Welcome to the primary version of This Week in Scams, a brand new weekly sequence from McAfee breaking down the most recent fraud developments, headlines, and real-time threats we’re detecting throughout the digital panorama.
This week, we’re spotlighting the FBI’s stunning new cybercrime report, the rise of AI-generated deepfakes, and a refined Gmail impersonation rip-off flagged by Google. We’re additionally seeing a surge in location-specific toll scams and pretend supply alerts—a reminder that staying forward of scammers begins with figuring out how they function.
Let’s dive in.
Scams Making Headlines
$16.6 Billion Misplaced to On-line Scams in 2024
The FBI’s newest Web Crime Report is right here—and the numbers are staggering. People misplaced $16.6 billion to on-line scams final yr, up from $12.5 billion in 2023. Older adults and crypto buyers have been hit particularly onerous, however the company warns the actual complete is probably going a lot increased, since many victims by no means report the crime.
Learn extra
AI-Powered Deepfake Scams Get Extra Convincing
Deepfake-enabled fraud has already triggered greater than $200 million in monetary losses in simply the primary quarter of 2025.
McAfee researchers estimate the common American sees three deepfakes per day, a lot of that are designed to imitate actual folks, companies, or information tales. Whether or not it’s pretend crypto pitches, job provides, or social media stunts—seeing is now not believing.
Learn extra
Google Warns Customers of Subtle Electronic mail Rip-off
Google is alerting Gmail customers to a brand new kind of phishing e-mail that appears prefer it comes from Google itself. These messages typically seem in legit e-mail threads and go all typical safety checks, however lead victims to a cloned Google login web page designed to steal credentials. The rip-off highlights how attackers are evolving to outsmart conventional filters.
Learn extra
From Consultants at McAfee
McAfee Researchers have noticed a current surge within the following rip-off sorts:
Pretend Supply Notifications: Scammers impersonate supply companies like USPS, UPS, and FedEx, sending pretend monitoring hyperlinks that set up malware or steal cost data
Bill Scams: Fraudulent messages that declare you owe cash for a services or products, typically accompanied by a pretend bill PDF or request for cost through telephone
Cloud Storage Spoofs: Emails that fake to be from Google Drive, Dropbox, or OneDrive, prompting you to “log in” to view shared information. The hyperlinks result in phishing websites designed to seize your credentials.
Toll Textual content Scams: Customized smishing messages that declare you owe a toll and hyperlink to pretend cost websites. These messages typically use location information—like your space code or current metropolis visits—to look legit. McAfee Labs noticed toll rip-off texts spike almost 4x between January and February.
This week, Steve Grobman, govt vice chairman and chief know-how officer at McAfee, mentioned the toll rip-off is efficient as a result of it hits all the proper social factors for a shopper.
These scams typically depend on urgency and familiarity—pretending to be one thing you belief or anticipate—to get you to behave shortly with out double-checking.
The way to Keep One Step Forward
- Be skeptical of emails—even from acquainted senders.
The Gmail rip-off exhibits that even official-looking messages might be pretend. If an e-mail asks you to log in, don’t click on the hyperlink. As an alternative, go to the web site straight by means of your browser and log in from there. - Perceive how deepfakes are getting used.
Whether or not it’s a voice message from somebody you realize or a video of a public determine selling an funding, deepfakes are designed to use belief. If a message pressures you to behave urgently—particularly involving cash—decelerate and confirm it by means of one other channel. - Don’t assume personalization means legitimacy.
Scams just like the toll fraud texts really feel actual as a result of they embrace particular location information. However scammers can use leaked or bought private information to tailor messages. Simply because it sounds correct doesn’t imply it’s reliable. - Look ahead to emotional triggers.
The simplest scams—whether or not it’s a pretend help e-mail, a journey deal, or a message a couple of missed toll—create urgency or panic. If one thing is pushing you to behave quick, that’s your cue to cease and confirm. - Defend your self with instruments that transcend primary filters.
Conventional spam filters aren’t sufficient anymore. Use safety instruments—like McAfee Rip-off Detector—that take a look at full message context and assist flag superior scams, impersonation makes an attempt, and deepfakes earlier than they trigger hurt.
Thanks for studying—See you subsequent week with extra rip-off alerts, insights, and safety ideas from the McAfee group.