Recent Reports
Fake government agents, tech support, family members, deepfakes and debt collectors.
Two Georgia inmates were sentenced to 200 and 120 months in federal prison for a scheme in which they posed as local police and demanded 'bond' payments from people told they had missed jury duty.
Hong Kong's SFC lists investmentfuture.com as a suspicious website not associated with KR Securities (Hong Kong) Limited, an SFC-licensed corporation.
Hong Kong's SFC lists fosunholdings.com as a suspicious website not associated with Fosun International Securities Limited, an SFC-licensed corporation.
The FCA warns that claimmydisrepair.co.uk is a clone firm pretending to be the authorised firm Fountain Finances Limited, which has no connection with it.
The FCA warns that callassists.com is a clone firm pretending to be the authorised firm Call Assist Limited, which has no connection with it.
The Central Bank of Ireland warns that We Go Insure (wegoinsure.ie) is not authorised to provide insurance intermediary services and has cloned details of authorised firms.
MalwareTips says robx.me, a 'free Robux' generator, is not a Roblox site: it plays fake animations, then pushes surveys, app installs and paid subscriptions, and may ask for Roblox logins.
CERT-AGID warns of SMS messages claiming an unpaid Rome GRA traffic fine from the Polizia di Stato, linking to poliziadistato.info to collect personal and payment card data.
The Central Bank of Ireland warns that Temp Insure Cover (tempinsurecover.ie) is not authorised to provide insurance intermediary services and has cloned details of authorised firms.
HKICL warns that fpsrefund.club poses as an FPS 'Buyer Online Protection' refund service to collect ID documents and bank account details; HKICL has no affiliation with the site.
The FCA has updated its warning about clone firm 'Arbion Assets / Arbion Assets Management', which pretends to be the authorised firm Arbion Limited using arbionassets.com and arbionassetsmanagement.com.
Infoblox links the Help TDS traffic system, which sends victims to fake Microsoft support pages on throwaway Cloudflare Pages subdomains, to the Hotejka affiliate program, a likely rebrand of ROI777.
Hornetsecurity found 150,000+ messages posing as Darty, BUT, Cdiscount and French bank alerts that push people to call fake 'support' numbers; the retailers and banks are impersonated.
MalwareTips says Promonowusa.com's big retailer gift card is bait for an affiliate funnel: visitors give away personal data and sign up for sponsored deals, but no card arrives.
CERT Polska warns of emails impersonating Poland's tax authority (KAS) that claim JPK_VAT discrepancies and link to a fake webmail login page.
The Central Bank of Ireland warns that 'Marilla Capital ICAV (CLONE)' copied the name and authorisation details of a genuine Irish fund to add legitimacy to a scam, using marillacapitalicav.com.
BaFin says euramcoassets.ltd is suspected of offering crypto-asset services without authorisation and is misusing the identity of the genuine EURAMCO Group, which has no connection to the site.
Saskatchewan RCMP warn that scam emails from carcmpgrca@gmail.com falsely claim recipients are under a cybercrime investigation and threaten arrest.
Malta's financial regulator, the MFSA, warns that mfsa.finance is a clone of its website using its name, logo and content. The real site is mfsa.mt.
ThreatFabric found "Hirudo", Android malware that swaps real Indonesian banking apps for patched copies to bypass security checks and steal credentials.
A fake "Google Chrome" app from developer Hizbartech appeared as a sponsored Google Play listing with over 100,000 downloads; it was really an ad-filled chat app.
Australia's ASIC added coinsitet.com to its investor alert list as an imposter of Coinbase Australia; the genuine Coinbase site is coinbase.com.
Luxembourg's CSSF warns that unknown persons are misusing the former name "Arche Associés S.A." of investment firm CORIENT S.A. via arche-associes-lu.com.
Malwarebytes found fake Calendly booking pages for "Meta Careers" interviews that steal Facebook and Google logins and two-factor codes in real time.
Germany's BaFin warns that leo-invest.de may be offering financial and securities services without authorisation and falsely claims a connection to Munich-based LEO GP GmbH.
The UK FCA warns that quorumcapitalltd.com is a clone firm pretending to be the authorised firm Quorum Capital Limited; the genuine firm has no connection to it.
A Dismislab investigation found a fake Indian Visa Application Centre site, app.ivcabd.com, sent by SMS to Bangladeshi applicants, used a Tk9 "verification" fee to link and drain bKash wallets.
Jet2 warned on X that the account @Jet2tweets__h is fake and not affiliated with Jet2holidays; its only official account is @jet2tweets with a gold tick.
South Africa's FSCA warns that someone using the name "Lucas Ludka", falsely claiming to be an FSCA lawyer, is offering fake grant-fund refunds over WhatsApp from 372 5616 2589.
Hong Kong's Judiciary warned of emails from spoofed @pt.lu addresses that falsely claim to come from the District Court Registrar and attach fake summonses; real summonses are never sent by email.