Active Threat Intelligence

Fake brand accounts DM users offering ambassador programs for free products. Victims are asked to pay upfront for 'shipping' or provide bank info for 'direct deposit commissions.'

Emails and texts warning of suspicious Apple ID activity, redirecting victims to a fake Apple login page that captures credentials and two-factor codes in real time.

Text messages claiming to be from the IRS notifying victims of an unclaimed tax refund. Link leads to a form asking for SSN, bank details, and driver's license.

Callers pose as Amazon support agents claiming a refund was processed incorrectly and too much was deposited. They ask victims to send back the 'overpayment' via gift cards.

Emails falsely warning that a Netflix payment failed and threatening account suspension. The link leads to a fake payment form that captures card details.

Emails posing as PayPal claim that account activity requires immediate identity verification. The fake page captures payment credentials and personal information.

Students receive fake acceptance emails from real universities. To 'confirm enrollment,' they're directed to a payment portal to pay a deposit to a fraudulent account.

Buyer sends a check for more than the asking price and asks the seller to wire back the difference before the check clears. The check later bounces.

Students receive emails or social media messages claiming they've been selected for a fully-funded study abroad program. A processing fee is required to secure the 'spot.'

Discord servers promote obscure cryptocurrencies as 'hidden gems,' orchestrating pump-and-dump schemes that leave ordinary investors with worthless tokens while organizers profit.

Fake recruiters with polished LinkedIn profiles reach out with high-paying, easy remote jobs that require upfront payment for 'training materials' or result in check-cashing schemes.

Callers claim to offer free Medicare benefits or supplemental coverage and ask for Medicare numbers to 'update records.' Information is used for medical identity theft.

Browser pop-ups display alarming Microsoft or Apple security warnings and a phone number to call. Victims are granted remote access, then charged hundreds of dollars for fake 'repairs.'

Following major natural disasters or news events, fake charity websites and social media pages solicit donations that never reach victims.

Victims are hired as 'package inspectors' or 'shipping coordinators,' receiving and re-shipping packages that are actually purchased with stolen credit cards.

Online romantic interests build trust over weeks or months, eventually requesting money via Venmo, Zelle, or CashApp for medical emergencies, travel costs, or business investments.

Callers posing as IRS agents threaten immediate arrest, license suspension, or deportation unless taxes are paid immediately via wire transfer or gift cards.

Scammers capitalize on student loan news by calling or emailing borrowers offering guaranteed forgiveness programs that require upfront fees or FSA ID access.

Victims receive a WhatsApp message from a known contact whose account was hijacked, asking them to forward a 6-digit code 'accidentally' sent to their phone.

Callers pose as utility company representatives threatening immediate power shutoff unless a payment is made within the hour via prepaid card or Zelle.

Fraudulent apartment listings on Craigslist and Facebook Marketplace use stolen photos and ask for deposits before showing the property. After payment, the 'landlord' disappears.

Texts and emails claim EBT benefits have been suspended or that a new card is required. Victims are directed to fake state agency sites where their card numbers are stolen.

Callers impersonating debt collectors or law enforcement threaten arrest or lawsuits over fake debts, pressuring immediate payment via wire or gift card.

Automated calls claim the victim's Social Security number has been linked to criminal activity and their benefits will be suspended unless they call back immediately.

Text messages appearing to come from major banks like Chase, Bank of America, or Wells Fargo alert victims to 'suspicious charges' and ask them to click a link to verify.

Students receive official-looking scholarship award letters from foundations that don't exist. Accepting requires paying a small 'processing fee' to release the funds.