Recent Reports
Every entry includes the warning signs and what to do if you were targeted. Pick a type of scam below to narrow the list.
Showing 301–323 of 323 reports across all categories
A user reported a tech support scam lure whose link led to basiviro.z1.web.core.windows.net, a fake warning page that pushes victims to call an international phone number.
Researcher masaomi346 reported Android malware disguised as Sumitomo Mitsui Card (SMBC Card), linked from a Google Drawings page, on October 13, 2026.
Researcher masaomi346 reported a phishing site at nebuladialogue.top impersonating Sumitomo Mitsui Card (SMBC Card) on October 13, 2026.
Researcher kubotaa reported MUFG Bank phishing sites at mufg-co-jp.digital and mufg-co-jp.best on October 13, 2026.
CyberPulse flagged a second fake NCRP cyber crime portal, ncrp-cyber-incident-portal-dps97l520lcn.edgeone.dev, as government impersonation on October 13, 2026.
CyberPulse flagged a site on edgeone.dev impersonating India's National Cyber Crime Reporting Portal (NCRP) as likely phishing on October 13, 2026.
Crypto tool NettoLens warned that @NettoLensRH and nettolens.fun copied its site and logo, and that a circulating token contract (0x629D…0D8C) is fake: it has not launched a token.
Nigerian airline Air Peace warned that a fraudster posing as its customer service on WhatsApp (08082894680) is taking payments from travellers into non-Air Peace accounts.
Infoblox Threat Intel detailed Noir, a crypto wallet-drainer kit that looks up its current infrastructure through DNS TXT records at _r.noir.black and steals through wallet approvals rather than seed phrases.
MalwareTips exposed Glowtempo.com on October 13, 2026 as a fake online store: a recently created domain advertising steep discounts on social media, with buyers receiving nothing or cheap substitutes.
PhishStats flagged hmelef.ru/fits.html as a new phishing page on October 13, 2026, hosted on IP 188.246.224.242 (Selectel, Russia).
MalwareTips exposed Faraeler.com on October 13, 2026 as a fake online store: a days-old domain advertising steep discounts on social media, with buyers receiving nothing or cheap substitutes.
MalwareTips says Canowex.com poses as a crypto casino offering huge sign-up bonuses, then demands "verification" deposits before anyone can withdraw.
MalwareTips exposed Junaiora.com on October 13, 2026 as a fake online store: a days-old domain advertising steep discounts on social media, with buyers receiving nothing or cheap substitutes.
MalwareTips exposed Xeliriena.com on October 13, 2026 as a fake online store: a days-old domain advertising steep discounts on social media, with buyers receiving nothing or cheap substitutes.
MalwareTips exposed Solublea.com on October 13, 2026 as a fake online store: a days-old domain advertising steep discounts on social media, with buyers receiving nothing or cheap substitutes.
MalwareTips exposed Argonsor.com on October 13, 2026 as a fake online store: a recently created domain advertising steep discounts on social media, with buyers receiving nothing or cheap substitutes.
Microsoft investigated a phishing campaign that hid invisible Unicode "tag" characters inside words like "funding" to slip past email filters; CircleID analysed the business-loan lure domains it used.
Scam Sniffer added airdrop-checker-l2.io to its blocklist as a wallet drainer on October 13, 2026. Airdrop "eligibility checkers" hide malicious approvals inside a normal-looking claim flow.
Scam Sniffer listed app-uniswap-fi.net, a lookalike of the Uniswap app, as a wallet drainer on October 13, 2026. The real Uniswap web app is at app.uniswap.org.
Scam Sniffer classified wallet-rectify-sync.com as a seed-phishing site on October 13, 2026: it aims to steal wallet recovery phrases using "repair" and "sync" themes.
Crypto security service Scam Sniffer added claim-rewards-eigen.xyz to its blocklist on October 13, 2026 and classified it as a wallet drainer that uses Eigen-style reward branding.
Elastic Security Labs found a fake Web3 accelerator called Apex that lured crypto founders with free AI credits and audits, then spread Windows and macOS malware through two malicious npm packages.