Phishing scams

Phishing is a scam technique used by phishers to recover sensitive data by masquerading as trusted organizations.

To make this scam, scammers create fake websites that look like official versions. To better target their victims, they usurp identities well known to the general public : banks, telephone operators, energy suppliers... In a second step, they send a large number of emails (SPAMS) by inviting users to enter their login information or bank details !

In UK or USA, the main usurped identities are : PayPal, EDF,...

To report phishing, simply complete this form.

Last reported scams

okllahoma-plate.com 03/06/2025... Watch out for other fake toll/payment websites: ez-va.net express-toll.com goodtogo-wa.org houtxparking.com htxpark.org ntta-toll.net oh-platepay.com okllahoma-plate.com river-links.com riverslinks.com tx-tags.com txtagstoll.com
oh-platepay.com 03/06/2025... Watch out for other fake toll/payment websites: ez-va.net express-toll.com goodtogo-wa.org houtxparking.com htxpark.org ntta-toll.net oh-platepay.com okllahoma-plate.com river-links.com riverslinks.com tx-tags.com txtagstoll.com
ntta-toll.net 03/06/2025... Watch out for other fake toll/payment websites: ez-va.net express-toll.com goodtogo-wa.org houtxparking.com htxpark.org ntta-toll.net oh-platepay.com okllahoma-plate.com river-links.com riverslinks.com tx-tags.com txtagstoll.com
htxpark.org 03/06/2025... Watch out for other fake toll/payment websites: ez-va.net express-toll.com goodtogo-wa.org houtxparking.com htxpark.org ntta-toll.net oh-platepay.com okllahoma-plate.com river-links.com riverslinks.com tx-tags.com txtagstoll.com
houtxparking.com 03/06/2025... Watch out for other fake toll/payment websites: ez-va.net express-toll.com goodtogo-wa.org houtxparking.com htxpark.org ntta-toll.net oh-platepay.com okllahoma-plate.com river-links.com riverslinks.com tx-tags.com txtagstoll.com
express-toll.com 03/06/2025... An "express toll phishing scam" refers to a fraudulent text message or email that appears to be from a toll road company like "Express Lanes" or "FasTrak", claiming you have unpaid tolls and urging you to click a link to pay, with the goal of stealing your per
goodtogo-wa.org 03/06/2025... Domain: goodtogo-wa.org Registered On: 2025-03-04 https://www.whois.com/whois/goodtogo-wa.org WSDOT wants drivers to be on the lookout for WA toll scam. Here are latest recommendations: https://www.bellinghamherald.com/news/state/washington/article29442
support@skycoach.gg skycoach.gg 03/05/2025... Once i completed the order they asked my ID with a picture of the order screen. That already seemed EXTREMLY sketchy but i did it (with blurring some information) Then they asked me to send a picture of me holding my ID with my face NEVER do this people! They
0768319367 03/04/2025... Comment / Review: Phishing website / copy of mondial relay . Scam contents: Phishing website / copy of mondial relay . SUSPECTED SCAM!
package-tracking@mail17-e6c2b.firebaseapp.com 03/04/2025... Comment / Review: Package tracking phishing scam email. Scam contents: Received: from 10.220.163.139 by atlas323.free.mail.ne1.yahoo.com pod-id NONE with HTTPS; Mon, 3 Mar 2025 21:40:47 +0000 Return-Path: X-O
myincorp.co.uk (1 comment) 03/03/2025... Domain: myincorp.co.uk Registered On: 2025-02-09 https://www.whois.com/whois/myincorp.co.uk Domain is NOT a government site and only made early Feb 2025. *NEW* Thanks Maxi, another fake scam url: mycompanyprocedures.co.uk Domain: mycompanyprocedures.c
noreply@reteuomomondoforus.jp.net iCloud 03/03/2025... Comment / Review: Special offer. Scam contents: Your iCloud storage is full. SUSPECTED SCAM!
supass.com-etc-inji.top 03/03/2025... https://www.reddit.com/r/Scams/comments/1j1jm25/did_i_just_fall_for_a_scam_or_is_it_an_official/
zomatosreview.com 03/03/2025... Domain: zomatosreview.com Registered On: 2024-01-17 Expires On: 2025-01-17 https://www.whois.com/whois/zomatosreview.com You can report the website to their domain host and try to get it taken down: Registrar: Gname.com Pte. Ltd. IANA ID: 1923 Abus
package-tracking@ans16-e34a6.firebaseapp.com 03/02/2025... Package tracking fraud email. The email read as follows: 🚚 Track your order now ! Yahoo / Spam Package Tracking From: package-tracking@ans16-e34a6.firebaseapp.com To: @yahoo.com Sun, Mar 2 at 10:04 AM For your security we disabled links in thi
+447378295213 The Toll Roads Notice of Toll Evasion (2 comments) 02/28/2025... Comment / Review: This was a text that came from a phone number +44 7378 295213. Scam contents: The Toll Roads Notice of Toll Evasion: You have an unpaid toll bill on your account. To avoid late fees, pay within 12 hours or the late fees will be increased an
0749063389 distributionstandard.com 02/27/2025... Comment / Review: The website looks legit in general. Download application button doesn’t work, that’s why I got suspicious.. Scam contents: They ask personal information, they act like there was a box that should have been delivered to you but they couldn
package-tracking@mail31-7638b.firebaseapp.com 02/26/2025... Package tracking phishing scheme: Package No: 7978212409 Delivery Issue ... Package Tracking From: package-tracking@mail31-7638b.firebaseapp.com To: @yahoo.com Wed, Feb 26 at 9:04 AM For your security we disabled links in this email. If you believe i
newsletter@lacomb35.firebaseapp.com 02/26/2025... Newsletter unsubscribe scam that read as follows: Confirm Your Unsubscription Newsletter From: newsletter@lacomb35.firebaseapp.com To: @yahoo.com Wed, Feb 26 at 6:39 AM For your security we disabled links in this email. If you believe it is safe to u
dh_e82aun@pdx1-shared-a1-28.dreamhost.com Porkbun 02/26/2025... Phishing domain attempting to gain credentials of users making us of Porkbun.com domain registration services Received by email in mass-spam attempt. URL reported to registrar. Phishing URL is hosted by Google Firebase.
online-accept-payment-hu.today 02/25/2025... Comment / Review: Domain: online-accept-payment-hu.today Registered On: 2024-11-23 Expires On: 2025-11-23 https://www.whois.com/whois/online-accept-payment-hu.today
interac-transfers-sending.icu 02/25/2025... Comment / Review: Domain: interac-transfers-sending.icu Registered On: 2025-02-25 https://www.whois.com/whois/interac-transfers-sending.icu. Scam contents: This is NOT an interac payment link. "The scam message includes a link that looks very similar to
cPanel Support 02/25/2025... Comment / Review: scum. Scam contents:   Secure Notification for *@*   Low Storage warning!! 99% full 0.42 MB  = You're running out of storage and may not receive new emails for *@* you must clear your cache in other to send and receive new mails.
package-tracking@ans15-31f6a.firebaseapp.com 02/25/2025... Comment / Review: Package tracking email scam Return-Path: X-Originating-Ip: [209.85.221.198]. Scam contents: Received: from 127.0.0.1 by atlas-production.v2-mail-prod1-gq1.omega.yahoo.com pod-id atlas--product
newsletter@tahia50-cb8f5.firebaseapp.com 02/25/2025... Comment / Review: Newsletter unsubscribe malware/click bait fraud.. Scam contents: Received: from 10.222.142.148 by atlas203.free.mail.ne1.yahoo.com pod-id NONE with HTTPS; Mon, 24 Feb 2025 18:05:26 +0000 Return-Path:
package-tracking@mail30.firebaseapp.com 02/24/2025... Package tracking email fraud that read as follows: Package No: 7978212409 Delivery Issue ... Yahoo / Spam Package Tracking From: package-tracking@mail30.firebaseapp.com To: @yahoo.com Sun, Feb 23 at 10:13 AM For your security we disabled links in
noreply@blaze40-60689.firebaseapp.com 02/24/2025... I am reporting a phishing scam that read as follows: Complete Your Purchase or Cancel Support From: noreply@blaze40-60689.firebaseapp.com To: @yahoo.com Sun, Feb 23 at 11:32 AM For your security we disabled links in this email. If you believe it is s
swapd.gg 02/23/2025... it is a VERY fishy website. To make 2 sales, they FORCED me to upload my driving license which reveals all my personal details but as soon as I do, they INSTANTLY ban my account which means they clearly have malicious intent with my driving license so all I ca
noreply-shipping@blaze20-98d25.firebaseapp.com 02/23/2025... Comment / Review: Some sort of spam saying 'don't miss out' that is online harassment/phishing.. Scam contents: Received: from 127.0.0.1 by atlas-production.v2-mail-prod1-gq1.omega.yahoo.com pod-id atlas--production-gq1-dcf999469-dclpc.gq1.yahoo.com with HTT
+15167098526 Ussa-Alerts 02/21/2025... Comment / Review: Domain: usaaprofiles.net Registered On: 2025-02-21 https://www.whois.com/whois/usaaprofiles.net. Scam contents: It should be clear but this is NOT a government link or text from them. It's a scammer phishing for your personal and or pay
no-reply@rocketaccount.com rocketaccount 02/21/2025... Comment / Review: No idea who "George" is and never opened anything with rocket mortgage. Scam contents: One more thing. Verify your email Hi George, Verifying your email helps keep your account secure. Verify my email Here are just a couple of ways tha
admin@lowgas.space +3544212434 LowGas Team 02/21/2025... Email was received in spam folder, after a whois lookup, I found out the domain was recently purchased from namecheap.com and went ahead and reported the email with details to abuse@namecheap.com. Email didn't specifically attempt to steal money, however it d
Аубакир Тилеухан aubakir@parliament.mn 02/21/2025... Comment / Review: scum. Scam contents: Subject: transfer done Hello Your Wallet is completed and has been fully funded with 105 BTC see below details to confirm KOINPOD.COM Customer ID: 41576330 Code: viviwarr Thanks
lurentfereira@gmail.com Lt Soffiuddin bin Esa 02/21/2025... Comment / Review: scum. Scam contents: Subject: ASK I have something important to discuss with you. Contact my personal email for my details (lurentfereira@gmail.com)
consali.com 02/20/2025... Comment / Review: Constant spam. Scam contents: Constantly uses burner email accounts requesting to unsubscribe from newsletter. I’ve blocked them and they use a different email address to keep sending more spam
+447585018407 Solentive Tech 02/20/2025... Comment / Review: Phishing scam . Scam contents: They don't say anything about the job itself. The company is not at all related to the real tech company called Solentive which is based in Australia. They ask you to create a profile and send them screen shots.
Hotel Planner 02/20/2025... The Italian consumer organisation Consumatori Informati says the are receiving hundreds of complaints from all over Italy. NB. the name Hotel Planner is an identity theft, the have nothing to do with the HP company owned by Tim Hentschel.
package-tracking@mail21.firebaseapp.com (1 comment) 02/19/2025... Comment / Review: Package tracking phishing/malware scam email.. Scam contents: Received: from 10.197.39.200 by atlas103.free.mail.bf1.yahoo.com pod-id NONE with HTTPS; Wed, 19 Feb 2025 14:50:32 +0000 Return-Path:
info@moreonlinetopdeals.jp.net 02/19/2025... Comment / Review: AAA phishing email coming from a Tokyo, Japan IP address.. Scam contents: AAA rewards phishing scam email. Please see the header: Received: from 10.217.151.74 by atlas202.free.mail.ne1.yahoo.com pod-id NONE with HTTPS; Tue, 18 Feb 2025 16:
marketing@moreonlineshopperdeals.jp.net 02/19/2025... Comment / Review: Icloud storage phishing email scam.. Scam contents: Received: from 10.197.36.8 by atlas307.free.mail.bf1.yahoo.com pod-id NONE with HTTPS; Tue, 18 Feb 2025 14:27:28 +0000 Return-Path: X-Originatin
naona@pass420drugtest.com M&S Gift Specialists (3 comments) 02/17/2025... Late at night, I finished the survey and it said I qualified for the gift…I paid £3 for postage by credit card. Next day, when I was more alert, I checked my credit card statement and after tracing the payment, found that I’d been fraudulently subscrib
noreply@reteuomomondoforus.jp.net (1 comment) 02/15/2025... Comment / Review: I received a 'Gas Price Relief' phishing scam email from a Denizli, Turkey IP address & japanese email address.. Scam contents: Received: from 10.197.37.232 by atlas210.free.mail.bf1.yahoo.com pod-id NONE with HTTPS; Sat, 15 Feb 2025 18:39:
Dominik wachta 02/13/2025... Comment / Review: He s. Scam contents: He want give free fashioweek accreditation . SUSPECTED SCAM!
chasedepositdepartment.com 02/12/2025... This is a fake financial site made and run by scammers. (Fake bank, investment or loan funds lending) The point is to get you to believe it's a real site with real funds for you, but will claim you need to PAY an upfront fee of some sort. You pay then get not
kubwchenriquempsmc@outlook.com Des Rosenbloom 02/12/2025... Comment / Review: Reporting a phishing email demanding money. Scam contents: Helen Rose, I suggest you read this message carefully. Take a minute to relax, breathe,and really dig into it. We're talking about something serious here,and I ain't playing games.
aave-phase.drops@surveymonkey.com aave-rise.com 02/11/2025... Comment / Review: Phishing trying to withdraw Web3 wallets by asking the passphrase or connecting wallets such as metamask Fake site, well made. . Scam contents: AAVE Staking Rewards Community Airdrop Claim your share of AAVE tokens as a reward for supporti
IRS Economic Impact Payment 02/08/2025... The fake text: Internal Revenue Service (IRS) You are eligible to receive a $1,400 Economic Impact Payment. Please provide your accurate personal information. We will deposit the amount into your bank account or mail a paper check within 1 to 2 business days
irs.gov.tax-eios.com 02/07/2025... Comment / Review: Domain: tax-eios.com Registered On: 2025-02-07 https://www.whois.com/whois/tax-eios.com. Scam contents: Fake IRS url and text. The URL is NOT "irs.gov" the scammer is using a subdomain before the real URL of "gov.tax-eios.com"
system 02/07/2025... Comment / Review: phishing from hacked webmail. Scam contents: Поштовани сбб корисници, Ово је одговор на ваш захтев да онемогућите свој налог е-поште и овај захтев ће ус
mymbcportal.site 02/05/2025... Comment / Review: Domain: mymbcportal.site Registered On: 2025-02-05 https://www.whois.com/whois/mymbcportal.site. Scam contents: This is NOT MBC - it's a phishing attempt text with fake website. Do NOT put in your bank details.