Real email scams, phishing and fraud from recent weeks, and how Sender Registry helps businesses catch them. We link to every source. The take is ours.
17 Aug 2026 · livemint.com
Authorities are warning taxpayers about email scams and fake websites that imitate income tax services. The guidance highlights signs people should look for and explains how to report suspicious messages or sites.
17 Aug 2026 · Frontier Enterprise
The article says business email compromise is mainly a visibility problem for organisations. It points to invoice fraud, payment diversion, and CEO style impersonation as examples of email based attacks that can slip through when companies do not have enough insight into who is sending messages and how those messages are behaving.
17 Aug 2026 · startupfortune.com
A crypto wallet was drained of $25.6 million in a phishing attack after the owner approved a malicious transaction. Investigators said the same wallet had also lost about $24.23 million in a very similar attack in 2023.
17 Aug 2026 · reuters.com
SafePal said a data breach affected order information for nearly 40,000 users. The company warned that the exposed details could be used in targeted phishing and impersonation attempts.
16 Aug 2026 · kitchener.citynews.ca
Waterloo Regional Police say a fraud case in North Dumfries Township involved a business email account being compromised and linked to the wrong bank account. Police believe e transfers sent by customers were redirected to a fraudulent account over several days in late July and early August.
16 Aug 2026 · lohud.com
New York officials are warning parents and students about scams tied to back to school shopping and school related services. The state says fraudsters are using fake websites, deceptive ads, phishing emails and AI generated content to steal money and personal information.
16 Aug 2026 · thenextweb.com
RingCentral said a social engineering attack led to unauthorised access to data for a limited group of customers. The company said it stopped the activity after detecting it, brought in outside forensic help, and said its core service was not disrupted. Reports tied the incident to a voice phishing call and later leak activity involving a large set of records.
15 Aug 2026 · forklog.com
A Hyperliquid user reportedly lost about 550,000 dollars after falling for a phishing scam tied to Google. The incident is another example of how attackers use trusted brands and convincing messages to trick people into handing over access or money.
15 Aug 2026 · blog.knowbe4.com
Researchers found that attackers were using compromised hotel Wi Fi routers to send users to fake Microsoft 365 sign in pages. The activity was seen in several U.S. cities and also in India and Saudi Arabia, affecting travelers from many industries. The method relies on DNS poisoning and can look normal to the user, even though the login page is controlled by attackers.
15 Aug 2026 · OregonLive.com
Powell’s Books has warned that fake emails are being sent to writers with bogus offers. The messages are being described as scams, and the warning is aimed at helping people avoid responding to them.
14 Aug 2026 · Pluang
An investor lost about 550,000 dollars in USDC after a phishing attack led to account compromise. The available report gives only a brief account, but it points to a scam that used deceptive messages or links to steal access and move funds.
14 Aug 2026 · steinbachonline.com
The Steinbach Pistons have alerted the public to an email scam that is currently circulating. The warning comes from Jamie Roy, the team’s Director of Sales and Marketing.
14 Aug 2026 · yellow.com
Trezor said a breach at its shipping partner exposed order details for 13,689 customers. The exposed information included names, email addresses, phone numbers, and shipping addresses for many buyers, while Trezor said its own systems, devices, private keys, and wallet backups were not affected.
13 Aug 2026 · Moneycontrol.com
Microsoft has warned that phishing and identity based threats aimed at Microsoft 365 users are changing over time. The alert was shared through CERT In and highlights ongoing risk to accounts and email systems used by businesses.
13 Aug 2026 · The Straits Times
Police have warned that Telegram accounts are being compromised after people are lured by fake public transport voucher links. The scam uses a false offer to get users to click through and expose their accounts to takeover.
12 Aug 2026 · USPS
USPS has issued a warning telling people to stop and think before scanning QR codes. The notice points to the risk of QR code scams, sometimes called quishing, where a code can lead someone to a harmful website or other fraudulent content.
12 Aug 2026 · MarketWatch
A MarketWatch piece looks at a situation where someone received email invitations that appeared to come from friends, raising the question of whether the messages were genuine or part of a scam. The article frames the issue as a possible phishing attempt or account compromise rather than a simple social invitation.
12 Aug 2026 · fox59.com
A Fox 59 report says the latest coverage looks at the brand names most often copied in phishing scams. The excerpt does not give the full list or any detailed findings, but it points to impersonation as the main theme.
12 Aug 2026 · The Times of India
A resident in Trichy reportedly lost Rs 1 lakh after falling victim to a phishing scam carried out through WhatsApp. The available report gives only a brief account of the incident and identifies it as a scam involving deceptive messaging.
12 Aug 2026 · 13newsnow.com
Sentara Health is warning patients about scam emails that pretend to offer a MyChart Medicare Kit. The messages are fraudulent and are being used as part of a phishing attempt aimed at patients.
12 Aug 2026 · firstalert7.com
A woman in Midland, Texas is accused of taking more than 60,000 dollars through a business email scam. The report says the case involves alleged theft tied to fraudulent email activity.
11 Aug 2026 · National Cybersecurity Alliance
The National Cybersecurity Alliance published guidance on spam, explaining what it is, why people receive it, and ways to reduce it. The piece sits within broader advice on phishing, email scams, and account takeover risks.
11 Aug 2026 · Forbes
Forbes reports that business email compromise scams powered by artificial intelligence are taking billions from companies. The article focuses on invoice fraud, payment diversion, and impersonation tactics used to trick staff into sending money or sharing sensitive information.
11 Aug 2026 · Fox 59
A Fox 59 report says some of the best known brand names are being used most often in phishing scams. The article points to impersonation as a common tactic in email based fraud and account takeover attempts.
10 Aug 2026 · bbc.com
Caleb Falconer’s place in The Hundred auction was nearly missed after officials questioned whether an email sent on his behalf was genuine. His father helped contact the league while Falconer was away at the Under 19 World Cup, and the issue was resolved after checks confirmed the request was real.
10 Aug 2026 · gbhackers.com
A weekly cybersecurity roundup highlighted several incidents and flaws tied to fraud, account takeover, and system compromise. Among the items were a case where hijacked Microsoft Copilot accounts were used to impersonate executives and push a fraudulent transfer, along with other attacks affecting wallets, cloud services, AI tools, and business systems.
10 Aug 2026 · chosun.com
A new phishing scam called no show fraud, also known as proxy purchase fraud, has emerged as a major threat to small businesses. The excerpt says fraudsters may forge business cards and identification as part of the scheme.
10 Aug 2026 · ajupress.com
South Korea’s financial regulator has warned about a scam that uses fake loan offers to get access to bank accounts and move stolen money. The scheme targets low credit borrowers, asks for bankbooks and debit cards, then uses gift certificates, cash, and cryptocurrency to hide funds taken through voice phishing.
10 Aug 2026 · nypost.com
Pittsburg, California says it was tricked into wiring $913,000 to scammers who posed as a construction company and then impersonated a city employee to push the payment through. The city did not notice the problem until the real builder asked about the missing money, and investigators later traced the fraud through many accounts, recovering part of the funds.
Add our reporting address to your contacts now, so it's already there the next time a suspicious email lands in an inbox.
Scan with your phone's camera to save straight to your contacts.
Save to your contacts now, so it's already there next time you need it.
Add to Contacts
Or share this QR code with someone on another device.
You can change this at any time.
Every object in the registry (a sender, a domain, a campaign) moves through five stages as independent evidence builds:
This is deliberately separate from Risk and Confidence. How much of the network agrees is a different question from how dangerous something looks, or how certain we are.
Every campaign gets scored across 8 axes: infrastructure, domain patterns, message templates, link behaviour, attachment patterns, target industries, target roles, and campaign velocity. All plotted as a fingerprint.
Sender Registry compares every campaign's fingerprint against every other campaign's using cosine similarity: the same technique used to compare documents by meaning, not just matching words. A high match (we only ever suggest one above 55% similarity) means two campaigns that look unrelated on the surface may share real infrastructure, even under completely different domain names.
Senders, domains, URLs, attachments, campaigns, brands and suppliers all become nodes in a shared relationship graph, built from real evidence: a sender using a domain, a domain appearing in the same report as another domain, a report belonging to a campaign.
On a phone, we deliberately don't force a giant graph onto a small screen. Instead you get a focused view: the object you're looking at, and everything directly connected to it, with a tap to move to any of those connections in turn.
Add Sender Registry to your home screen and turn on notifications from your account - both free, both take under a minute. From then on, anything urgent (a payment-diversion campaign, an executive impersonation attempt) reaches you as a real notification on your lock screen, the same way any other app alerts you.
Every notification is sent end-to-end encrypted directly to your device - nothing is readable in transit by anyone other than your phone.
Open Verify Before You Act, point your camera at a QR code, and capture it. The image is decoded and the destination it leads to is checked exactly the same way we already check a QR code found inside a forwarded email - the same detection, just with your camera as the front door.
You'll see whether the destination is safe, blocked, or worth a second look, with a plain explanation either way.
On Android, once the app is added to your home screen, "Sender Registry" simply appears as an option in your phone's normal Share menu - the same one you'd use to send a photo to a friend. Share a suspicious text or link straight in, review it, and submit.
On iPhone, Apple's own software doesn't allow a website to appear in the Share menu automatically. A short, one-time setup (a free "Shortcut") gets you the same result - after that one step, it behaves identically on both phones.
Sender Registry