How To Report Nonconsensual Intimate Images
If an intimate image or video was shared without your consent, report it to the platform promptly and preserve screenshots, URLs, dates, and other evidence. The FTC explains how...
Scam radar
Scam Radar — real-time scam alerts
The continuous press review of online scams: new alerts, data and patterns updated every day from official sources (FBI, Europol, NCSC, Postal Police, FTC...). The same sources used by banks, insurers and law enforcement.
Latest alerts
Nonconsensual Intimate ImagesUpdated today Ftc ImpersonationUpdated today FTC warns of calls threatening phone number deactivation
Scammers are impersonating FTC officials and claiming your phone number is registered to you and being used for fraud overseas. They may read a fake badge ID and threaten to...
PhishingUpdated on Oct 22, 2026 Fake Amazon Music creator offer steals Google credentials
Fake Amazon Music opportunities are targeting YouTube creators with convincing channel statistics, payout calculators, and a Google verification page. The lure is a nonexistent...
Franchise FraudUpdated on Oct 20, 2026 FTC Franchising Warning: How to Spot Dishonest Franchise Disclosures Before You Invest
The FTC has taken action against Premier Martial Arts franchisor for failing to give potential buyers honest information about the costs, risks, and earnings of opening a...
WhatsappUpdated on Oct 20, 2026 WhatsApp under attack: new wave of account thefts through fake online contests
The Postal Police raises the alarm about a new wave of fraudulent messages spread via WhatsApp. Cybercriminals send, from contacts already present in the address book (accounts...
Data BreachUpdated on Oct 19, 2026 What to do when a data breach notice doesn't say much (and how to spot a fake one)
Data breach notifications are flooding inboxes and mailboxes, with over 471 million victim notices sent in the first half of 2026 alone, yet only 24% reveal the attack vector....
Email BombingUpdated on Oct 18, 2026 Email bombing: why your inbox flooded with sign-up messages and what to do
Email bombing (also called form, list, or subscription bombing) is a fraud tactic where attackers flood your inbox with hundreds of sign-up confirmation emails from legitimate...
PhishingUpdated on Oct 18, 2026 FBI IC3: AI-Enhanced Phishing and Smishing Target Election Officials and Voters
...
Job ScamUpdated on Oct 17, 2026 Job offer scams harder to spot when you apply to dozens of roles a day
Job seekers using AI to send mass applications (the "spray and pray" approach) may struggle to tell real recruiter replies from scam messages, because they no longer remember...
Consent PhishingUpdated on Oct 17, 2026 Microsoft Entra ID: consent phishing attack to gain application permissions on M365
The CSIRT Italia has documented a consent phishing campaign targeting Microsoft 365 users and administrators. The criminals register a malicious app in Microsoft Entra ID and,...
MedicareUpdated on Oct 16, 2026 Medicare Open Enrollment scam calls, texts and ads: what to watch for
Cos'è la truffa Durante l'Open Enrollment di Medicare (15 ottobre - 7 dicembre) i truffatori sfruttano il periodo per fingersi assicuratori o agenti sanitari e sottrarre dati...
PhishingUpdated on Oct 16, 2026 Fake Calendly Meta interview pages steal Facebook and Google logins including 2FA codes
Job seekers are being targeted by fake Calendly booking pages that impersonate Meta (Facebook) recruiters. The pages copy a real Calendly scheduling flow, then push victims...
SextortionUpdated on Oct 16, 2026 FTC Accuses Digital Forensics of $60M Sextortion Recovery Scam That Exploits Already-Targeted Victims
The FTC has filed a complaint against Digital Forensics Corporation, accusing it and owner Dmitry Belkin of collecting at least $60 million from sextortion victims by selling fake...
Identity TheftUpdated on Oct 16, 2026 FBI investigates dark web service selling 153M drivers licenses stolen from ID verification firm
A dark web marketplace called Nexus is selling digital scans of more than 153 million US and Canadian drivers licenses, reportedly siphoned from a major identity verification...
Election ScamUpdated on Oct 16, 2026 FBI Warns Scammers Exploit 2026 US Midterm Election With Fake Donations, ScamPACs and Voter Registration Phishing
The FBI warns that scammers are exploiting the 2026 U.S. Midterm Election through several fraud schemes. Scammers impersonate candidates, campaigns, and government entities using...
Dns HijackUpdated on Oct 15, 2026 Attackers hijack country-code domains to impersonate Google and other services
...
Text ScamUpdated on Oct 14, 2026 Scammers use your name in a single-question text to start a conversation you should never reply to
A text that contains only your name and a question mark is a deliberate hook used by scammers who buy breached contact lists. The goal is to make you reply "Who is this?" or...
North KoreaUpdated on Oct 14, 2026 FBI Warns: North Korean IT Workers Recruit Americans as Unwitting Facilitators
The FBI has issued an updated advisory warning that North Korean state-sponsored "IT Workers" (ITWs) are increasingly recruiting Americans as witting or unwitting facilitators to...
PhishingUpdated on Oct 13, 2026 Phishing emails now hide instructions for your AI assistant
Phishing emails are evolving. Attackers embed hidden prompt-injection instructions aimed at AI assistants that summarize or triage your inbox. The visible message may look...
CryptoUpdated on Oct 13, 2026 Tampered Ledger crypto wallets sold via CryptoBilis drain user funds via hidden spy chip
Ledger has confirmed that hardware wallets distributed through Malaysia-based reseller CryptoBilis were shipped with a hidden spy implant that captures the screen output and...
Vibe CodingUpdated on Oct 11, 2026 Is that vibe coded app safe? 5 checks before you download
AI "vibe coding" tools let anyone ship an app in a weekend, but speed often comes at the cost of security. Researchers have found critical flaws in popular AI-generated apps,...
MalvertisingUpdated on Oct 11, 2026 Malicious Google Ads Exploit Bing Redirects to Spread Fake Claude Installers via ClickFix
Hackers are running sponsored Google ads that display the trusted bing.com domain as the destination, exploiting Bing's click-tracking endpoint to redirect victims through a...
PhishingUpdated on Oct 10, 2026 Brand deal phishing scam impersonates sponsors to steal YouTube creators' Google accounts
A new phishing campaign is targeting YouTubers and content creators with fake sponsorship offers from well-known brands such as Hollyland. The scam begins with a personalized...
Credential StuffingUpdated on Oct 10, 2026 Dominos customers hit by credential stuffing reusing passwords from old breaches
Domino's Pizza customers have been notified that their accounts were accessed by criminals using email/password combinations stolen in unrelated breaches and reused on the...
Money MuleUpdated on Oct 10, 2026 Money mule recruitment scam: 15,000 fake job hires laundered millions for cybercrime gangs
What happened A Ukrainian-Russian dual citizen pleaded guilty in a U.S. court to running Your Mule Cashout (YMCO) , a money-laundering network active since 2007 that recruited...
PhishingUpdated on Oct 9, 2026 BlueKit phishing-as-a-service toolkit automates account hijacking on Amazon Google Apple and crypto sites
AI-powered phishing kit BlueKit lets criminals hijack accounts in minutes Researchers at Malwarebytes uncovered BlueKit , a phishing-as-a-service (PhaaS) toolkit sold on...
Child SafetyUpdated on Oct 9, 2026 Explicit images of your child shared online including AI deepfakes take these steps now
Parents and guardians are increasingly discovering that explicit images, including AI-generated deepfakes, of their children have been shared online without consent. Possessing or...
RansomwareUpdated on Oct 9, 2026 Ransomware recovery CEO charged for secretly paying attackers and lying about proprietary decryptors
A US CEO running a ransomware remediation firm has been criminally charged with allegedly defrauding victims: prosecutors say he secretly paid the attackers for decryption keys,...
Facebook MarketplaceUpdated on Oct 8, 2026 Facebook Marketplace scam uses your name and number to bait replies
Scammers are sending iMessage texts that include a fake Facebook Marketplace listing showing the recipient's own name as the seller. The personalized screenshot acts as a...
PhishingUpdated on Oct 7, 2026 Fake ChatGPT Gemini Claude sites steal ad accounts and MFA codes via browser-in-the-browser phishing
A phishing campaign is using fake versions of ChatGPT, Gemini, Claude, and Perplexity to trick users, especially ad account managers and agency staff, into handing over login...
PhishingUpdated on Oct 6, 2026 Phishing Email Delivers ScreenConnect RMM to Take Over Your Computer
Phishing attackers are abusing legitimate Remote Monitoring and Management (RMM) tools like ScreenConnect, AnyDesk, and TeamViewer to gain remote control of victims' computers. A...
PhishingUpdated on Oct 3, 2026 Convincing Free Mobile phishing emails appear after data breach
Cybercriminals are targeting Free Mobile customers in France with sophisticated phishing emails sent after the operator's October 2024 data breach. Messages copy the official...
CryptoUpdated on Oct 3, 2026 Fake xStocks, Pendle and other crypto sites lure voters into wallet-draining scams
Scammers have set up roughly 70 lookalike websites that impersonate real crypto projects such as xStocks (Kraken), Zama, Kinetiq, Pendle, Firelight, Yield Basis, Keeta, NetNet and...
Crypto ScamUpdated on Oct 3, 2026 Microsoft X account hijacked to push fake Clippy crypto token pump-and-dump
The official Microsoft X account (13M+ followers) was hijacked to promote a fake $Clippy crypto token in a pump-and-dump scheme. Attackers used an impersonator account posing as...
DeepfakesUpdated on Oct 2, 2026 Talking with parents and kids about deepfakes and online safety under the Take It Down Act
The FTC is warning families about a growing online threat: deepfakes and "nudify" apps that use AI to create fake nude images and videos of real people, often kids and teens....
Timeshare ExitUpdated on Oct 1, 2026 Timeshare exit scams: from fake buyers to recovery fraud
Timeshare owners trying to exit their contracts are increasingly targeted by fraudsters posing as exit specialists, resale brokers, or even government recovery agents. Scammers...
Device Code PhishingUpdated on Oct 1, 2026 Device code phishing: how scammers hijack your account with a fake meeting invite
Device code phishing abuses a legitimate sign-in flow (OAuth 2.0 Device Authorization Grant) used by smart TVs, printers, and conference gear. A scammer starts a real sign-in for...
IphoneUpdated on Oct 1, 2026 Fake iPhone Duo preorder page uses DarkSword exploit to attack visitors - how to stay safe
Scammers are circulating a fake Apple-style preorder page for the unannounced iPhone Duo, promising a $500 voucher and early access. Apple has not opened preorders yet (they start...
PhishingUpdated on Sep 30, 2026 Modern phishing evades traditional red flags with QR codes, AI lures and token theft
Phishing has moved far beyond typos and dodgy URLs. Attackers now use polished, AI-tailored language, QR codes that hide destinations, and tricks like ConsentFix and ClickFix that...
ClickfixUpdated on Sep 30, 2026 Custom ChatGPTs push ClickFix attacks to deliver RAT malware
Attackers are abusing OpenAI's custom GPT feature to promote malicious ChatGPT variants via sponsored Google results. Once installed, the rogue GPT redirects users to a Google...
Check a suspicious case for free
The continuous press review of online scams: new alerts, data and patterns updated every day from official sources (FBI, Europol, NCSC, Postal Police, FTC...). The same sources used by banks, insurers and law enforcement.