Phended Security Blog
Short, plain-language posts covering the scams you're likely to see this week, how to spot them, and what to do when you have.
19 posts

A phishing email that really came from Apple, passed every security check, and pushes you to call a scam line about a fake $899 charge.

The GOAT Breach exposed 16 billion fresh login credentials from Apple, Google, Facebook, banks, and government accounts. Not recycled old data. Fresh. Here's what to do today.

A wave of fake job offers is aimed at students, young adults, and anyone needing extra income. The "work" is laundering stolen money. The legal trouble lands on you, not the scamm…

Criminals are hosting their scam pages on Google Docs, Microsoft OneDrive, and Canva. Your eyes see a familiar brand. Your instinct says safe. It's not.

A scam aimed squarely at Etsy sellers. A "buyer" messages with a problem, sends a link, and if you follow it you'll end up typing your payment card into a fake Etsy page.

A phishing email claims to be from Coinbase, Kraken, or Wealthsimple Crypto, warning of unusual activity. Click the link and your crypto is gone. Unlike bank fraud, there's no rev…

An email shows a $400 Bitcoin purchase on your PayPal account. Panic sets in. You call the number. That's when the real scam starts.

"Hello, this is RBC anti-fraud calling about a suspicious charge on your account." The caller ID says RBC. The voice is calm and professional. Everything they tell you is a lie.

A chilling email arrives. It includes one of your real old passwords as proof. It threatens to release embarrassing video if you don't send Bitcoin. It's a bluff. Here's how to te…

In July 2024 a cybersecurity company called CrowdStrike pushed a small update to software running on millions of computers worldwide. The update had a bug. Within hours, Windows m…