Recent Reports
Every entry includes the warning signs and what to do if you were targeted. Pick a type of scam below to narrow the list.
Showing 61–90 of 323 reports across all categories
The Hong Kong Interbank Clearing Limited (HKICL), in a notice carried by the Hong Kong Monetary Authority's scam alerts on 20 October 2026, warned of fraudulent websites claiming to offer a Faster Payment System (FPS)…
Germany's Federal Financial Supervisory Authority (BaFin) warned on 20 October 2026 that the operators of the website themayerbrown.com are offering financial services without the required permission and are not super…
Hong Kong's Securities and Futures Commission (SFC) added the website lomgbridge.com to its Alert List as a suspicious website on 20 October 2026. The SFC states that the website is not associated with Long Bridge HK…
Hong Kong's Securities and Futures Commission (SFC) added Belt and Road EPC Capital Limited to its Alert List on 20 October 2026 as an unlicensed entity. The SFC says the entity is not licensed by or registered with t…
The UK Financial Conduct Authority (FCA) added Forex-gpt.com to its Warning List on 20 October 2026, saying the firm is not authorised or registered by the FCA and may be providing or promoting financial services or p…
Rappler published a fact check on 20 October 2026 rating as false a claim that all Philippine national ID holders, including non-4Ps beneficiaries, can receive P5,000 cash aid and a rice subsidy starting 20 October. R…
Malay Mail, carrying a Bernama report, said on 20 October 2026 that Malaysia's Road Transport Department (JPJ) denied the authenticity of a TikTok advertisement offering driving licences without the need to take a tes…
Spanish fact-checker Maldita.es reported on 20 October 2026 that an email supposedly from the supermarket chain Mercadona promises a food box worth €40 for answering a satisfaction survey. The link leads to a page at…
MalwareTips published a warning on 20 October 2026 about a text message invoking PGA National Resort that refers to a $1,245 charge and directs the recipient to Reservation247 to review, modify or cancel a reservation…
MalwareTips published an investigation on 20 October 2026 into Stallion Power, a male-enhancement gummy promoted through a 'horse soda' or baking-soda trick video. It says the advertising includes fabricated-looking a…
MalwareTips published an investigation on 20 October 2026 into the 'Dr. Ming Wang blueberry recipe' advertisements, which use the eye surgeon's identity to make a vision supplement look professionally endorsed. A reco…
MalwareTips published an investigation on 20 October 2026 calling Crackerbarrelxmas.lovable.app a gift card scam. The page is titled 'Cracker Barrel $500 Gift Card | Claim Your Reward' and runs on a free Lovable web a…
MalwareTips says Mxpkg.com is a high-risk dropshipping store (Safety Score 30/100) flagged by 4 of 93 VirusTotal vendors, part of a network of near-identical shops.
MalwareTips rates Usapvaall.com 'Dangerous' (Safety Score 12/100) and says it is a dropshipping store in a network of near-identical scam shops that reopen under new names.
MalwareTips says Stylevelina.com, registered on 16 October 2026, is a high-risk dropshipping store (Safety Score 26/100) in a scam network of near-identical shops.
MalwareTips says Gourina.online, registered on 17 October 2026 and listing only a Gmail contact, is a high-risk dropshipping store (Safety Score 38/100) in a scam-store network.
MalwareTips says Mypttsb24.online, registered on 18 October 2026, is a high-risk dropshipping store (Safety Score 38/100) in a network of lookalike shops that reopen under new names.
MalwareTips says Clairehartleyboutique.com, registered on 18 October 2026, is a high-risk dropshipping store (Safety Score 32/100) in a network of near-identical shops, with costly returns to China.
MalwareTips says Billinistore.shop, registered on 25 May 2026, is a copycat store rated High Risk (24/100) whose catalog, photos and branding are copied from real brands and stores that don't run it.
MalwareTips says Luvygift.com, registered on 5 March 2026, is a copycat store rated High Risk (28/100) whose catalog, photos and branding are copied from real brands and stores that don't run it.
MalwareTips says Pluckfitf.com, registered on 15 October 2026, is a copycat store rated High Risk (28/100) that runs on spacegone.com, a storefront platform shared by a fake-shop network it tracks.
MalwareTips says Evervessia.com, registered on 16 October 2026, is a copycat store rated High Risk (30/100) that runs on ojtlnsa.com, an XShoppy-based platform used by a fake-shop network it tracks.
MalwareTips says Fjytdjw.com is a copycat store rated Dangerous (Safety Score 18/100), with 14 of 93 VirusTotal vendors flagging it as malicious or suspicious. Its catalog is copied from real brands that don't run it.
MalwareTips rates Drbronneronlineshop.com, registered on 16 October 2026, a high-risk copycat store (Safety Score 38/100). It uses Dr. Bronner's name, but the real Dr. Bronner's isn't involved.
MalwareTips says Robux-free-2023.blogspot.com, a Blogger page titled 'Roblox Robux Generator 2023', is a content-locker scam: the 'reward' sits behind paid offers and never arrives. Roblox isn't involved.
MalwareTips says Bovix7.pages.dev, a free Cloudflare Pages site titled 'Roblox', is a free Robux scam that locks the promised reward behind paid offers. No Robux arrives and Roblox isn't involved.
Dataminr says riskified-okta.com and shipmonk-servicenow.com hosted fake Okta logins with a YubiKey MFA-downgrade lure; gladly-okta.com, found a day later, matches the theme. Okta, ServiceNow and the named firms are impersonated.
MalwareTips says Fabomex.com, registered on 15 October 2026, is a fake crypto casino built from a known scam kit: it shows a big promo-code bonus, then demands crypto 'verification deposits' before any withdrawal.
OpenSourceMalware says GhostAction attackers registered my-github.com and sent fake GitHub security alerts from noreply@my-github.com to steal maintainers' passwords, 2FA codes and OAuth tokens, The Hacker News reports. GitHub isn't involved.
Researcher Steven Lim flagged teams-cloud.live, five days old on 18 October 2026, for copying Microsoft Teams' login screen and interface in an apparent phishing attempt. Microsoft is impersonated; the domain isn't a Microsoft service.