Global Scam Watch

Global Scam Watch

Share

๐™…๐™ค๐™ž๐™ฃ ๐™ฉ๐™๐™š ๐™‚๐™ก๐™ค๐™—๐™–๐™ก ๐™Ž๐™˜๐™–๐™ข ๐™’๐™–๐™ฉ๐™˜๐™ ๐™ฉ๐™š๐™–๐™ข ๐™–๐™ฃ๐™™ ๐™›๐™ค๐™ก๐™ก๐™ค๐™ฌ ๐™ช๐™จ ๐™ฉ๐™ค ๐™จ๐™ฉ๐™–๐™ฎ ๐™ช๐™ฅ ๐™ค๐™ฃ ๐™ฉ๐™๐™š ๐™ก๐™–๐™ฉ๐™š๐™จ๐™ฉ ๐™จ๐™˜๐™–๐™ข๐™จ ๐™–๐™ฃ๐™™ ๐™๐™ค๐™ฌ ๐™ฉ๐™ค ๐™–๐™ซ๐™ค๐™ž๐™™ ๐™ฉ๐™๐™š๐™ข.

08/12/2026

I saw this post in a group today and it had all sorts of warning signs, the first sign was how vague it was with a comment prompting those interested to contact her, as opposed to getting to the point.

Upon further inspection, the profile belongs to an affiliate promoter using a lure targeting non-profit organizations seeking fundraising assistance. The user profile link points directly to a recruitment landing page for LiveGood, a Florida-based direct-selling multi-level marketing company selling nutritional supplements and paid memberships.

Mechanism of the scheme

Promoters utilize local community Facebook groups to solicit non-profit organizations or volunteers under the guise of offering fundraising assistance. Once individuals express interest, the recruiter pitches participation in the multi-level marketing network rather than providing traditional donations, grants, or official sponsorships. The ultimate goal involves converting non-profit representatives or community members into fee-paying affiliates tasked with recruiting additional members to generate commissions.

Key warning signs

โ€ข Inclusion of direct affiliate recruitment links such as livegoodtourโ€ขcom within the profile biography.
โ€ข Vague solicitations posted in local public groups offering unspecified financial or fundraising support.
โ€ข Disguising multi-level marketing affiliate sign-ups or product sales schemes as community charity partnerships.

It is truly sad how these individuals take advantage of non-profits

08/10/2026

๐—ฅ๐—ฒ๐—ฐ๐—ผ๐˜ƒ๐—ฒ๐—ฟ๐˜† ๐—ฆ๐—ฐ๐—ฎ๐—บ ๐—”๐—ฑ๐˜€ ๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜ ๐—ฃ๐—ฒ๐—ผ๐—ฝ๐—น๐—ฒ ๐—”๐—น๐—ฟ๐—ฒ๐—ฎ๐—ฑ๐˜† ๐—ฉ๐—ถ๐—ฐ๐˜๐—ถ๐—บ๐—ถ๐˜‡๐—ฒ๐—ฑ ๐—•๐˜† ๐—™๐—ฟ๐—ฎ๐˜‚๐—ฑ

This is just one example of many similar ads currently running, and Meta is profiting from every one of them.

A highly polished AI-generated video ad is circulating online, featuring a spokesperson pitching a fraud recovery service. The production quality is convincing, right down to reflections visible in "her" glasses, and it targets people who have already lost money to a scam. The pitch offers to recover funds with no payment required until the money is returned, and claims contacting police is often frustrating and produces no results, positioning the company as the real experts in recovery.

This is a well-documented pattern known as a recovery scam. Fraudsters build lists of previous scam victims, sometimes bought or traded from earlier scam operations, then target the same people a second time while they are still desperate to get their money back.

The "no payment until you collect" claim is the hook, not a safeguard. Victims are led to believe there is no risk, but the arrangement typically works one of a few ways. In some versions, victims are asked to hand over banking details, identification, or account access under the guise of processing the recovery, which the scammers then use directly or sell on. In other versions, a fake money transfer or deposit notification is sent showing the recovered funds have arrived, prompting the victim to log into a spoofed banking portal to confirm or release the funds, and their real banking credentials are captured at the point of login. In other versions still, victims are told a fee, tax, or verification charge must be paid first before anything can be released, and that payment simply disappears along with the company.

Warning signs to watch for include:

๐Ÿญ. Guaranteed or risk-free recovery promises
๐Ÿฎ. Discouraging victims from contacting police or financial regulators
๐Ÿฏ. Requests for banking information, identification, or remote account access
๐Ÿฐ. Fake transfer or deposit notifications asking victims to log in and confirm funds
๐Ÿฑ. Any upfront fee, however it is labeled, before funds are supposedly released
๐Ÿฒ. Fabricated case studies or testimonials
๐Ÿณ. Pressure to act immediately

Legitimate fraud recovery runs through banks, payment providers, and law enforcement or financial regulators, never through companies advertising recovery services on social media. Anyone approached this way should treat it as a 2nd attempt at fraud, report the ad to the platform hosting it, and avoid handing over any personal or financial information or logging into any portal the company provides.

A warning for anyone reading this who has lost funds to a scam. Please do not provide any details about your situation in the comments of this post. This page is not a recovery service and does not offer recovery assistance. Individuals who claim in the comments to be able to recover your funds are targeting victims directly from posts like this one.

Do not trust anyone in the comments claiming they can get your money back. They cannot. Report all scams to your local law enforcement.

08/08/2026

๐—™๐—ฎ๐—ธ๐—ฒ ๐—ฃ๐—ต๐—ผ๐—ป๐—ฒ ๐—ฅ๐—ฒ๐—ฐ๐—ผ๐˜ƒ๐—ฒ๐—ฟ๐˜† ๐—ฆ๐—ฒ๐—ฟ๐˜ƒ๐—ถ๐—ฐ๐—ฒ๐˜€: ๐—ง๐—ต๐—ฒ ๐—ก๐—ฒ๐˜„ ๐—™๐—ฎ๐—ฐ๐—ฒ ๐—ผ๐—ณ ๐—ฎ๐—ป ๐—ข๐—น๐—ฑ ๐—ฆ๐—ฐ๐—ฎ๐—บ ๐—ฃ๐—ฎ๐˜๐˜๐—ฒ๐—ฟ๐—ป

While scrolling Facebook just now, I stumbled across a post from a page called Victor C. Cyber. It was a regular organic post, not a sponsored ad, offering IMEI tracing, real-time location mapping and device recovery support for anyone dealing with a lost or stolen phone. Some of these scam posts run as paid ads, but this one didn't need to. It read as helpful at first glance, but the more I looked at it, the more it matched a scam pattern I've seen play out across other categories of online fraud.

๐—›๐—ผ๐˜„ ๐˜๐—ต๐—ฒ ๐—ฆ๐—ฐ๐—ฎ๐—บ ๐—ช๐—ผ๐—ฟ๐—ธ๐˜€

The post targets people who already experienced a real loss, a missing or stolen phone. Fear and urgency are doing most of the persuasive work before any contact even happens. The offer promises specialized tools ordinary people do not have access to, expert tracing, live location mapping and recovery support. Contact is directed away from public comments and into private messages, where there are no witnesses and no public accountability. Once in the DM, the scammer typically requests personal information, an upfront fee, remote access to a device, or account credentials. After payment or access is granted, the promised recovery never materializes, and the victim often loses more than a phone.

๐—ง๐—ต๐—ฒ ๐—ฆ๐—ฎ๐—บ๐—ฒ ๐—•๐—น๐˜‚๐—ฒ๐—ฝ๐—ฟ๐—ถ๐—ป๐˜, ๐——๐—ถ๐—ณ๐—ณ๐—ฒ๐—ฟ๐—ฒ๐—ป๐˜ ๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜๐˜€

This pattern shows up across several well documented scam categories.

Crypto recovery scams follow victims who already lost funds to a cryptocurrency scam. A second scammer poses as a blockchain specialist who can trace and recover the stolen coins, usually for a fee paid before any work begins. The victim is scammed a second time.

Romance scam recovery offers work the same way. After a person loses money to a fake online partner, someone reaches out claiming to be a recovery agent who can get the funds back, again requesting payment upfront.

Hacked account recovery scams target people locked out of Facebook, Instagram or email. A page offers fast restoration of access, then asks for login credentials or a verification code, which is precisely what compromises the account in the first place.

Pet recovery scams follow viral lost pet posts. A stranger claims to have tracking tools or a lead on the animal's location and requests a fee or travel costs before disclosing anything, which never comes.

๐—ช๐—ต๐˜† ๐—œ๐˜ ๐—ช๐—ผ๐—ฟ๐—ธ๐˜€

Each version relies on the same psychological setup. The target already suffered a loss, so anxiety is high and judgment is lower. The scammer presents themselves as having insider access or technical tools regular people lack. Moving the conversation to a private channel removes public scrutiny and makes it easier to escalate requests. Payment or access is always requested before any actual help is delivered, and once granted, there is no recourse.

The Lost Phone Tracker post fits this template precisely. IMEI tracing and real-time location mapping are technical sounding terms used to create a sense of specialized capability, the same way blockchain tracing or account verification codes are used in other variants.

๐—ช๐—ต๐—ฎ๐˜ ๐—Ÿ๐—ฒ๐—ด๐—ถ๐˜๐—ถ๐—บ๐—ฎ๐˜๐—ฒ ๐—ฅ๐—ฒ๐—ฐ๐—ผ๐˜ƒ๐—ฒ๐—ฟ๐˜† ๐—Ÿ๐—ผ๐—ผ๐—ธ๐˜€ ๐—Ÿ๐—ถ๐—ธ๐—ฒ

Genuine phone recovery does not require a stranger's DM. Apple's Find My iPhone and Google's Find My Device are built-in, free tools which can locate, lock or wipe a device remotely. Mobile carriers can suspend service on a lost or stolen phone immediately when contacted directly. Police can take a report using the phone's IMEI number, which can also be used to block the device from being reactivated on Canadian networks. None of these legitimate options ask for payment, login credentials or remote access from an unverified third party.

๐—ฃ๐—ฟ๐—ผ๐˜๐—ฒ๐—ฐ๐˜๐—ถ๐—ป๐—ด ๐—ฌ๐—ผ๐˜‚๐—ฟ๐˜€๐—ฒ๐—น๐—ณ

Be skeptical of any account or page offering recovery services through private message, regardless of the type of loss involved, financial, romantic, technical or otherwise. Never send money, personal information or account access to someone who reaches out first. Verify a service independently before engaging, rather than trusting claims made in a post. Report suspicious pages directly to Facebook, and consider warning others in the comments before a post is removed.

Losing a phone, a pet or money to a scam is stressful enough. Recognizing this pattern is the best defence against losing something a second time.

08/01/2026

๐—ง๐—ต๐—ฒ ๐— ๐—ฎ๐—ป๐˜† ๐—™๐—ฎ๐—ฐ๐—ฒ๐˜€ ๐—ผ๐—ณ ๐—จ๐˜๐—ถ๐—น๐—ถ๐˜๐˜† ๐—ฆ๐—ฐ๐—ฎ๐—บ๐˜€: ๐—™๐—ฟ๐—ผ๐—บ ๐—™๐—ฎ๐—ธ๐—ฒ ๐—•๐—ถ๐—น๐—น๐˜€ ๐˜๐—ผ ๐—™๐—ฟ๐—ผ๐—ป๐˜ ๐——๐—ผ๐—ผ๐—ฟ๐˜€, ๐˜๐—ต๐—ฒ ๐—ฆ๐—ฎ๐—บ๐—ฒ ๐—ฆ๐—ฐ๐—ฎ๐—บ ๐—œ๐˜€ ๐—ช๐—ผ๐—ฟ๐—ธ๐—ถ๐—ป๐—ด ๐—”๐—ฟ๐—ผ๐˜‚๐—ป๐—ฑ ๐˜๐—ต๐—ฒ ๐—ช๐—ผ๐—ฟ๐—น๐—ฑ

Fake utility scams have been defrauding victims around the world for years, and a fresh warning out of Greater Sudbury, in Canada, this week is a reminder they are not slowing down. On July 30, 2026, Greater Sudbury Utilities alerted customers after fraudulent emails began circulating claiming an overdue electrical bill balance and demanding payment by Interac e-Transfer within 72 hours under threat of disconnection. The utility stressed it never sends such requests, and customers are urged to call the number on their bill directly if anything seems off.

๐—ง๐—ต๐—ฒ ๐—จ๐—ฟ๐—ด๐—ฒ๐—ป๐—ฐ๐˜† ๐—˜๐—ป๐—ด๐—ถ๐—ป๐—ฒ

Every utility scam runs on the same fuel: the fear of losing something essential. Electricity in a heat wave. Heat in January. Running water. Internet access. Scammers choose utilities precisely because the threat of losing service feels existential in a way few other threats do, and the 72-hour deadline or the "your power will be disconnected within the hour" phone call is engineered to short-circuit rational thinking. When a person believes they are hours away from losing power, they do not slow down and verify; they act, and getting a victim to act before they think is the entire point of the exercise.

Real utilities do not work this way. Legitimate disconnection for non-payment follows a process of written notices mailed in advance, multiple contact attempts, and regulated timelines consistently running 10 to 30 days minimum. A utility does not send 1 email on a Tuesday afternoon and disconnect your power by Thursday. Recognizing manufactured urgency as a warning sign is the first and most reliable defence against every version of this scam.

๐—›๐—ผ๐˜„ ๐˜๐—ต๐—ฒ ๐——๐—ฒ๐—บ๐—ฎ๐—ป๐—ฑ ๐—š๐—ฒ๐˜๐˜€ ๐— ๐—ฎ๐—ฑ๐—ฒ

Once urgency is established, the scam pivots to the payment demand, and this is where the versions diverge on the surface. The payment processing service will vary depending on your country but scammers tend to use permanent, non reversible services. The email or call instructs the victim to e-Transfer a specific amount to an address looking plausible at a glance.

In the United States, the most common demands involve prepaid gift cards including Visa, Amazon, and Google Play, with the victim instructed to scratch the back, read out the PIN, and confirm payment over the phone, even though no legitimate utility in North America accepts gift cards as payment. Cryptocurrency demands are increasingly common in higher-value utility scams, particularly those targeting small businesses or landlords managing multiple accounts, with scammers walking victims through purchasing Bitcoin or another coin at a kiosk or exchange and transferring it to a provided wallet address in real time. Wire transfers round out the toolkit, with Huntsville Utilities in Alabama issuing a warning this same week about scammers telling customers their service would be cut within minutes unless they arranged an immediate wire transfer to a specific number.

Regardless of the method demanded, the outcome is the same: the money moves instantly and does not come back.

๐—ง๐—ต๐—ฒ ๐—ฆ๐—ฒ๐—ฎ๐—ฟ๐—ฐ๐—ต ๐—˜๐—ป๐—ด๐—ถ๐—ป๐—ฒ ๐—ง๐—ฟ๐—ฎ๐—ฝ

When someone receives a suspicious bill notice, many do exactly what seems sensible and search for the utility's contact number to verify, and scammers anticipated this. In May 2026, major US electric utility Evergy warned customers about search terms like "pay Evergy" or "Evergy bill" generating paid ads pointing to fake websites and phone numbers staffed by scammers waiting to collect personal and payment information.

This tactic combines 2 techniques. The first is typosquatting, where fraudsters register domain names closely resembling a legitimate utility's web address with a subtle difference: a transposed letter, an added hyphen, a different domain extension like .net instead of .ca, or a plausible-sounding variation like "bc-hydro-billingโ€ขcom." Victims who mistype a URL or click a lookalike link land on a site copying the real utility's logo, colours, and layout, and are then prompted to log in or enter payment details going directly to the scammers.

The second technique is SEO poisoning and paid ad abuse, where scammers purchase search engine ad placements or use black-hat SEO tactics to push fake utility sites into the top results. A person searching for their utility's contact number may see the fraudulent site listed above the real one, and the fake site warns of an impending service interruption, offers a customer service number, and staffs it with criminals ready to take credit card information or walk the victim through a gift card payment. The practical defence is straightforward: never search for your utility's contact information during a moment of alarm. Use the number printed on an actual past bill, or type the address you already know directly into the browser bar.

๐—ง๐—ต๐—ฒ ๐—ฅ๐—ฒ๐—ฏ๐—ฎ๐˜๐—ฒ ๐—ฉ๐—ฒ๐—ฟ๐˜€๐—ถ๐—ผ๐—ป

Not every utility scam leads with a threat. Some lead with money. The rebate or overpayment variant tells victims they are owed a refund: a government energy credit, a billing adjustment, or an overpayment on their account, and to receive it they need to confirm banking details or click a link and log in. In Australia, Scamwatch has flagged fake government energy rebate offers asking for upfront fees to process the return, meaning victims are asked to pay money to receive money never owed to them in the first place.

The rebate scam is particularly effective during periods of genuine government assistance. When real rebate programs exist, and Canada, Australia, the UK, and the US have all run legitimate energy relief programs in recent years, fake versions ride the same wave. A message about an energy rebate arriving during an actual rebate period is far more believable than one arriving at a random time.

๐—ง๐—ต๐—ฒ ๐——๐—ผ๐—ผ๐—ฟ ๐—ž๐—ป๐—ผ๐—ฐ๐—ธ๐—ฒ๐—ฟ๐˜€

Some utility scammers skip the phone and the inbox entirely and show up at the front door. Door-to-door utility scammers typically present themselves as representatives of the local utility or an affiliated energy efficiency program, claiming they need to inspect the home, review the customer's current bill, or verify account details.

The ask to see the bill is the critical moment. A real utility bill contains the account number, service address, billing history, and contact details, giving scammers everything needed to convincingly impersonate the customer in future fraud, redirect billing, or access the account. In some versions the visitor claims the homeowner has been overbilled and can receive a credit but needs to provide banking information to process it, while in others they offer free energy audits or government-funded efficiency upgrades, using the visit to case the property or extract personal information under the guise of paperwork.

Legitimate utilities do not make unannounced visits to collect bills or review accounts. Scheduled visits for meter reading, equipment inspection, or upgrades are communicated in advance by mail, and a real utility representative arriving unannounced to discuss billing is not a representative of the utility. Anyone arriving at the door claiming to represent a utility and requesting a bill, banking information, or access to the home should be asked for photo ID with the company name and logo, and the utility should be called directly on the number from a past bill to verify the visit before anything is handed over or discussed.

๐—ง๐—ต๐—ฒ ๐—ฃ๐˜€๐˜†๐—ฐ๐—ต๐—ผ๐—น๐—ผ๐—ด๐˜† ๐—•๐—ฒ๐—ต๐—ถ๐—ป๐—ฑ ๐—”๐—น๐—น ๐—ผ๐—ณ ๐—œ๐˜

Strip away the specific utility name, the country, and the payment method, and every version of this scam runs the same psychological sequence. Credibility comes first, with the email, call, or visitor using the real utility's name and often its logo, referencing the victim's address or account number when available, and data from previous breaches making this personalization increasingly convincing. A threat follows: loss of essential service, disconnection, or an overpayment credit about to expire, always concrete and domestic in a way affecting the home and the people in it. A deadline is then introduced, whether 72 hours, 24 hours, or within the hour, removing the option to think it over, speak to someone else, or verify independently. A resolution is always provided: pay this amount, right now, using this method. The payment method demanded is always irreversible, whether gift cards, e-Transfer, cryptocurrency, or wire transfer, because once the money moves, recovery is nearly impossible.

The reason this works across such different countries and contexts is straightforward: the fear of losing heat, power, or water does not require translation. It is universal. Scammers are not exploiting unusual gullibility; they are exploiting a completely reasonable human response to a specific kind of threat, and they have engineered every version of the scenario to make acting feel safer than waiting.

๐—ช๐—ต๐—ฎ๐˜ ๐˜๐—ผ ๐—ฅ๐—ฒ๐—บ๐—ฒ๐—บ๐—ฏ๐—ฒ๐—ฟ

No legitimate utility demands same-day or next-day payment under threat of immediate disconnection, as real disconnection processes take weeks and follow written notice by mail. No legitimate utility accepts gift cards, cryptocurrency, or payment app transfers as a valid payment method. No legitimate utility representative shows up unannounced to review your bill or collect account information.

If a call, email, or visitor triggers any alarm, stop and contact the utility directly using the number on a past bill or the official website typed manually into the browser bar.

๐—ฅ๐—ฒ๐—ฝ๐—ผ๐—ฟ๐˜๐—ถ๐—ป๐—ด ๐—ฎ๐—ป๐—ฑ ๐—ฎ ๐—™๐—ถ๐—ป๐—ฎ๐—น ๐—ช๐—ฎ๐—ฟ๐—ป๐—ถ๐—ป๐—ด

If you believe you have been targeted or defrauded, report it to your local police and your country's consumer protection or fraud reporting agency. When in doubt, start with your local police non-emergency line, as they can direct you to the appropriate reporting channels without the risk of ending up in the wrong place online.

A critical word of warning about searching for fraud reporting resources: recovery scammers specifically target people who have already been defrauded, and they use the same typosquatting and SEO poisoning tactics described earlier in this article to intercept victims searching for help. Paid ads and lookalike websites impersonating legitimate government fraud agencies appear at the top of search results specifically to catch people in a vulnerable moment, and their goal is to defraud victims a second time. Going directly to your local police in person or by phone rather than searching online removes the risk of being intercepted entirely.

No legitimate fraud reporting agency charges fees, promises to recover lost funds, or cold-contacts victims offering their services. Anyone doing any of those things is running the next scam.

07/30/2026

Tri-cities Community Safety Forum
2026 Delta Community Safety Forum

Sponsored in part by
Bosa Foods | FortisBC | DuraSign | FireSmart Canada | Neighbourhood Small Grants - Delta | KeepSafe Systems

07/30/2026

This particular scam group is "What's Happening in Dawson Creek" but there are hundreds if not thousands of others out there

07/29/2026

๐—™๐—ฎ๐—ฐ๐—ฒ๐—ฏ๐—ผ๐—ผ๐—ธ ๐—ฃ๐—ฟ๐—ถ๐˜ƒ๐—ฎ๐—ฐ๐˜† ๐——๐—ฒ๐—ฐ๐—น๐—ฎ๐—ฟ๐—ฎ๐˜๐—ถ๐—ผ๐—ป๐˜€: ๐—ช๐—ต๐—ฎ๐˜ ๐—ง๐—ต๐—ฒ๐˜† ๐—”๐—ฐ๐˜๐˜‚๐—ฎ๐—น๐—น๐˜† ๐——๐—ผ

You have seen it. Someone in your feed posts a block of text declaring they do not give Facebook or Meta permission to use their personal data. A lawyer supposedly advised it. It has been broadcast on TV. A deadline is hours away. If you do not post it, you have consented.

None of it is true.

This hoax has circulated in various forms since 2012. Fact-checkers have debunked every version of it. Meta has confirmed, on multiple occasions, no such policy changes are taking place. Posting a declaration on your timeline has zero legal effect. You agreed to Meta's terms of service when you created your account, and a copy-paste post cannot undo or override those terms.

๐—›๐—ฒ๐—ฟ๐—ฒ ๐—ถ๐˜€ ๐˜๐—ต๐—ฒ ๐—ฝ๐—ฎ๐—ฟ๐˜ ๐—บ๐—ผ๐˜€๐˜ ๐—ฝ๐—ฒ๐—ผ๐—ฝ๐—น๐—ฒ ๐—บ๐—ถ๐˜€๐˜€.

To "prove" they posted the declaration, most people share it publicly, even if their normal settings are friends-only. Doing so voluntarily opens a profile to anyone on the internet, in the name of protecting privacy. Every person who copies and pastes it also generates more engagement data for the very platform they believe they are pushing back against.

This is not a new phenomenon. In 1897, writer Lรฉo Taxil publicly confessed he had spent 12 years fabricating an elaborate hoax, sustained entirely by manufactured urgency and the willingness of people to repeat claims without verifying them. The Facebook privacy declaration runs on identical fuel.

๐—ช๐—ต๐—ฎ๐˜ ๐—ฎ๐—ฐ๐˜๐˜‚๐—ฎ๐—น๐—น๐˜† ๐˜„๐—ผ๐—ฟ๐—ธ๐˜€:

Go to Settings and Privacy, then Privacy Settings. From there, control who sees your posts, who can look you up, and whether search engines can link to your profile. For Meta AI data controls, go to Settings, then Privacy, then Your Facebook Information. Adjusting those settings does something real. Posting a copied declaration does nothing.

07/26/2026

๐—™๐—ฎ๐—ฐ๐—ฒ๐—ฏ๐—ผ๐—ผ๐—ธ ๐—ฃ๐—ฟ๐—ถ๐˜ƒ๐—ฎ๐—ฐ๐˜† ๐—ฆ๐—ฒ๐˜๐˜๐—น๐—ฒ๐—บ๐—ฒ๐—ป๐˜ ๐—ฆ๐—ฐ๐—ฎ๐—บ ๐—”๐—น๐—ฒ๐—ฟ๐˜

Settlement scams are nothing new, and whenever a major class action settlement makes headlines, scammers are quick to take advantage of the attention surrounding it. I previously covered the Facebook privacy settlement scam when the first round of payments was being issued, but with the second round of settlement payments now going out, it is worth revisiting because criminals are once again using the same opportunity to target unsuspecting victims.

Meta's $725 million Facebook privacy settlement has brought a new wave of phishing emails, text messages, and fake websites designed to trick people into believing they need to complete additional steps before receiving their money. Criminals are using real details from the settlement to make their messages appear legitimate, often claiming a payment is waiting but additional verification is required before funds can be released.

The goal is not to help people collect their settlement payment. The goal is to steal personal information, financial details, account credentials, or money directly from victims.

๐—ช๐—ต๐—ฎ๐˜ ๐—œ๐˜€ ๐—ฅ๐—ฒ๐—ฎ๐—น

The settlement itself is legitimate and stems from the 2018 Cambridge Analytica data sharing scandal, where personal information belonging to millions of Facebook users was improperly shared with a third party.

The first round of settlement payments was distributed during 2025, with eligible claimants receiving an average payment of approximately $30. Around 19 million people submitted valid claims before the August 25, 2023 deadline.

A second distribution began on June 9, 2026, using funds left over from uncashed first round payments. These additional payments average between $4.67 and $7.32 per eligible claimant and are being issued in batches over several weeks.

Only people who submitted a valid claim before August 25, 2023 qualify. No new claims are being accepted, and eligible claimants do not need to submit another application or provide additional information to receive their second payment.

๐—›๐—ผ๐˜„ ๐—ง๐—ต๐—ฒ ๐—ฆ๐—ฐ๐—ฎ๐—บ ๐—ช๐—ผ๐—ฟ๐—ธ๐˜€

Scammers rely on confusion surrounding legitimate settlements to make their fraud attempts appear believable. Many people may remember hearing about the Facebook settlement but may not remember whether they filed a claim, how payments are distributed, or what information is actually required.

Criminals use this uncertainty to send fake settlement notices claiming a payment is waiting. The message may direct the recipient to a website where they are asked to verify their identity, confirm payment information, or complete a final step before receiving their funds.

One common method is a phishing attack involving a fake settlement payment processing website. These fraudulent websites are designed to look like legitimate payment portals, often using copied logos, branding, and wording from official settlement information.

Instead of processing a payment, the website captures whatever information the victim enters. This may include usernames, passwords, email account credentials, banking information, or other personal details. Once collected, this information can be used to access accounts, commit financial fraud, or launch additional targeted scams.

Other versions of the scam involve claims a processing fee, tax payment, or identity verification charge is required before funds can be released. These advance fee tactics are designed to make victims believe they are one step away from receiving money, while the real objective is to steal information or collect fraudulent payments.

๐—ช๐—ต๐—ฎ๐˜ ๐—ฆ๐—ฐ๐—ฎ๐—บ๐—บ๐—ฒ๐—ฟ๐˜€ ๐—”๐—ฟ๐—ฒ ๐—”๐—ณ๐˜๐—ฒ๐—ฟ

The settlement payment itself is not the main target. The information connected to the payment process is what criminals want.

Scammers may attempt to collect:

โ€ข Login credentials for email, banking, or other online accounts.
โ€ข Personal information used for identity theft.
โ€ข Banking details used to access accounts or redirect funds.
โ€ข Credit card information used for unauthorized transactions.
โ€ข Information used to build a profile for future scams.

A stolen password or piece of personal information can continue to have value long after the original scam attempt. Criminals often combine information collected from different sources to create more convincing fraud attempts in the future.

๐—ฅ๐—ฒ๐—ฑ ๐—™๐—น๐—ฎ๐—ด๐˜€ ๐—ง๐—ผ ๐—ช๐—ฎ๐˜๐—ฐ๐—ต ๐—™๐—ผ๐—ฟ

Be suspicious of any message about the Facebook privacy settlement claiming you must:

โ€ข Pay a processing fee before receiving your payment.
โ€ข Pay taxes before your funds can be released.
โ€ข Provide your password, online banking credentials, or account information.
โ€ข Submit your full Social Security Number or other sensitive personal details.
โ€ข Enter credit card or banking information to verify your identity.
โ€ข Click a link to a website asking you to confirm your eligibility or process your payment.
โ€ข Act immediately or risk losing your settlement payment.

๐——๐—ผ ๐—ก๐—ผ๐˜ ๐—ง๐—ฟ๐˜‚๐˜€๐˜ ๐—ง๐—ต๐—ฒ ๐—ฆ๐—ฒ๐—ป๐—ฑ๐—ฒ๐—ฟ ๐—”๐—ฑ๐—ฑ๐—ฟ๐—ฒ๐˜€๐˜€

One of the biggest mistakes people make is assuming an email is legitimate because the sender address appears official. Email addresses can be spoofed, allowing scammers to make a message appear as though it came from a trusted source.

A sender address alone does not prove a message is authentic. Criminals can manipulate what appears in the "from" field to make phishing emails look convincing, including messages appearing to come from settlement administrators or other organizations involved in the process.

Instead of clicking links contained in emails, text messages, or social media posts, manually enter the official settlement website into your browser and verify information directly.

๐—ฃ๐—ฟ๐—ผ๐˜๐—ฒ๐—ฐ๐˜ ๐—ฌ๐—ผ๐˜‚๐—ฟ๐˜€๐—ฒ๐—น๐—ณ

If you receive a message about the Facebook privacy settlement, do not click unexpected links, open attachments, or provide personal information through a message you did not request.

A legitimate settlement administrator will not ask for your passwords, online banking credentials, payment card information, or a fee before issuing funds.

Always verify settlement information by visiting the official website yourself rather than relying on links, phone numbers, or contact information provided in an unsolicited message.

The Facebook privacy settlement is real, but so are the scams surrounding it. Whenever a major settlement makes the news, criminals are already looking for ways to exploit public interest and uncertainty.

A legitimate settlement notice informs you about a payment you are already entitled to receive. It does not require you to pay money, provide passwords, or enter sensitive information into a website sent through an unexpected message.

Before providing any information, stop and verify the source directly. A few seconds spent checking through official channels can prevent your personal information, financial accounts, and online identity from ending up in the hands of scammers.

Follow us for updates on the latest scam trends.

07/24/2026

๐—ฃ๐—ฟ๐—ผ๐—ฝ๐—ฒ๐—ฟ๐˜๐˜† ๐—ง๐—ฎ๐˜… ๐—ฆ๐—ฐ๐—ฎ๐—บ๐˜€ ๐—”๐—ฟ๐—ฒ ๐—ฆ๐—ฝ๐—ฟ๐—ฒ๐—ฎ๐—ฑ๐—ถ๐—ป๐—ด ๐—”๐—ฐ๐—ฟ๐—ผ๐˜€๐˜€ ๐—ก๐—ผ๐—ฟ๐˜๐—ต ๐—”๐—บ๐—ฒ๐—ฟ๐—ถ๐—ฐ๐—ฎ

The District of Saanich issued a warning on July 23 about a property tax payment scam involving third parties offering to pay residents' property taxes for them. The pitch varies: a discount, a rewards program, a simplified bill, someone else handling the hassle. None of it is authorized by Saanich, and the district does not permit outside companies or individuals to negotiate reduced payments or special arrangements on a property owner's behalf.

This is not an isolated incident. In June, Kamloops warned residents after a scammer posed as the city's mayor in a text message, falsely claiming a resident had been selected for a property tax discount and requesting a copy of the resident's property tax notice. The pattern shows up well beyond BC too. Missoula County, Montana has fielded reports of letters and phone calls using government terminology and alarmist language to convince recipients their property will be seized if they don't pay by a stated deadline, sometimes citing publicly available property details to appear more legitimate. In Nebraska, the Douglas County treasurer flagged emails claiming unpaid taxes and demanding wire transfer payment, sent from addresses nearly identical to the real treasurer's office except for the domain. San Bernardino County, California has issued similar alerts ahead of its tax billing cycle.

The mechanics differ by region, but the goal is always the same: get you to hand over banking information, a copy of your tax notice, or payment through a channel the municipality never authorized.

๐—›๐—ผ๐˜„ ๐—ง๐—ต๐—ฒ๐˜€๐—ฒ ๐—ฆ๐—ฐ๐—ฎ๐—บ๐˜€ ๐—ช๐—ผ๐—ฟ๐—ธ

โ€ข A message arrives by text, email, phone call or physical mail, often impersonating a mayor, treasurer or municipal official
โ€ข The offer promises a discount, reward, consolidation or convenience in exchange for letting a third party handle your payment
โ€ข You are asked to send banking details, credit card information, login credentials, or a copy of your property tax notice
โ€ข Payment links are sent through unsolicited text, email or social media
โ€ข Urgency and threats of property seizure or penalty are used to pressure quick action

๐—›๐—ผ๐˜„ ๐˜๐—ผ ๐—ฃ๐—ฟ๐—ผ๐˜๐—ฒ๐—ฐ๐˜ ๐—ฌ๐—ผ๐˜‚๐—ฟ๐˜€๐—ฒ๐—น๐—ณ

โ€ข Pay property taxes only through your municipality's official channels or your financial institution, and confirm payee and folio details match your current tax notice
โ€ข No municipality authorizes third parties to negotiate, discount or consolidate your property tax bill
โ€ข Never send banking information, credit card details, login credentials or copies of tax notices to unknown parties
โ€ข Do not click payment links from unsolicited texts, emails or social media messages
โ€ข If a request seems off, call your municipality directly using a number from an official notice or website, not a number provided in the suspicious message

If you believe you have been targeted, save the message or screenshot it, contact your financial institution right away if you've shared financial details, and report the incident to your local police.

Want your school to be the top-listed School/college in Toronto?

Click here to claim your Sponsored Listing.

Location

Address


Toronto, ON