Fake login pages
A sign-in page for Google, Microsoft, PayPal, your bank or a game, on a web address that doesn't belong to that company.
Who gets hit: Everyone, offices, kids
Dangers
Each one came from real research, and real victims.
A sign-in page for Google, Microsoft, PayPal, your bank or a game, on a web address that doesn't belong to that company.
Who gets hit: Everyone, offices, kids
A webmail page warning that your password or mailbox is about to expire, so you type your password to "keep" it.
Who gets hit: Offices
A blurred invoice or file with a login box on top: "sign in with your email to view this document."
Who gets hit: Offices, law firms, clinics
A page or chat asking for a code that another company just texted or emailed you. That code unlocks your account.
Who gets hit: Everyone, gamers
Any page asking you to type your 12 or 24 recovery words. No real company ever asks for them.
Who gets hit: Crypto holders
"Connect your wallet to claim your airdrop" pages that take everything in the wallet.
Who gets hit: Crypto and NFT users
A days-old site offering a free scanner, checker or airdrop eligibility tool that only works once you connect your wallet. Connecting is the whole scam.
Who gets hit: Crypto holders
A real Microsoft or Google screen asking you to give an unknown app access to your email and files.
Who gets hit: Office 365 and Google users
A copy of a bank's, company's or government office's website on someone else's web address: sign-in, payment, tracking or support pages.
Who gets hit: Everyone
Free-hosted pages named after a wallet, exchange or bank that show up in search results and lead to a fake login.
Who gets hit: Crypto holders, bank customers
Pages that the company hosting them has already marked as phishing or malware.
Who gets hit: Everyone
A page asking for your phone number and the code the app just sent you. Whoever types that code in takes over your account.
Who gets hit: Everyone on messaging apps
A "Sign in with Google/Steam/Microsoft" window that is really drawn inside the page, with a fake address bar showing the real company's address. A real sign-in window can be dragged off the page; this one can't.
Who gets hit: Everyone, gamers, crypto holders
A page on SharePoint, Notion, Canva or Google Sites that is just "a file was shared with you" and one button that leads to another website to steal your password.
Who gets hit: Offices, everyone
A copy of a company's sign-in page whose form quietly sends your password to a different website.
Who gets hit: Everyone
A calm caller says someone sent a death certificate or legal request to take over your Google account, then emails a sites.google.com 'case' page that asks for a claim number, a code or your sign-in. The address starts with Google, but anyone can make those pages.
Who gets hit: Gmail and Google account users
An ad opens a custom GPT on the real chatgpt.com, named like 'ChatGPT PLUS 5.6'. When you ask anything, it says ChatGPT has 'limited availability' and sends you to an outside link that steals your account.
Who gets hit: Anyone who clicks a 'ChatGPT' search ad
A box that tells you to press Windows + R, paste and hit Enter. It installs a program that steals your passwords.
Who gets hit: Everyone on Windows
"Your Chrome is out of date, download the update to keep reading." Browsers never update this way.
Who gets hit: Everyone
"Click Allow to prove you are not a robot" turns on browser notifications, then floods you with fake virus alerts and scam ads.
Who gets hit: Everyone
Free versions of paid apps, cheats and "executors" that come with hidden password stealers.
Who gets hit: Kids, gamers
A fake video-call page that says you need to download something before you can join.
Who gets hit: Business owners, crypto founders
A page that goes full screen, sounds an alarm, says your computer is locked and gives you a number to call.
Who gets hit: Seniors, families
A "support agent" asks you to enter a code or download a program so they can control your computer.
Who gets hit: Seniors
Search ads for Disney+, Prime Video or printer setup that lead to a fake support line.
Who gets hit: Families, seniors
"Fill in this form to cancel your subscription", then "oops, we refunded you too much, please send it back."
Who gets hit: Seniors
A caller showing your bank's number says there's fraud on your account and walks you through adding a Zelle recipient named 'Zelle Fraud Department', a 'safe account', or your own name on their phone number. The money is gone the moment you send it.
Who gets hit: Bank customers who get a call that looks like it's from their bank
A text about an unpaid toll, a held parcel or a traffic fine that links to a payment page on the wrong website.
Who gets hit: Everyone with a phone
Hotel bookings, phone bills, parking QR codes and storage renewals asking for your card on a copycat site.
Who gets hit: Travellers, shoppers, drivers
"Your identity was stolen", "there's a warrant for your arrest" or "the CRA needs payment today."
Who gets hit: Everyone
A copy of a real bank or credit union site on someone else’s address, offering credit cards, loans or a new account, that asks for your banking details or a fee.
Who gets hit: Anyone applying for a card, loan or account online
Forms asking for your SIN or Social Security number, ID photos or bank details on a site that has no reason to have them.
Who gets hit: Job seekers, renters, seniors
Pages that collect money to a personal payment ID instead of a company, and tools that make fake payment receipts.
Who gets hit: Everyone
Sites that look like the government and charge extra for passports, visas, eTA/ESTA, pardons or other documents you can get cheaper from the real office.
Who gets hit: Travellers, anyone renewing an ID
A police, court, ministry or embassy site copied onto an address that isn't the government's, often to collect a "fine" or your ID.
Who gets hit: Everyone
"Your McAfee / Norton / Geek Squad plan renewed for $499. Call to cancel." The call is the scam.
Who gets hit: Everyone, small offices
An email or message saying the supplier, lawyer or landlord has new bank details or wire instructions. Always confirm by phone on a number you already had.
Who gets hit: Businesses, law firms, home buyers, anyone paying an invoice
"I recorded you through your webcam", hitman, bomb or attack threats demanding crypto. They are sent to millions; don't pay, don't reply.
Who gets hit: Everyone
"It's the CEO. I need you to buy gift cards and send me the codes. Keep this quiet." Also fake pastors and board chairs.
Who gets hit: Office staff
"A lawsuit has been filed against you over an unpaid payday loan. Pay today to stop it." Real courts don't email demands like this.
Who gets hit: Everyone
A "renewal" bill for your domain name, SEO listing, trademark or directory entry from a company you never used, hoping you pay without checking.
Who gets hit: Small businesses, creators
The email says it's from a company you know, but its "Sign in" or "Update payment" button goes to a site that company doesn't own. Danger Stamp checks where the link really goes.
Who gets hit: Everyone
"4 messages failed to deliver, restore them", "Storage 100% full", "We couldn't renew your subscription". They want your password or card.
Who gets hit: Everyone, offices
An email from an address that can't exist, or one that puts your own name as the sender so it looks safe.
Who gets hit: Everyone
rnicrosoft.com instead of microsoft.com, or a real firm's name with "group" or "careers" added.
Who gets hit: Everyone, job seekers
A genuine-looking Google, Microsoft or PayPal notice that tells you to call a number about your account. Real security alerts don't.
Who gets hit: Everyone
Gmail has checked who really sent it. When it says a message seems dangerous, Danger Stamp warns you too.
Who gets hit: Gmail users
A message with almost no words and one clickable picture, made to slip past spam filters.
Who gets hit: Everyone
"Your points expire today", "Your free health kit is waiting". Real rewards never need a shipping fee, your card or your Medicare number.
Who gets hit: Shoppers, older people
"Nicole, 22, 1.7 km away. Message me." There is no real person. The link leads to paid chat sites, subscription traps or malware.
Who gets hit: Everyone
"A criminal complaint has been filed against you" by text or email, or an official letter that asks you to reply to a Gmail or Hotmail address.
Who gets hit: Everyone
"Visit site . co . nz": a link split up so spam filters can't see it.
Who gets hit: Everyone
"Scan this code with your phone to keep your account." The code is read on your computer, and only the site it leads to is checked, so the trick of hiding the link in a picture doesn't work.
Who gets hit: Offices, everyone
A fake renewal "receipt" with a big amount and a phone number, added to your calendar as an invite. The event you open is checked like an email.
Who gets hit: Everyone with Google Calendar
An offer of a job, money or a deal that asks you to reply to a different free email address than the one it came from. Real companies reply from their own address.
Who gets hit: Everyone, job seekers
An email "document" that only opens on a desktop, through a link to another website. It makes sure the scam's file lands on a Windows PC.
Who gets hit: Offices, everyone
An email or text claiming to be a company, bank, court or celebrity that wants you to sign in, verify, pay or open something through its link.
Who gets hit: Everyone
A stranger emails about a "vulnerability" on your site (missing DMARC, clickjacking, a header) and asks what reward you pay, or offers to fix it for a fee. The findings come from a free scanner.
Who gets hit: Small businesses and website owners
An urgent order paid by card asks you to charge extra and send the difference to their shipper, mover or planner. The card is stolen: the charge is reversed and the money you sent is gone.
Who gets hit: Small businesses
Someone who says they own vacant land or an empty house is out of the country, signs with their own notary or online, and wants a quick cash sale below market. They don't own it.
Who gets hit: Realtors, title companies and land buyers
Your inbox suddenly fills with dozens of 'confirm your subscription' and code emails from sites you never joined. Hidden among them is the one real alert: an order on your card, a changed password or a new payee.
Who gets hit: Anyone whose card, bank or account was just taken over
Crypto casinos, trading sites and "task" jobs that show a big balance, then want a fee, tax or deposit before you can withdraw.
Who gets hit: Kids, investors, job seekers
Recovery teams and "hackers" who promise to recover lost money, for a fee.
Who gets hit: People already scammed
"You've won", lottery winners "donating" money, and brand surveys with a reward, all needing a fee first.
Who gets hit: Everyone
A page showing money already in "your" account that you can withdraw after a small fee or a deposit. The balance is a picture.
Who gets hit: Everyone
Anyone asking you to pay a fee, fine or bill with gift cards. It is always a scam.
Who gets hit: Everyone
Elon Musk, a prime minister or a TV host "backing" an AI trading platform, often styled as a news article.
Who gets hit: Seniors, investors
Crypto mining, "guaranteed" savings and earn-per-task sites that show fake profits.
Who gets hit: Investors, job seekers, seniors
Made-up charities and donation pages on brand-new or throwaway web addresses.
Who gets hit: Generous people, especially after disasters
A stranger or "professor" invites you to a stock or crypto club on WhatsApp or Telegram.
Who gets hit: Investors, retirees
A government grant, benefit or loan forgiveness that you have to pay a fee to receive.
Who gets hit: Seniors, students, small businesses
A lender that approves you instantly, then wants a fee or insurance payment before sending the loan.
Who gets hit: People with bad credit
Credit repair and debt relief that wants money up front or promises to wipe your debt.
Who gets hit: People in debt
Brand-new websites for banks, investment firms, loan companies and couriers that don't exist, built from the same template.
Who gets hit: Savers, borrowers, online shoppers
A "lawyer" says a rich stranger with your last name died without an heir and offers to share the money with you. Next come fees and requests for your ID and bank details.
Who gets hit: Older people, everyone
Sites that charge a fee or a share of your back pay to file VA claims, or for "military debt forgiveness". Applying is free, and accredited groups help for free.
Who gets hit: Veterans, military families
An email says the state or a court holds money in your name and offers to claim it for 10-35%, or wants a fee to release it. Claiming it yourself on the state's own site is free.
Who gets hit: Anyone, often families after a death
You "won" a scholarship or grant, or a site guarantees one, but first you must pay an application, processing or disbursement fee. Real scholarships never charge.
Who gets hit: Students and parents
A "fully funded" youth summit, fellowship or international conference wants an application or registration fee and your passport details, or runs conferences on every subject in many cities at once. The event is thin or never happens.
Who gets hit: Students, young people and researchers, often abroad
A company says it has a buyer for your timeshare, can guarantee to get you out of it, or is suing your resort for a refund. First you pay closing costs, taxes, a retainer or an exit fee, and nothing happens.
Who gets hit: Timeshare owners, often retired
A page sells a "bot key" that predicts colour, crash or Aviator games, or invites you to a Telegram channel with "100% sure" cricket or football tips. Free tips come first, then paid VIP tips or pressure to deposit on betting sites.
Who gets hit: Young people and sports fans, often in India, Africa and South Asia
New shops with countdown timers, "last day" sales every day, copied photos and reviews that never mention the product.
Who gets hit: Social media shoppers
A shop that is days old or on free hosting, with a checkout but no company name, address or phone. Not always a scam, so it gets a heads-up badge: check before you pay.
Who gets hit: Social media shoppers
Storefronts selling WhatsApp-bombing, OTP-spam or account-cracking tools that ask you to top up a wallet first. The tool never arrives, and buying it is a crime anyway.
Who gets hit: Teens, small-time buyers
A shop that only takes money sent to a personal bKash, Nagad, GCash, Easypaisa, M-Pesa or PIX number, and is also brand new, on free hosting, nameless or far too cheap. Money sent this way can't be taken back.
Who gets hit: Shoppers in Bangladesh, Pakistan, the Philippines, Kenya and Brazil
"Free, just pay shipping" offers that quietly charge you every month.
Who gets hit: Everyone
Products that "reverse" diabetes, glaucoma or Alzheimer's, often with a fake doctor or TV host.
Who gets hit: Seniors, people with chronic illness
Marketplace listings dressed up as a famous brand's product for a fraction of the price.
Who gets hit: Gift buyers
"You won free gifts!" that you only get after spending a minimum amount before a timer runs out.
Who gets hit: Shoppers
Cancel buttons hidden behind endless pages, fake "only 2 left" counters and prices that change at checkout.
Who gets hit: Everyone
Made-up shipping companies used to "deliver" parcels, pets or "diplomatic" boxes that only arrive after you pay a fee.
Who gets hit: Online shoppers, romance scam targets
"Vehicle purchase protection", escrow, breeder and pet-shipping sites that take your money and vanish.
Who gets hit: Car buyers, puppy buyers
"Health coverage from $29 a month, save 80% on surgery", with "this is not insurance" in tiny print. A discount card won't pay your medical bills.
Who gets hit: Families, people without insurance
A "huge sale" text from an ordinary phone number, with a link to a shop that isn't the brand's own website. Real brands text from short codes.
Who gets hit: Everyone
A card in your parcel promises a gift card or refund for a review. When you write, the "seller" asks for your PayPal, bank or card details, a code, or a fee.
Who gets hit: Online shoppers
A low online moving or car-shipping quote with no USDOT number wants a deposit by Zelle, Cash App, wire or gift card. The job is sold on, the price jumps on moving day and your things are held until you pay.
Who gets hit: People moving home or shipping a car
A "CC shop", "CVV shop" or "dumps" login sells stolen card numbers. Buying or using them is a crime, and these shops often cheat their own buyers.
Who gets hit: Anyone who lands on one, often from a forum or Telegram link
A Maps listing or a new website with perfect reviews takes bookings only on Telegram or WhatsApp and wants a deposit by Apple Pay, Chime, Zelle or Cash App, sometimes with a discount for paying in full. Then come more 'safety' fees, then nothing.
Who gets hit: People booking a spa, caterer, cleaner or photographer
A cheap ring or gadget arrives with a 'GRA' certificate or a note and a QR code. The site it opens copies a gem lab or a store and wants you to sign in, pay a small fee or give your card or address.
Who gets hit: Anyone who gets a mystery parcel
A brand-new seller with almost no ratings lists a laptop, TV or camera on the real Amazon or Walmart for half its usual price. You pay, and get fake tracking, junk or nothing, and the seller vanishes.
Who gets hit: Online shoppers looking for a deal
"Your Zelle payment is on hold", deposits for puppies or items you haven't seen, and requests for a photo of your card.
Who gets hit: Buyers and sellers
Jobs that want you to buy equipment, cash a cheque and send some back, or move the interview to Telegram.
Who gets hit: Job seekers
A deposit before you see inside, an owner who is "out of the country", or keys that will be mailed to you.
Who gets hit: Renters, students, travellers
Someone you've never met asking for money, gift cards or crypto, or offering to teach you to invest.
Who gets hit: Singles, widows, fans
A seller "leaving with my military unit" who can't show the car but will ship it through "eBay Vehicles" with a trial period. eBay doesn't do that.
Who gets hit: Car buyers
A buyer who insists on your PayPal email because of their "business account". A fake "payment received" email follows.
Who gets hit: Marketplace sellers
A stranger, online partner or "employer" puts money in your account and asks you to pass it on as cash, crypto or gift cards. You become the scammer's money mule.
Who gets hit: Everyone
"We found your dog. He's hurt and needs surgery, send money first." Real finders don't ask for payment.
Who gets hit: Pet owners
Paid to verify accounts in your name, keep a shipped laptop on your WiFi, or sell your account. It's identity theft and money laundering in your name.
Who gets hit: Job seekers, students
"Talent management" and "VVIP booking" sites, or "army leave request" forms, where a fee, membership card or leave payment is needed before you can meet or talk to the celebrity or soldier who has been messaging you.
Who gets hit: Romance-scam targets
A "child" on a new number who urgently needs a bill paid.
Who gets hit: Parents, grandparents
A stranger in a chat or community group offers to swap currency at a better rate than the bank if you send your e-Transfer, Zelle or wire first. Their side never arrives.
Who gets hit: Students, newcomers, travellers, people sending money home
A profile agrees to meet tonight but wants a deposit, booking fee or "prove you're not a cop" payment first, often in gift cards or Cash App. Then come more fees or a stranger's address.
Who gets hit: Adults on dating apps, Instagram and listing sites
A stranger texts that your partner is cheating, or used their insurance, and offers proof or a quiet deal for your address, a new email, money or a meeting.
Who gets hit: Anyone in a relationship
An "agent" from another matrimony service sends a perfect profile on WhatsApp, says the family liked you, and wants a membership fee before sharing her number.
Who gets hit: People on matrimonial sites and their families
A "scout" or photographer says your child has the look for big brands, then asks for fees for photos, a portfolio, classes, registration or travel. Real agencies earn a commission instead.
Who gets hit: Parents
A "birth mother" asks you to send money for rent or medical bills directly, or a new "agency" sells babies available now for a deposit by wire or Zelle.
Who gets hit: Families hoping to adopt
A vendor form (often a Microsoft or Google form) or a stranger's message offers a spot at a market or craft show that names no venue, and wants the booth fee by Zelle, Cash App or PayPal friends and family. The event doesn't exist.
Who gets hit: Crafters, home bakers and small sellers
"I made $14K a week thanks to Mrs. ___, just search her name" and the fake replies that back it up.
Who gets hit: Everyone on YouTube
Replies from accounts copying a creator's name and photo: "You've won! Message me on Telegram."
Who gets hit: Fans
Deepfake celebrity ads, fake closing-down sales and miracle cures, stamped right in your feed.
Who gets hit: Everyone on Facebook
A stranger says they reported you by mistake and sends you to "Trust and Safety" on Discord, who then take your account or ask for a fee.
Who gets hit: Everyone on Reddit, X, Instagram, Discord
A friend's hacked account sends a "$2,500 bonus code" or a celebrity giveaway.
Who gets hit: Kids, fans
A question in the comments, then a row of "replies" all praising the same mentor or trader.
Who gets hit: Everyone on YouTube
Comment bots pushing a new token or presale.
Who gets hit: Crypto fans
Ads written as a personal story or news article that end in a get-rich course, health product or benefit sign-up.
Who gets hit: Everyone on Facebook
Posts and quizzes that are paid ads or lead-gen but don't say so.
Who gets hit: Everyone
A "sponsorship offer" that asks you to download a file or sign in to see the contract.
Who gets hit: Creators, streamers
Free game currency, "your account will be deleted", "I sent it by mistake, send it back" and "test my game" messages.
Who gets hit: Everyone, kids
"Did you commission this piece?", "Vote for me", "Wrong person, you're my game buddy". Friendly first messages that lead to a fake link or a payment.
Who gets hit: Artists, gamers, everyone
Posts that read like AI-generated filler: generic, padded and templated. A small red-outlined tag you can click for why, or wave away. Off with one switch.
Who gets hit: Everyone on X, LinkedIn and Reddit
Search ads that lead to a 24/7 "helpline" that never says which clinic will treat you. Some sell callers to whichever clinic pays them.
Who gets hit: Families looking for addiction treatment
A planted "I lost money, who can guide me?" comment that bot accounts answer with a fake trading mentor, or replies telling you to "back up" your wallet on a website.
Who gets hit: Investors, crypto users
Many accounts posting the same "this changed my income" story under one video, all pushing a course, a trading group or a coin.
Who gets hit: Investors, side-hustlers
Replies offering to get back money lost to a scam, or "support team" accounts asking you to DM them about tokens or your wallet.
Who gets hit: Crypto users, scam victims
A video shows a bot that "makes ETH while you sleep" and the comments link the "free code" and a Telegram to message. Running it sends the money you put in to the scammer, and the "it works" replies under it are bots.
Who gets hit: Crypto users, side-hustlers
Coin-flip and case-opening sites for Roblox items and skins.
Who gets hit: Kids
Messages asking a child to keep secrets, send photos, or pay to stop pictures being shared. Child mode only, with great care.
Who gets hit: Kids and teens
Nothing matches that. Seen a scam that isn't here? Tell us about it.