Tech Scams

Bogus 'your device is infected' warnings pushing paid 'security' software or support fees.

Callers posing as Microsoft, Apple or your ISP who claim a problem and request remote access.

Deceptive emails, texts and sites that trick you into revealing passwords, codes or card details.

Malicious apps that mimic real ones to steal logins, intercept codes, or drain accounts.

Aggressive popups and fake alerts that push malware downloads or fake support numbers.

Malicious QR codes on stickers, emails or posters that lead to phishing or payment fraud.

Pages that fake a 'locked' or 'frozen' computer to force a call to fake support.

Any scam that persuades you to install screen-sharing or remote-control software to seize your device.

Bogus 'update required' prompts that install malware instead of genuine updates.

'Your storage is full' or 'shared file' messages that phish your cloud or email login.

Bogus 'reset your password' or 'unusual login' messages that capture credentials and codes.

Tricks and 'MFA fatigue' attacks designed to capture or approve your second authentication factor.

Tampered public USB charging ports that steal data or install malware while your device charges.

Fake Wi-Fi hotspots mimicking real ones to intercept logins, steal data, and serve phishing pages.

Fake or hijacked browser extensions that steal passwords, inject ads, and monitor everything you type.

Bogus VPN apps that spy on your traffic, harvest credentials, or install malware instead of protecting you.

Planted USB drives loaded with malware that exploit curiosity to compromise devices.

'Verify you are human' pages that trick you into running malware by pasting a command from your clipboard.

Attackers flood your phone with authentication-approval requests until you accept one by mistake, then impersonate support staff to confirm the 'error'.

Attackers convince your mobile carrier to transfer your phone number to a SIM they control, then use it to bypass SMS-based authentication and take over your accounts.

Attackers impersonate internal IT support to trick employees into resetting passwords, sharing credentials, or installing remote-access tools.

Malicious pages that display convincing browser update prompts to trick users into downloading malware disguised as a Chrome, Edge, or Firefox installer.

Phishing emails and texts claiming your iCloud, Google Drive, or OneDrive storage is full, tricking you into entering credentials on a fake login page or paying for fake storage upgrades.

Fraudulent QR code stickers placed over legitimate payment or information codes at parking meters, tables, and public points, directing victims to fake payment pages.

Fraudulent services charge recurring fees to remove personal information from data broker sites but perform no work or provide a service anyone can do for free.

Fraudulent parental monitoring apps charge subscription fees, harvest children's data, or install malware while providing no genuine monitoring capability.

Fraudsters set up rogue Wi-Fi hotspots with legitimate-looking login pages to harvest credentials, card details, or install malware on connecting devices.

Automated tools test billions of username-and-password pairs stolen from data breaches across hundreds of services simultaneously, silently taking over accounts where victims reused passwords.

Ready-made criminal toolkits sold to low-skilled fraudsters enable highly convincing phishing campaigns at scale, complete with real-time credential relay, anti-detection, and automated victim management.

Malicious software secretly installed on a device intercepts banking sessions, captures saved passwords, steals cryptocurrency wallet files, and exfiltrates personal data — often without any visible symptoms.

Fraudsters trick Android users into installing malware-laced app files from outside the official store, granting attackers remote access, banking interception, or surveillance capabilities.

Attackers position themselves between you and a legitimate website to harvest authenticated session tokens in real time, bypassing two-factor authentication without needing your password.

A fake "you have a document to review and sign" email or text impersonates DocuSign, Adobe Sign, or a similar service. Urgency and a spoofed brand steer you toward a lookalike login page or a malicious file, where the real target is your password, your 2FA code, or a foothold in your inbox.

Scammers buy sponsored search ads that sit above the genuine result for a bank, brand, or download, routing users to lookalike phishing pages, fake support numbers, or trojanised installers.