Current Scam Alerts: What to Watch for Right Now

The safest first response to an unexpected package, urgent advertisement, unusual CAPTCHA, or government contact is to stop and verify independently. Do not use the link, telephone number, QR code, or transfer offered by the person contacting you.

Unexpected packages and brushing scams

The Federal Trade Commission warns that an unordered package can be part of a brushing scam. A seller may use your name to create a fake review, and the delivery may also indicate that someone has obtained personal information connected to you.

A package may include a QR code claiming to identify the sender or arrange a return. Do not scan it. The code can lead to a phishing page designed to collect account or payment information. Review the FTC’s brushing-scam warning for current response steps.

Social-media advertisements that look legitimate

An advertisement appearing on Facebook, Instagram, or another social platform is not proof that the seller has been carefully checked. Scammers can copy a familiar brand, create a polished storefront, and advertise an unrealistic discount.

Before buying, search independently for the company name together with words such as scam, complaint, or review. The FTC explains why social-media ads are not always thoroughly vetted.

Fake CAPTCHA screens

A normal CAPTCHA may ask you to check a box or select pictures. Stop if a page asks you to open the Windows Run box, paste something, execute a command, or install an update. The FBI and CISA have documented this technique as a way criminals trick people into running malicious software.

Close the page without following its instructions. If you already completed the steps, disconnect the computer from the internet and obtain qualified help before using it for banking, email, or other sensitive accounts. See the FBI and CISA advisory.

Fake government and FBI contacts

Criminals may spoof telephone numbers, copy official logos, use a real employee’s name, or display a fake credential. They may demand secrecy or claim your money must be moved to keep it safe.

• Do not move money to a “protected” or “safe” account.
• Do not pay with gift cards, cryptocurrency, cash, gold, or a courier pickup.
• Do not trust caller ID, a badge image, or a familiar name by itself.
• Hang up and contact the organization through an address or number you find independently.

Before you act

Urgency is part of the tactic. Taking five minutes to stop, verify, and ask someone you trust can prevent a costly mistake. If something on your phone or computer feels wrong, do not keep clicking in an attempt to fix it.