchange until their funds are locked and unrecoverable.

What to do first

Verify any crypto exchange on CoinMarketCap, CoinGecko, or check if it is registered with FinCEN.

Targets

Crypto beginners

Seen in

U.S.

Pig butchering scams
↓ 6%

forex profit sharing pig butchering scam

Scammers recruit victims into fake forex trading partnerships where the scammer claims to manage trades and share profits, using a fraudulent platform to show fabricated gains before stealing deposits.

What to do first

Verify any forex platform's regulatory status with the NFA at nfa.futures.org or the FCA at register.fca.org.uk.

Targets

Aspiring traders

Seen in

U.S.

Pig butchering scams
↓ 6%

gold trading platform pig butchering scam

Scammers lure victims into investing in gold through fraudulent online trading platforms, using fake market data and fabricated profits to extract increasingly large deposits before disappearing.

What to do first

Invest in gold only through established and regulated dealers listed on the CFTC or your country's financial regulator.

Targets

Retirees

Seen in

U.S.

Pig butchering scams
↓ 6%

real estate crowdfunding pig butchering scam

Scammers create fake real estate crowdfunding platforms with fabricated property portfolios, building trust through small dividend payments before locking out investors and stealing their capital.

What to do first

Verify any crowdfunding platform's SEC registration at sec.gov/cgi-bin/browse-edgar.

Targets

Real estate enthusiasts

Seen in

U.S.

Pig butchering scams
↓ 6%

sports betting system pig butchering scam

Scammers pose as sports betting experts with guaranteed winning systems, guiding victims to deposit money on fraudulent betting platforms that manipulate odds and block withdrawals.

What to do first

Only bet through licensed and regulated sportsbooks in your jurisdiction.

Targets

Sports fans

Seen in

U.S.

Pig butchering scams
↓ 6%

online gaming marketplace pig butchering scam

Scammers target gamers through fake in-game item marketplaces or gaming investment platforms, building relationships through shared gaming interests before redirecting them to fraudulent financial platforms.

What to do first

Keep gaming friendships and financial decisions completely separate.

Targets

Gamers

Seen in

U.S.

Holiday shopping scams
β†’ 0%

cyber monday phishing email scam

Phishing emails disguised as Cyber Monday deal alerts from major retailers contain malicious links that steal login credentials and payment information.

What to do first

Navigate directly to the retailer's official website or app instead of clicking email links.

Targets

Online shoppers

Seen in

U.S.

Holiday shopping scams
β†’ 0%

fake holiday travel deal scam

Scammers advertise deeply discounted holiday travel packages via social media and email, collecting full payment for flights and hotels that are never booked.

What to do first

Book travel through established platforms and verify any deal by calling the airline or hotel directly with the confirmation number.

Targets

Travelers

Seen in

U.S.

Related professions