Real email scams, phishing and fraud from recent weeks, and how Sender Registry helps businesses catch them. We link to every source. The take is ours.
1 Oct 2026 · usatoday.com
The article says CLDY is urging growing businesses to take a closer look at domain brand protection. It points to lookalike domains, which are separately registered web addresses that closely resemble a real company’s domain.
1 Oct 2026 · Mirage News
Police say they recovered 465 million dollars in a crackdown tied to a business email scam. The available report gives few details, but it points to a large fraud case involving phishing, account takeover, or related email deception.
1 Oct 2026 · which.co.uk
Which.co.uk reports on spear phishing, a targeted scam that uses highly manipulative messages to trick people into giving away access or information. The piece describes a person who says they were singled out by this kind of attack.
1 Oct 2026 · BBC
A holiday lets owner said they were devastated after their Booking.com account was attacked. The BBC report points to a phishing or account takeover incident affecting a business booking platform account.
1 Oct 2026 · RTL Today
Reports say phishing messages are already circulating that target Wero users after the Payconiq switch. The scam appears to use the change in payment services as a hook to trick people into giving up account details or other sensitive information.
30 Sep 2026 · news8000.com
Officials in La Crosse have warned residents about an email scam that is aimed at city services. The available article excerpt does not give more detail about the message itself, but it identifies the threat as a phishing attempt tied to local government services.
29 Sep 2026 · en.bloomingbit.io
Authorities said scammers are spreading fake mail delivery notices that look like postal slips and placing them on doors or in mailboxes. When people call the number on the notice, the caller is led into a voice phishing scheme where criminals pose as delivery staff and then as investigators, pushing victims to install a malicious app and hand over money, gift cards, or cryptocurrency.
29 Sep 2026 · themercury.com
A recent analysis of FBI complaint data found that business email compromise was the most common and most costly cybercrime affecting U.S. businesses in 2025. The scams led to more than $3 billion in reported losses across 24,768 incidents, far more than losses tied to data breaches, ransomware, or intellectual property theft.
28 Sep 2026 · cityoflondon.police.uk
City of London Police said criminals stole £101 million through payment diversion fraud. The available report excerpt says invoice fraud was the most common form of this crime, with 813 reports making up 22 per cent of cases.
28 Sep 2026 · ground.news
Italian prosecutors are investigating alleged fraud cases involving banks after scammers used messages, emails, calls, and AI altered voices to pose as senior executives. The reports say one case involved unauthorized operations worth about 24 million euros, while another bank related case is also under review.
28 Sep 2026 · CTV News
Essex Fun Fest has warned vendors about scam emails that appear to use the event’s 2027 logo. The message is a reminder that attackers can copy familiar branding to make fake emails look legitimate.
28 Sep 2026 · Insurance Business
A report from Insurance Business says invoice fraud is putting New Zealand cyber insurance under pressure, as attackers are able to exploit weaknesses within hours. The article points to payment diversion and related business email scams as a fast moving threat.
28 Sep 2026 · wired.com
A growing phishing scam is sending people unexpected party invitations that appear to come from familiar services like Evite or Paperless Post. The messages try to get recipients to sign in, share a password, or enter a phone number and code to view event details, and some people have been tricked into checking with old contacts after receiving them.
28 Sep 2026 · forbes.com
A Forbes article says QR code phishing, also called quishing, rose sharply in early 2026, with attackers hiding malicious links inside QR codes sent by email or placed in physical locations. The piece says these scams can be harder for standard text based security tools to spot, and they can also damage trust even when a business did not create the code.
28 Sep 2026 · iTWire
Okta security leader Jeremy Kirk discussed how attackers are using AI to build phishing kits more quickly, while also relying on stolen sessions and weak account protections. The discussion also highlighted a strict approach to passkeys, with no exceptions, as part of stronger login security.
28 Sep 2026 · The Oklahoman
A report warns that text messages claiming to be about a voter profile are being used as a phishing scam. The messages are meant to lure people into clicking a link or sharing information under a false pretense.
28 Sep 2026 · Manchester Evening News
A report describes a parody tied to a Russian phishing scam theme, using Oasis and inviting Andy Burnham to join the band. The item is presented as a phishing related story rather than a real invitation or business announcement.
28 Sep 2026 · cityoflondon.police.uk
City of London Police has warned businesses and the public after criminals stole £101 million through payment diversion fraud. The warning highlights a type of scam where payments are redirected to criminals instead of the intended recipient.
25 Sep 2026 · justice.gov
Authorities recovered $375,000 tied to a business email compromise scheme that used fake messages to impersonate company executives or vendors and push employees to send money.
25 Sep 2026 · bbc.com
A family from Loughborough booked what looked like a London apartment through Booking.com, then found the address was actually a Wetherspoon pub near Tower Bridge. The case was linked to a phishing attack that also affected other listings, including one near Big Ben, and some travellers said they were left without accommodation after trusting the false pages.
25 Sep 2026 · Dark Reading
A reported attack called Salesbleed uses Salesforce agents to help carry out phishing through Slack. The available article excerpt says the scheme targets account access and uses the trusted business tools themselves as part of the attack path.
25 Sep 2026 · luxtimes.lu
Luxembourg City has warned that phishing emails are circulating while pretending to come from the municipal administration. The alert is aimed at helping recipients spot messages that try to look official and may be used to trick people into responding or sharing information.
24 Sep 2026 · kalb.com
An Alabama woman was arrested in connection with an email scam that targeted a business in Grant Parish and led to a reported loss of $40,000. The case was described as a phishing style fraud aimed at tricking the company through email.
24 Sep 2026 · blogs.chapman.edu
Chapman University marked Cybersecurity Awareness Month by reminding its community to use safer online habits. The guidance highlights careful AI use, spotting phishing scams, using strong passwords with two factor authentication, and keeping software updated. It also tells people to report suspicious emails instead of opening links or attachments.
24 Sep 2026 · finance.yahoo.com
Microsoft said it worked with law enforcement and industry partners to disrupt a cybercrime service called EvilTokens. The operation seized 50 websites and disabled more than 150 related domains. Reports tied the service to more than 12,000 compromised inboxes across 10,000 organizations, with attackers using AI to search stolen email for payment discussions and people to impersonate.
24 Sep 2026 · Lancashire Telegraph
Drivers in Blackburn have been warned that a QR code scam linked to parking machines has appeared again. The warning says people should be careful when using codes on or near parking equipment.
24 Sep 2026 · thestar.com.my
Reports say scammers are sharing convincing looking social media posters that claim to offer government aid and include QR codes. The fake posts use names such as eKasih, eMADANI and maternity assistance, along with official looking logos and images, to push people to scan codes or click links that lead to fraudulent sites.
23 Sep 2026 · Observer News Enterprise
ForshTec has introduced ClearDMARC, a product aimed at reducing the risk of domain spoofing. The available article excerpt says the launch is focused on protecting against lookalike domain abuse and typosquatting.
23 Sep 2026 · talkofthesound.com
Rye Neck Schools said several staff email accounts were compromised in a phishing campaign and used to send a false message about items for sale. The district warned recipients not to reply to the Gmail address in the email and not to send money or try to buy anything listed.
23 Sep 2026 · MeDirect Bank Malta
MeDirect Bank Malta has warned customers about phishing phone calls that claim an account is at risk. The alert is meant to help people recognise suspicious contact that tries to pressure them into sharing information or taking action.
23 Sep 2026 · abc45.com
Greensboro planning officials have warned rezoning applicants about a phishing scam that is trying to trick people into sending payments. The alert says the scam is targeting people involved in the rezoning process and is using deceptive messages to request money.
23 Sep 2026 · morningstar.com
Cofense says it is expanding its phishing defense platform with AI driven features. The company also plans to connect remediation data from Cofense Triage and Vision to Command Center in the fourth quarter of 2026.
23 Sep 2026 · insurancebusinessmag.com
A new analysis based on FBI data says business email compromise caused more than $3 billion in reported losses in 2025, far more than ransomware, data breaches, or intellectual property theft. The report also says reported corporate cybercrime incidents rose sharply last year, reaching the highest level in six years.
23 Sep 2026 · PCMag Australia
The article says a low cost service is being offered to help people protect themselves from text message scams and phishing attempts. It presents the offer as a monthly subscription aimed at reducing the risk of account takeover and related fraud.
23 Sep 2026 · cnet.com
Security researchers have identified a phishing site that pretends to offer free access to Anthropic’s Claude Max service. The page uses Anthropic branding and a fake giveaway message to push visitors to a Google sign in screen that is designed to capture account credentials.
23 Sep 2026 · Talk of the Sound
Rye Neck Schools said staff email accounts were compromised and a phishing email was sent as a result. The warning followed the discovery of the account takeover and the school district alerted recipients to be cautious.
21 Sep 2026 · Fox News
Scammers are using paid Google ads to lure people toward fake pages that try to capture bank login details. The scheme is aimed at stealing credentials through search results rather than through direct messages.
21 Sep 2026 · Discovery Alert
A report describes an invoice fraud case in which a trader used Glencore’s name to support a deceptive payment request. The available excerpt does not give more detail, but it points to a business email fraud pattern involving impersonation and payment diversion.
21 Sep 2026 · KSL News
Researchers at BYU found that artificial intelligence is helping spear phishing scams become more effective. The report says AI is improving the success of these targeted email attacks.
21 Sep 2026 · Times Argus
ForshTec has introduced ClearDMARC, a product aimed at helping address domain spoofing risks. The announcement focuses on protecting organisations from lookalike domain abuse and related email threats.
21 Sep 2026 · Irish Independent
A man in his 50s has been accused of taking more than €16,000 from two victims in a phishing scam linked to Vodafone and An Post. He was denied bail in connection with the case.
21 Sep 2026 · the420.in
Indian cybercrime authorities have ordered the removal of dozens of websites and databases hosted on Google Firebase after scammers used them to impersonate banks and collect financial information. The reported cases included fake pages posing as major Indian banks, along with malicious apps and data stores linked to stolen card details and one time passwords.
20 Sep 2026 · wilcosun.com
The article says people are still being targeted by phishing and spoofing attempts, along with investment fraud, romance scams, personal data breaches, and impersonation of government agencies.
20 Sep 2026 · CBS News
Deerfield School District has warned its community about a phishing scam. The alert indicates that someone is trying to trick people into giving up information through deceptive messages.
20 Sep 2026 · bastillepost.com
The Census and Statistics Department has warned the public about a fraudulent website and phishing messages linked to the 2026 Population Census. The alert says scammers are using the census theme to mislead people online.
20 Sep 2026 · khan.co.kr
Financial regulators warned people to watch for scam activity around the Chuseok holiday. The alerts covered text message phishing tied to delivery notices and unpaid fines, as well as fraud that targets people selling leftover foreign currency after overseas trips.
19 Sep 2026 · wmur.com
The Deerfield Fair has warned vendors about a phishing email scam. The message asks vendors to consider taking part in the fair, which is set to begin in October, but it is not a legitimate fair communication.
19 Sep 2026 · Computerworld
Security researchers reported that attackers are abusing device codes to gain access to Microsoft 365 accounts. The activity is tied to phishing and account takeover attempts aimed at users of Microsoft services.
19 Sep 2026 · UA.NEWS
Singapore police are using artificial intelligence to help identify and act against phishing websites. The report says the effort is aimed at stopping online scams that try to steal login details and other sensitive information.
18 Sep 2026 · HHS.gov
The U.S. Department of Health and Human Services said its Office for Civil Rights has settled a HIPAA investigation tied to a phishing attack at Ambry Genetics. The incident affected about 225,000 individuals.
18 Sep 2026 · channele2e.com
The page from ChannelE2E could not be reached because a security service blocked access and asked for cookies to be enabled. The notice said the request was stopped after the site detected activity that looked unusual or unsafe.
18 Sep 2026 · Australian Journal of Pharmacy
Pharmacies are being targeted by phishing attacks, according to the report. The article points to email scam activity aimed at this part of the healthcare sector.
18 Sep 2026 · newswire.com
Living Security said it is expanding its 2026 Cybersecurity Awareness Month program with two interactive experiences focused on AI driven deception. The new offerings are designed to help employees spot deepfakes, cloned voices, phishing, impersonation, and other scams that can look legitimate at first glance.
18 Sep 2026 · london-post.co.uk
A London Post article says online banking fraud in 2026 is becoming harder to spot because criminals are using AI, fake login pages, voice cloning, and other tricks that look like normal banking activity. It also outlines common risks such as phishing, identity theft, weak multi factor authentication, and longer term concerns around cryptography.
18 Sep 2026 · Inshorts
Barracuda says it has found phishing attacks that run in the browser and use blob URLs to hide the malicious page from normal checks. The report points to a technique that helps attackers present a convincing login prompt while making the site harder to spot and block.
17 Sep 2026 · THE Journal: Technological Horizons in Education
Security researchers say phishing attacks are now being used to steal passkey based logins and take over cloud accounts. The report points to a growing threat aimed at modern sign in methods rather than only passwords.
17 Sep 2026 · ctvnews.ca
Reports from Collingwood say a QR code fraud scheme is circulating in Simcoe County. The article describes this as the latest scam affecting the area, with QR codes being used as part of the deception.
17 Sep 2026 · Insurance Business
A proposed bill focused on voice phishing could change how banks think about their insurance coverage and related decisions. The article points to growing concern around scams that use phone calls to trick people into giving up access or sensitive information.
17 Sep 2026 · saltwire.com
Craft vendors in Nova Scotia have been receiving scam emails that appear to come from a trusted craft show organizer. The messages use real event details and ask for upfront payments to reserve vendor space, which led local artists and craft groups to warn members and post alerts on their websites.
17 Sep 2026 · afr.com
Qantas is investigating reports of phishing attempts aimed at some customers who booked hotels through its branded service. The warning tells customers not to respond to WhatsApp messages that ask for information or payment while the company looks into a suspected systems breach.
Add our reporting address to your contacts now, so it's already there the next time a suspicious email lands in an inbox.
Scan with your phone's camera to save straight to your contacts.
Save to your contacts now, so it's already there next time you need it.
Add to Contacts
Or share this QR code with someone on another device.
You can change this at any time.
Every object in the registry (a sender, a domain, a campaign) moves through five stages as independent evidence builds:
This is deliberately separate from Risk and Confidence. How much of the network agrees is a different question from how dangerous something looks, or how certain we are.
Every campaign gets scored across 8 axes: infrastructure, domain patterns, message templates, link behaviour, attachment patterns, target industries, target roles, and campaign velocity. All plotted as a fingerprint.
Sender Registry compares every campaign's fingerprint against every other campaign's using cosine similarity: the same technique used to compare documents by meaning, not just matching words. A high match (we only ever suggest one above 55% similarity) means two campaigns that look unrelated on the surface may share real infrastructure, even under completely different domain names.
Senders, domains, URLs, attachments, campaigns, brands and suppliers all become nodes in a shared relationship graph, built from real evidence: a sender using a domain, a domain appearing in the same report as another domain, a report belonging to a campaign.
On a phone, we deliberately don't force a giant graph onto a small screen. Instead you get a focused view: the object you're looking at, and everything directly connected to it, with a tap to move to any of those connections in turn.
Add Sender Registry to your home screen and turn on notifications from your account - both free, both take under a minute. From then on, anything urgent (a payment-diversion campaign, an executive impersonation attempt) reaches you as a real notification on your lock screen, the same way any other app alerts you.
Every notification is sent end-to-end encrypted directly to your device - nothing is readable in transit by anyone other than your phone.
Open Verify Before You Act, point your camera at a QR code, and capture it. The image is decoded and the destination it leads to is checked exactly the same way we already check a QR code found inside a forwarded email - the same detection, just with your camera as the front door.
You'll see whether the destination is safe, blocked, or worth a second look, with a plain explanation either way.
On Android, once the app is added to your home screen, "Sender Registry" simply appears as an option in your phone's normal Share menu - the same one you'd use to send a photo to a friend. Share a suspicious text or link straight in, review it, and submit.
On iPhone, Apple's own software doesn't allow a website to appear in the Share menu automatically. A short, one-time setup (a free "Shortcut") gets you the same result - after that one step, it behaves identically on both phones.
Sender Registry