Welcome to the primary version of This Week in Scams, a brand new weekly sequence from McAfee breaking down the newest fraud traits, headlines, and real-time threats we’re detecting throughout the digital panorama.
This week, we’re spotlighting the FBI’s surprising new cybercrime report, the rise of AI-generated deepfakes, and a subtle Gmail impersonation rip-off flagged by Google. We’re additionally seeing a surge in location-specific toll scams and pretend supply alerts—a reminder that staying forward of scammers begins with realizing how they function.
Let’s dive in.
Scams Making Headlines
$16.6 Billion Misplaced to On-line Scams in 2024
The FBI’s newest Web Crime Report is right here—and the numbers are staggering. Individuals misplaced $16.6 billion to on-line scams final yr, up from $12.5 billion in 2023. Older adults and crypto buyers have been hit particularly laborious, however the company warns the actual whole is probably going a lot increased, since many victims by no means report the crime.
Learn extra
AI-Powered Deepfake Scams Get Extra Convincing
Deepfake-enabled fraud has already prompted greater than $200 million in monetary losses in simply the primary quarter of 2025.
McAfee researchers estimate the typical American sees three deepfakes per day, a lot of that are designed to imitate actual individuals, providers, or information tales. Whether or not it’s pretend crypto pitches, job provides, or social media stunts—seeing is now not believing.
Learn extra
Google Warns Customers of Subtle Electronic mail Rip-off
Google is alerting Gmail customers to a brand new sort of phishing electronic mail that appears prefer it comes from Google itself. These messages typically seem in authentic electronic mail threads and move all typical safety checks, however lead victims to a cloned Google login web page designed to steal credentials. The rip-off highlights how attackers are evolving to outsmart conventional filters.
Learn extra
From Consultants at McAfee
McAfee Researchers have noticed a current surge within the following rip-off sorts:
Pretend Supply Notifications: Scammers impersonate supply providers like USPS, UPS, and FedEx, sending pretend monitoring hyperlinks that set up malware or steal fee information
Bill Scams: Fraudulent messages that declare you owe cash for a services or products, typically accompanied by a pretend bill PDF or request for fee by way of cellphone
Cloud Storage Spoofs: Emails that faux to be from Google Drive, Dropbox, or OneDrive, prompting you to “log in” to view shared information. The hyperlinks result in phishing websites designed to seize your credentials.
Toll Textual content Scams: Customized smishing messages that declare you owe a toll and hyperlink to pretend fee websites. These messages typically use location knowledge—like your space code or current metropolis visits—to look authentic. McAfee Labs noticed toll rip-off texts spike almost 4x between January and February.
This week, Steve Grobman, govt vp and chief expertise officer at McAfee, stated the toll rip-off is efficient as a result of it hits all the right social factors for a client.
These scams typically depend on urgency and familiarity—pretending to be one thing you belief or count on—to get you to behave rapidly with out double-checking.
Keep One Step Forward
- Be skeptical of emails—even from acquainted senders.
The Gmail rip-off reveals that even official-looking messages could be pretend. If an electronic mail asks you to log in, don’t click on the hyperlink. As a substitute, go to the web site straight by means of your browser and log in from there. - Perceive how deepfakes are getting used.
Whether or not it’s a voice message from somebody you understand or a video of a public determine selling an funding, deepfakes are designed to take advantage of belief. If a message pressures you to behave urgently—particularly involving cash—decelerate and confirm it by means of one other channel. - Don’t assume personalization means legitimacy.
Scams just like the toll fraud texts really feel actual as a result of they embody particular location knowledge. However scammers can use leaked or bought private knowledge to tailor messages. Simply because it sounds correct doesn’t imply it’s reliable. - Look ahead to emotional triggers.
The simplest scams—whether or not it’s a pretend help electronic mail, a journey deal, or a message a few missed toll—create urgency or panic. If one thing is pushing you to behave quick, that’s your cue to cease and confirm. - Defend your self with instruments that transcend primary filters.
Conventional spam filters aren’t sufficient anymore. Use safety instruments—like McAfee Rip-off Detector—that take a look at full message context and assist flag superior scams, impersonation makes an attempt, and deepfakes earlier than they trigger hurt.
Thanks for studying—See you subsequent week with extra rip-off alerts, insights, and safety suggestions from the McAfee staff.
Introducing McAfee+
Id theft safety and privateness to your digital life.