Instant Defense Against Scams, Phishing & Fake Receipts
Scan links, messages, screenshots or files before you act.
Free for everyone — no sign-up. Uploads are analyzed in memory and purged right after scanning.
Live Threat Feed: Recent Scams & News
AI-summarized reports of active scam campaigns, refreshed continuously.
Phishing 3.0: The Fight Moves to Agent Versus Agent
Phishing attacks are rapidly shifting from simple malicious links to sophisticated, AI-driven conversations designed to trick targets. As cybercriminals deploy automated AI agents, these scams become highly personalized and much harder for traditional email filters to catch.
- Emails that try to start a casual conversation without containing any immediate links or attachments
- Highly personalized messages that still pressure you to perform urgent financial or account actions
StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
Cybercriminals are hijacking thousands of legitimate WordPress websites to distribute malware and steal personal data from visitors. This widespread operation uses compromised sites to secretly download malicious tools onto users' devices and track their online activities.
- Unexpected file download prompts when visiting familiar websites
- Sudden redirects to unfamiliar web addresses
- Security warnings from your browser about a site being unsafe
Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure
Microsoft researchers have uncovered a network of over 30 domains used to distribute and manage 'MacSync Stealer,' a malware targeting Mac users to steal sensitive personal data. This malicious software silently exfiltrates saved passwords, browser cookies, and financial information from infected devices.
- Prompts to bypass macOS Gatekeeper or security settings to install an app
- Downloading software or updates from unofficial, third-party websites
- Unexpected prompts asking for your macOS administrator password
Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps
Security researchers have discovered vulnerabilities in Microsoft Copilot Personal that allow attackers to steal private data if a user clicks on a malicious link. This exploit, named CoSnitch, can silently exfiltrate information from connected applications without the victim's knowledge.
- Unsolicited or suspicious links received in emails or chats
- Messages urging you to click a link to configure or update your AI assistant
- Unexpected account activity or data access alerts in your connected apps
Fake bank "account suspended" emails surge across major retail banks
Attackers are sending mass emails claiming a customer's account is suspended pending identity verification. The linked page is a pixel-perfect clone of the bank login hosted on a lookalike domain registered days earlier.
- Lookalike domain registered within the last 14 days
- Urgent 24-hour deadline to "restore access"
- Login page asks for full card number and PIN
AI voice clones of family members used in emergency money scams
Criminals scrape short voice clips from social media and generate cloned audio of a relative in distress. Victims are pressured to send instant transfers before they can verify the call.
- Caller refuses a video call or callback
- Payment demanded via instant transfer or gift cards
- Story insists on absolute secrecy from other family
French tax authority data breach affects 678,000 individuals
A major data breach at the French tax authority has exposed the personal information of over 678,000 individuals. Cybercriminals are highly likely to use this stolen data to launch targeted phishing scams and identity theft attempts.
- Unsolicited emails or text messages claiming you owe taxes or are due a sudden refund
- Urgent demands for immediate payment or sensitive personal information to avoid penalties
- Links in tax-related messages that lead to unofficial websites instead of official government portals
Forged UPI payment screenshots used to defraud small shopkeepers
Fraudsters show a doctored payment-success screenshot at checkout and walk away with goods before the merchant checks the bank app. The forged receipts copy real app fonts but get transaction reference formats wrong.
- Reference number length does not match the real app
- Timestamp does not align with the bank notification
- Buyer rushes the merchant to skip verification
Searching online: bill pay impersonators
Scammers are using paid search engine advertisements to impersonate legitimate bill payment websites and steal your money. Always double-check the website address before submitting any payment details to ensure you are on the official billing site.
- The search result is marked as a 'Sponsored' or 'Ad' link
- The website URL does not match the official address on your physical bill
- The site asks for unusual payment methods or unnecessary personal information
WhatsApp "wrong number" chats escalate into investment fraud
A friendly wrong-number message builds rapport over days before pivoting to a "guaranteed return" crypto platform. Early withdrawals are honoured to build trust before a large deposit disappears.
- Unsolicited chat from an international number
- Screenshots of implausible daily profits
- Withdrawals blocked behind a surprise "tax fee"
SafePal data breach impacts 39,798 customers, stolen info for sale
A data breach at hardware wallet provider SafePal has exposed the personal order information of nearly 40,000 customers. This stolen data is now being sold online, raising the risk of highly targeted phishing campaigns aimed at cryptocurrency owners.
- Unsolicited emails or text messages asking you to 'verify' your hardware wallet
- Any request asking you to share your 12- or 24-word recovery seed phrase
- Unexpected packages containing 'replacement' hardware wallets that you did not order
Parcel delivery SMS asks for a small "customs fee" to steal card data
Texts claim a package is held pending a tiny fee, linking to a card-capture page on a shortened URL. The low amount lowers suspicion while the card details are resold immediately.
- Link uses a URL shortener instead of the courier domain
- Fee is oddly small to reduce hesitation
- No tracking number matching a real order
Deepfake CEO video calls authorise fraudulent wire transfers
Finance staff join a video call with a synthetic likeness of an executive who requests an urgent confidential transfer. The audio and video are generated in real time from public conference footage.
- Request bypasses normal approval workflow
- Executive refuses verification via a known channel
- Unusual beneficiary account in a new jurisdiction
Cloned e-commerce checkout pages harvest cards during sale season
Ads on social platforms drive shoppers to cloned storefronts that mirror real brands down to the product photos. Payment is captured directly rather than through a real processor.
- Domain differs from the brand by one character
- No HTTPS padlock on the payment step
- Only bank transfer or direct card entry accepted
Fake invoice PDFs carry credential-stealing links inside attachments
Business inboxes receive an overdue-invoice PDF whose "view document" button leads to a fake cloud login. The document itself is clean, so basic attachment scanners miss it.
- Sender domain differs subtly from the real supplier
- Login page requests the email password, not SSO
- Invoice references a project that does not exist
Counterfeit payment confirmation emails target online marketplace sellers
Sellers receive a spoofed "payment received, ship now" email that mimics the marketplace's templates. No funds ever reach the seller account.
- Reply-to address on a free mail provider
- Email urges shipping before funds appear in the account
- Marketplace dashboard shows no matching order
Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware
Cybercriminals are buying expired website domains that used to be legitimate to redirect unsuspecting visitors to malware and scams. This tactic exploits the good reputation of former websites to bypass security filters and trick users who still trust the old links.
- A bookmarked or familiar website suddenly changes its content or layout entirely.
- Automatic redirects that send you to a different, unrelated web address.
- Sudden pop-ups claiming your device is infected or demanding immediate login credentials.
Malicious APK files spread as "banking update" via messaging apps
Users are told to sideload an updated banking app shared as an APK in a chat. The installed app overlays real banking screens and intercepts one-time passwords.
- App distributed outside official app stores
- Requests SMS and accessibility permissions
- Publisher signature does not match the bank
Job offer scams collect ID documents through fake HR portals
Candidates receive an unsolicited remote-job offer and are pushed to a "verification portal" that collects identity documents and bank details. The data feeds later account-takeover attempts.
- Offer arrives with no interview or application
- Portal hosted on a generic domain, not the company site
- Requests bank details before any contract
Struggling with tax debt? Here’s what to know
Dishonest tax relief companies target individuals with tax debt by falsely promising to eliminate their debt for pennies on the dollar. These scammers charge high upfront fees but fail to provide any help, leaving victims in worse financial and legal trouble.
- Promises to wipe out your tax debt before reviewing your specific financial situation.
- Demanding high upfront fees for debt relief services.
- Claims that they can settle your tax debt for 'pennies on the dollar'.
AI-generated celebrity endorsement videos push fraudulent trading apps
Short videos place synthetic celebrity audio over real footage to promote a trading platform. Deposits are unrecoverable and support disappears after the first withdrawal request.
- Lip sync drifts out of alignment in close-ups
- Promised returns are fixed and guaranteed
- Platform is not listed with any financial regulator
Are ads on social media vetted or checked for scams? Here’s what to know
Social media platforms do not thoroughly vet the advertisements or the sellers appearing on users' feeds. This lack of verification allows scammers to easily post highly convincing ads for fake discounts to steal your money and personal information.
- Extremely low prices on luxury or high-end items
- Pressure tactics like 'limited time only' or countdown timers
- Assuming an ad is safe simply because it appears on a major social platform
How to spot investment training scams on social media
Scammers on social media often flaunt luxurious lifestyles and fast cars to lure people into buying useless investment training programs. These schemes falsely promise guaranteed trading returns when in reality trading is highly risky and most participants lose their money.
- Promises of guaranteed returns or risk-free trading
- Influencers showing off extreme wealth or luxury items
- Pressure to buy expensive courses or training packages to get rich quick
Canadian Man Pleads Guilty in Snowflake Extortions
A Canadian hacker has pleaded guilty to breaching massive databases and stealing the call and text histories of over 100 million AT&T customers. This stolen information can be leveraged by other cybercriminals to launch highly convincing, personalized phishing attacks.
- Receiving messages that suspiciously reference your private call or text history.
- Unsolicited texts asking you to click links to resolve billing or account issues.
- Unknown senders pretending to be contacts you frequently communicate with.
How to talk to your teens about credit and identity theft
The Federal Trade Commission is urging parents to talk to their teenagers about financial safety and identity theft prevention before the school year starts. Parents can use free FTC resources to teach their children how to monitor credit reports, protect personal details, and avoid common financial scams.
- Receiving pre-approved credit card offers or bills in your teenager's name.
- Debt collectors calling your home demanding payment from your minor child.
- Being unexpectedly denied a student loan or bank account due to a poor credit history.
Youville: Helping kids build online safety skills this summer and school year
The Federal Trade Commission has launched a free interactive game called Youville to help children aged eight to twelve develop online safety skills. This tool provides parents with an engaging way to teach kids how to safeguard their personal information and avoid digital threats.
- Websites or games asking children for their real names, addresses, or phone numbers.
- Pop-ups promising free in-game currency or prizes in exchange for personal details.
Have you lost money to a scam? Watch for scammers who say they can help
Scammers are actively targeting individuals who have already lost money by posing as helpful recovery services or government officials. These fraudsters demand upfront fees or sensitive information to retrieve the lost funds, only to steal more money from the victim.
- Demanding upfront fees to recover your lost money
- Requests for sensitive personal or banking details to process a refund
- Claims of representing government agencies while using generic email accounts
Read This Before You Buy That TV Streaming Stick
Cheap, generic TV streaming boxes often come pre-installed with malware that secretly rents out your home internet connection to strangers. Additionally, these devices conduct automated ad fraud behind the scenes, potentially slowing down your network and implicating your IP address in cybercrime.
- An unbranded TV box promising 'unlimited' free premium channels for a single cheap price.
- Your home internet speed noticeably slows down after connecting a new streaming device.
- The device requires you to install apps from unofficial sources outside the official app store.
Talk to your friends and family to fight fraud
The Federal Trade Commission is encouraging consumers to talk openly with friends and family about the tactics scammers use to steal money. Sharing these experiences and tips helps raise awareness, making it much easier for people to spot and avoid fraud before it happens.
- Demands for immediate payment or action
- Requests for payment via gift cards, wire transfers, or cryptocurrency
- Pressure to keep a transaction or conversation secret
LG to Ban Residential Proxies from Smart TV Apps
LG is banning smart TV apps that secretly turn televisions into proxy nodes for routing third-party internet traffic. This practice puts homeowners at risk by potentially associating their home internet addresses with malicious activities conducted by strangers.
- Unusual sluggishness or high data usage on your smart TV
- Free games or utility apps from unknown developers requesting broad network access
- TV apps that promise rewards or free services in exchange for running in the background
Behind ScamBeacon
Sanidhya Mondhe
Founder & Lead Developer
“I built ScamBeacon to give everyday internet users a fast, reliable, and AI-powered shield against rising phishing attacks, fake receipts, and online scams.”
sanidhyamondhe2@gmail.com