The ScamDrill Blog

Practical, data-backed guides for protecting the people you love — and the team you run — from modern scams. Updated with 2025–2026 FTC, FBI IC3, and AARP findings.

World Cup 2026 Ticket Scams: Fake FIFA Sites and the Safe Way to Buy

The FBI flagged dozens of fake FIFA sites selling bogus tickets and harvesting card and ID details. The real-vs-fake address tells, the payment that protects you, and the one official place to buy. Sources: FBI IC3, FTC, AARP, 2026.

Fake Remote Jobs Are Up 1,000%: The 2026 Recruiter-Scam Playbook

Fake remote offers, fake LinkedIn recruiters, and deepfake interviews are surging. The 7 red flags a “job” is a scam, the four schemes in market, how to verify a real recruiter in 90 seconds, and what to do if you already sent money. Sources: FTC, FBI IC3, McAfee, 2025–2026.

Snapchat Sextortion: What to Do in the First 60 Minutes

A calm parent’s playbook for financial sextortion: don’t pay, don’t delete, screenshot, and report to NCMEC and the FBI. Why teen boys are the target, and the one line that protects your child. Sources: FBI, NCMEC, Thorn, 2023–2026.

Mortgage “Relief” Scams: When the Rescue Is the Robbery

Fake foreclosure-relief firms, bogus government letters, and upfront-fee traps are surging, up 407% since 2022. The one rule that exposes every version, and where to get real help for free. Sources: FTC, CFPB, FBI IC3, 2024–2026.

Ghost Students: How Strangers Take Out College Aid in Your Name

Synthetic-identity rings enroll in community colleges as you, file a FAFSA, and pocket the Pell refund. How the scam works, what the April 2026 FAFSA crackdown changed, and how to lock down your name and transcript.

Scam Trends, June 2026: The New Federal Numbers

The 2025 reports are in: $15.9B (FTC) and $20.9B (FBI), up 26%. The scams moving fastest this month for families and businesses, the first official AI-fraud tally, and how to stop each one. Sources: FTC, FBI IC3, 2025–2026.

The Second Scam: When a Stranger Offers to Get Your Money Back

Recovery scams hunt people who already lost money once. How the “sucker list” works, who scammers impersonate, and the one rule that ends the con: no real agency charges a fee. Sources: FTC, FBI IC3, 2024–2026.

Schools on Their Own: K-12 Ransomware After the Federal Cuts

Free federal cyber defense for schools ended in late 2025. What districts lost, why gangs now steal student data instead of encrypting it, and a playbook that runs on local money.

Authorized, and Still Fraud: NACHA’s June 22 Rule

A new ACH rule lands June 22, 2026 for every business that sends payments. What “risk-based” monitoring for BEC, vendor, and payroll scams actually requires.

When Ransomware Comes for Your Practice

Ransomware was in 88% of small-business breaches in 2025. Why dental and medical offices are the soft target, how the attack works, and the HIPAA fallout.

Business Video Compromise, Explained

BEC’s video sibling: deepfake executives, fake hires, and live face-swaps on your work calls, and how to stop them.

PCS Rental Scams: Why Moving Season Is Open Season on Military Families

Military-connected consumers lost $584M to fraud in 2024. PCS season is the strongest seasonal lock in rental fraud — the three plays hitting servicemembers May–September, and the 10-minute drill that stops them.

The “Easy Online Job” Scam Aimed at Your Teen: How Task Scams Work

Task scams went from near-zero in 2020 to ~40% of all job-scam reports by 2024 — and young people report losing money more often than seniors. How the “get paid to like videos” trap works, the human cost behind it, and the one line that ends it. Sources: FTC, FBI IC3, UNODC, 2024–2026.

The Influence Stack: How Scammers Use Persuasion Psychology Against You

Scammers don’t fire one trick at a time — they stack authority, urgency, liking, and social proof in a single message. Why the traits that make you a good colleague are the exact ones being exploited. Sources: FTC, Harvard Kennedy School, Journal of Cybersecurity, 2023–2026.

The QR Code Scam Coming for Your Teen: How “Quishing” Works

QR-code phishing climbed roughly fivefold in 2025, and teens scan codes on reflex. How quishing works at concert rideshare lines, parking lots, giveaways, and on doorsteps — plus the one habit that stops it. Sources: FTC, FBI IC3, 2025–2026 reporting.

The Anatomy of a Modern Scam: Six Stages, $40B in Profits, One Playbook

Scams aren’t random crimes — they’re an industry. The six-stage assembly line behind pig butchering, BEC, deepfake calls, and smishing, with the 2025-2026 numbers most coverage doesn’t show you. Sources: FBI IC3, FTC, UNODC, Chainalysis, Verizon DBIR, TRM Labs.

Scammed? Here’s Exactly What to Do — A 2026 Family Recovery Guide

$20.9B lost to cybercrime in 2025. 4 in 10 Americans hit. The first 60 minutes, first 24 hours, and first week after a scam — plus what NOT to do. Built on the latest FTC, FBI IC3, and AARP guidance.

Your Business Just Got Scammed. Now What? A 2026 Incident Response Playbook

$3.05B in BEC losses, $123K average hit, 58% recovery rate — but only inside 72 hours. The first 60 minutes, first 24 hours, and first 72 hours after a wire fraud, ransomware, or vendor-email compromise. With CISA + IC3 sources.

Summer Travel Scams 2026: The Five Patterns Hitting Travelers This Summer

5.2M Americans lost money to rental scams in 2025. McAfee found 1 in 5 booked into a fake. Fake rentals, AI-generated travel sites, toll-text smishing, fake passport pages, and recovery scams — with a five-minute pre-trip drill.

The ShinyHunters Canvas Hack: What Every Business Should Take From the Largest Education Breach on Record

3.65 TB, 275 million records, 8,809 institutions — one phone call at a time. How a teen-run extortion crew keeps walking through the front door, and what small, mid-size, and enterprise businesses should change this week.

Internet Safety for Tweens and Teens: A 2026 Parent’s Guide

Pew found 95% of US teens use YouTube and nearly half are online “almost constantly.” An age-by-age guide to privacy, DMs, AI companions, and the household digital agreement that actually works — with two printable infographics.

Neo-Phishing (a.k.a. “Phishmaxxing”): The AI-Powered Scams Now Targeting Households and Businesses

AI-written email, three-second voice clones, deepfake video calls — what Gen Z has started calling “phishmaxxing.” The new wave of scams that drove US fraud losses to a record $20.9B in 2025, and exactly what to do if one lands.

Two Museum Heists, One Cybersecurity Playbook: Lessons from the Louvre and Magnani-Rocca

The Louvre lost €88M in seven minutes. A villa near Parma lost a Renoir, a Cezanne, and a Matisse in three. Strip away the gold leaf and what’s left is a cyber-breach playbook — recon, weak passwords, insider risk, and the alarm nobody was watching.

The Fake CAPTCHA “ClickFix” Scam: Why It’s Everywhere Right Now

Fake CAPTCHA pages that tell you to press Windows + R and paste a “verification code” surged 517% in 2025 — and now run on Windows, Mac, and Linux. Here’s how the scam works and the one rule that stops it cold.

How AI Is Reshaping Cybersecurity for Businesses of Every Size

Anthropic’s Mythos Preview, Palo Alto’s April 2026 Defender’s Guide, and Fortinet’s industrialized-cybercrime forecast — what an AI that finds zero-days for sport actually means for businesses from 12 to 12,000 employees.

Social Engineering Targeting SMBs: Tactics, Trends and Simple Defenses

~68% of breaches involve a person being deceived, not a system being hacked. The pretexting, vendor email compromise and deepfake-voice tactics now hitting small businesses — and the simple defenses that work.

5 Scam Trends Spiking in 2026: What you should know

Americans lost a record $20.9B to cybercrime in 2025. Task scams, toll smishing, AI voice clones, government impersonation, and recovery fraud — the five trends driving the surge, and what to tell your family this week.

Why Scammers Target Military and Veterans — and the Tactics to Watch For

Military families lost $584 million to fraud in 2024, a 25% jump in a single year. The seven scam tactics — from VA imposters to pension poaching — that hit servicemembers and veterans hardest.

The 20 Minutes That Saved My Father $2,400 a Year

A personal story of auditing an 80-year-old parent’s bank statements — and finding $200 a month in scam tech-support subscriptions and quietly-unused services.

How to Protect Elderly Parents from Scams: A 2026 Family Playbook

Adults 60+ lost $4.85 billion to fraud in 2024. Here’s a step-by-step playbook for adult children who want to help without taking over.

Phishing Simulation for Families: Why It Works and How to Start This Weekend

What workplace security teams have known for years, finally adapted for the kitchen table. The research — and the exact steps.

How to Teach Kids About Online Scams Without Scaring Them

NCMEC logged 546,000+ sextortion-related reports from Snapchat alone in 2025. What to say, at what age, and what to avoid.

The AI Voice Cloning Scam: What to Do When the Voice Sounds Exactly Like Your Daughter

One Florida grandmother lost $15,000 in a single afternoon in July 2025. Here’s how the scam works and the 10-second rule that stops it.

The USPS Text Scam: Why You’re Getting 10 a Week and How to Train Your Family to Delete Them

Americans lost $470 million to package-delivery smishing texts in 2024. The fake texts are now indistinguishable from real ones.

Pig Butchering: The $5.8B “Friendly” Crypto Scam You Need to Warn Your Parents About

It doesn’t start with a pitch. It starts with a wrong-number text. Inside the playbook of the year’s most lucrative con.

Romance Scam Red Flags: How to Help a Family Member Who Thinks They’re in Love

$1.16 billion lost to romance scams in just the first nine months of 2025. What to say when you think it’s happening to someone you love.

Small Business Phishing Training: Why 56% of SMB Employees Still Click (and What to Do About It)

88% of 2025 ransomware breaches hit small and mid-sized businesses. A practical training program for teams without a CISO.

Phishing Simulation for Small Business: A 30-Day Rollout Plan (Template Included)

Exactly what to send, when, and how to handle the inevitable “why did you trick me?” conversations. From baseline to 40% risk reduction.

Reading about scams isn’t enough.

ScamDrill sends safe, realistic phishing simulations to your family or team. When someone “falls for” one, they get an instant teachable moment instead of a real loss.

Start free →

Join our free newsletter to stay ahead of the scammers

Receive updates on monthly scam trends, along with best practices to protect yourself and those you care about.