ScamLens

AI-powered scam detection. Scan websites, crypto addresses & phone numbers instantly.
90+ threat intelligence sources. Free to use.
Report scams. Protect othe

[ScamLens @scamlens]

How the "fake job scam" actually works — and why it catches thousands monthly:

Step 1: You apply for a remote job on LinkedIn or Indeed. The posting looks legitimate — real company logo, detailed description, competitive salary ($65-85K).

Step 2: You get a reply within hours (red flag #1). The "recruiter" moves you off-platform to email or WhatsApp immediately. They say the main recruiter is "traveling" but they can fast-track you.

Step 3: You're sent an "employment agreement" — looks professional, uses real company letterhead (stolen or spoofed). They ask for a small fee ($200-500) for "background check processing" or "equipment deposit." Some victims skip this; others pay it.

Step 4: You're told you're hired. They send you a check for $3,000-$5,000 as an "advance" or "equipment allowance." They ask you to deposit it and wire some back to a "vendor" to buy company supplies.

Step 5: You deposit the check. It clears (takes 3-5 days). You wire the money. Days later, your bank flags the check as fraudulent. You're now liable for the full amount — the scammer has your money AND your bank account information.

The progression is psychological:
- They move fast to bypass skepticism
- They create urgency ("I need to fill this by Friday")
- They use stolen brand authority
- They isolate you from official company channels

The red flags:
- Communication happens only on WhatsApp/email, never through official company systems
- They skip phone interviews or video calls
- The job offer comes suspiciously fast (within 24 hours of applying)
- They ask for payment before your first day
- The sender's email domain doesn't match the company website (@jobvending.com, not @realcompany.com)
- Grammar/phrasing is slightly off ("Our company is very pride of...")

How ScamLens would catch this:
Our threat intelligence engine cross-references domain registration dates, email spoofing patterns, and known phishing infrastructure. That fake company domain registered 3 weeks ago? We'd flag it. That sender's IP routing through a bulletproof hosting provider we've tracked for 6 months? Detected. We'd also match the job posting against thousands of known fake job templates in our database.

Verify any job offer before you apply money or personal details →

https://t.co/impfeXckbl

#FraudPrevention #JobScam #PhishingAlert

[ScamLens @scamlens]

FTC just shut down a network of 85+ fake "job listing" sites targeting job seekers with upfront payment scams.

The sites impersonated major retailers and logistics companies. Victims were asked to pay $50-300 for "background checks" or "training kits" — money never recovered.

Real job postings don't ask for upfront fees. Period.

Before applying anywhere, cross-check the company domain directly (not the link in the job post) and call their HR line.

Check for similar tactics on your job boards →
https://t.co/impfeXcS0T

#PhishingAlert #FraudPrevention #JobScam

[ScamLens @scamlens]

FTC shut down a call center ring operating across 3 states — they were spoofing bank numbers to trick people into "verifying" their accounts, then draining them.

Nearly 2,000 victims lost an average of $8,500 each before the takedown.

The spoofed calls used real bank routing numbers to seem legitimate. If someone calls YOU claiming to be your bank and asks for verification details — hang up and call your bank's official number directly.

Verify your bank's real contact info:
https://t.co/impfeXcS0T

#PhishingAlert #FraudPrevention #ScamAlert

[ScamLens @scamlens]

**3 ways scammers hide their real identity — and how to catch them in 60 seconds:**

Most phishing sites and fake apps copy the real thing so well you'd miss them at first glance. Here's what they almost always get wrong:

1. **Check the domain carefully** — Scammers buy domains that *look* like the real site (https://t.co/tPp8UN3nig, https://t.co/HibY3pEkLJ, https://t.co/2vDq1DMoY9). Hover over links before clicking. The actual domain should match exactly what you expect. Real companies never hide their domain.

2. **Look for the padlock AND the company name** — A green padlock just means the connection is encrypted. The company name in the certificate is what matters. If you're on "https://t.co/ewcLehsYDZ" but the certificate says "https://t.co/SdiVvzYfkZ," that's fake.

3. **Search the exact domain on your own** — Don't use links from emails or texts. Type the company name directly into Google, then navigate to their real site. Check your account. Legitimate companies don't ask for passwords or card details via unsolicited links.

---

Our threat intelligence platform cross-references domain reputation, SSL certificates, and behavioral patterns across 90+ feeds to flag suspicious URLs in real-time.

Run a quick check on any website or app link:

https://t.co/N5vJloqdDl

#PhishingAlert #OnlineSafety #InfoSec

[ScamLens @scamlens]

How the 'tech support scam' actually works — and why it's harder to spot than you think:

Step 1: You're browsing normally. A pop-up appears: "WARNING: Your device is infected with malware. Call Microsoft support immediately: 1-800-XXX-XXXX."

Step 2: You call. A friendly person with an accent answers. They sound official. They ask you to open Event Viewer on your computer and show you scary red warnings (which are normal system logs, reframed as threats).

Step 3: "Your device is critically compromised. We need remote access to fix this." They send you a link to download TeamViewer or AnyDesk. You grant access.

Step 4: While screensharing, they navigate to your banking login, cryptocurrency wallets, or email account. They write down passwords. They install a keylogger. You don't see it happen — the mouse moves too fast.

Step 5: They create urgency: "This will cost $300 to fix. Give me your credit card." You do. They charge it. Then they disappear.

Step 6: Days later — sometimes weeks — attackers drain your bank account, reset your email password, or liquidate crypto holdings. By then, the remote access software is still installed.

The red flags that actually matter:
- Microsoft NEVER initiates contact via pop-up or cold call
- Legitimate support will NEVER ask for remote access unprompted
- Event Viewer warnings are normal — they're not infections
- Real IT support doesn't demand payment via gift card or wire transfer
- The phone number in the pop-up doesn't match Microsoft's official support line

How ScamLens catches this:
Our platform cross-references domain reputation feeds, phishing infrastructure tracking, and call-spoofing databases. The fake support domains typically show up in malware distribution networks within hours of launch. The phone numbers get flagged as VOIP spoofing services. The TeamViewer/AnyDesk download links get analyzed for malware payload signatures.

One tech worker reported that the scammers had installed remote access 3 weeks before attempting the theft — they were monitoring her waiting for a large deposit.

Verify any suspicious tech support claim → https://t.co/impfeXcS0T

#TechSupportScam #PhishingAlert #CyberCrime

[ScamLens @scamlens]

Someone just sent you a crypto address asking you to "verify your wallet."

You know it's probably a scam. But what if it's not?

Paste it into ScamLens.

Our platform checks that address against 18 blockchain networks + OFAC sanctions lists + known fraudster wallets in real-time. You'll see:

- Whether it's been flagged by other users
- If it's connected to known theft rings
- The wallet's transaction history (is it brand new? moving stolen funds?)

Takes 30 seconds. Saves you thousands.

Same thing works for suspicious links, phone numbers, even company names.

https://t.co/9fTPuCAaHg

Free. No signup needed.

#CryptoScam #ThreatIntel #OnlineSafety

[ScamLens @scamlens]

How the 'pig butchering' scam actually works (step by step):

Step 1: Wrong number text or random LinkedIn request
"Hey, I think you have the wrong number but I like your vibe 😊" — they initiate contact on purpose, making it feel accidental. This bypasses your defenses because *you* didn't reach out to them.

Step 2: Weeks of genuine friendship building
They're texting daily. They ask about your job, your family, your dreams. They're charming, attentive, sometimes in a "different timezone" (explaining delayed responses). This isn't quick — it's 3-8 weeks of real emotional investment. By now you trust them.

Step 3: The crypto investing 'opportunity'
"I've been making serious returns on this platform my cousin introduced me to. No joke, $5k turned into $18k in 3 months. Should I tell you how?"

They never pressure. They seem hesitant to share. That makes you ask *them*.

Step 4: The fake trading platform
They send you a link. The site looks professional — charts, testimonials, licensing claims. Your $500 deposit shows up in your account instantly. Within days, it "grows" to $1,200. They celebrate with you.

Step 5: The confidence trap
You deposit $2,000. Then $5,000. The "gains" compound on the fake dashboard. Your account shows $18,000. You're texting them screenshots, giddy. This is the "fattening the pig" phase.

Step 6: The withdrawal trap
You finally ask to cash out. "Sure! But we need a verification fee — just $800 to unlock your account." You pay it. Then: "Actually, the tax documentation requires another $1,200." Then a "regulatory clearance" fee. Each time you pay, the "account balance" stays locked behind another gate.

Step 7: Silence
They ghost. The website is still up but support doesn't respond. You've lost $15,000-$50,000. The emotional manipulation makes this worse than a simple theft — you feel stupid for "falling for it."

**The red flags (every single time):**

- They initiate contact (not the other way around)
- They avoid video calls ("my camera is broken")
- The trading platform has zero regulatory presence (check SEC/FINRA databases)
- Domain was registered less than 6 months ago
- They ask you to keep the "opportunity" secret from friends/family
- Gains appear *too* consistently (real markets are volatile)
- Withdrawal always hits a new "fee" or "verification" requirement

**How ScamLens catches this:**

Our threat intelligence engine cross-references that trading domain against 90+ feeds including domain reputation databases, phishing registries, and cryptocurrency fraud reports. We'd flag it instantly: newly registered, spoofed SSL certificate, zero regulatory licensing, linked to known scam campaigns. The platform link gets blacklisted before 100 people lose money.

The scammer's phone number and messaging patterns? Cross-referenced against telecom fraud databases. The social engineering language? Detected by behavioral AI trained on thousands of real pig butchering cases.

You'd know before the emotional investment happens.

Verify investment platforms before you deposit anything →
https://t.co/impfeXcS0T

#CyberCrime #ScamAlert #FraudPrevention

[ScamLens @scamlens]

Your phone's app store won't stop fake banking apps — here's how YOU spot them before installing:

1. Check the developer name carefully
Real apps list the actual company (Apple Inc., Bank of America Corp). Scammers use subtle fakes ("Apple Systems Inc." or "BankofAmerica-Official").

2. Look at the download count vs. reviews ratio
Legitimate banking apps have millions of downloads. If you see 50K downloads but only 200 reviews, that's a warning sign — real users leave feedback.

3. Read the NEWEST reviews first
Scammers flood old reviews with 5 stars, then get exposed. Scroll to the bottom — recent 1-star reviews saying "this stole my info" = real red flag.

4. Check the permission requests
Does a "banking app" ask for access to your contacts, calendar, or camera? Legitimate banks only need access to location and device ID. Anything else = uninstall immediately.

5. Verify the app store link matches the official website
Go to the REAL bank's website first. Find their app link there. Don't search the app store directly — scammers buy ads that rank higher.

We cross-reference 90+ app security feeds to flag malicious apps before they spread. But this manual check takes 30 seconds and catches 95% of fakes.

Run a free app safety check →
https://t.co/N5vJloqdDl

#PhishingAlert #OnlineSafety #InfoSec

[ScamLens @scamlens]

**Your PayPal account is "limited" — that's the opening line of a new wave hitting right now. They'll ask you to "confirm your identity" with a link. Don't. PayPal will NEVER ask you to verify via unsolicited text or email.**

The trick: the fake PayPal site looks pixel-perfect. They've stolen your login. Then they drain your linked bank account.

**What to do:**
1. If you got this message — forward it to [email protected] (that's real)
2. Go DIRECTLY to https://t.co/VO8POVzbxf in your browser (don't click the link)
3. Change your password immediately

Paste any suspicious PayPal link here to check it first →
https://t.co/9fTPuCAaHg

**Then send this to someone you know who uses PayPal.**

#ScamAlert #PhishingAlert #FraudPrevention

[ScamLens @scamlens]

Your Amazon account is "suspended" — and the text looks REAL. But Amazon never sends account alerts via SMS. The link goes to a fake login page designed to steal your password.

If you got this message, delete it immediately. Don't click the link.

Real rule: Amazon contacts you through the app or email account tied to your order — never SMS.

Paste the link to check → https://t.co/9fTPuCzCRI

#ScamAlert #PhishingAlert

[ScamLens @scamlens]

You just got a text: "Confirm your package delivery" with a link.

Your gut says no. But what if it's real?

Don't guess. Paste the link into ScamLens.

We scan it against 90+ threat intelligence feeds in real-time — checking domain age, SSL certificates, known phishing patterns, and behavioral signals that separate legitimate from fake.

You get a verdict in seconds. No account needed.

Saved you a credential compromise, a malware install, or worse.

https://t.co/9fTPuCzCRI

#PhishingAlert #OnlineSafety

[ScamLens @scamlens]

**FBI dismantles fake job recruiter network operating across LinkedIn and WhatsApp.

Over 2,000 victims lost $45M total to a coordinated scheme targeting remote workers.

The playbook:
1. Recruiter reaches out with "urgent" high-pay role
2. "HR onboarding" asks you to wire deposit for equipment
3. Once paid, the account goes dark

Red flags they're using right now:
- Urgency ("position closes today")
- Pressure to move off LinkedIn to WhatsApp
- Requests for wire transfers before day one
- Job postings with generic descriptions

If you've applied to remote jobs recently, verify the company directly — call their official phone number, don't use contact info from the recruiter.

Check active threat campaigns here →
https://t.co/impfeXcS0T

#PhishingAlert #JobScam #FraudPrevention**

[ScamLens @scamlens]

A small business owner in Texas lost $47,000 to an investment scam. Here's how it happened.

He owned a landscaping company — stable, profitable, but not growing fast enough. He was scrolling LinkedIn when someone connected with him: "Investment advisor, 15 years experience, helping business owners like you scale."

The profile looked legitimate. Real headshot, detailed work history, 2,000+ connections, recommendations from other business owners.

They messaged for two weeks. Casual at first — industry talk, business challenges. Then the advisor mentioned a "private investment opportunity" his firm was offering: cryptocurrency staking with guaranteed 18% monthly returns.

"Very selective. Only for serious entrepreneurs. I can get you in."

He was skeptical, but the advisor sent a detailed PDF prospectus, a fake SEC filing, screenshots of "investor dashboards" showing other people's returns.

What sealed it: the advisor suggested a small test deposit first. "Put in $5,000. See the returns yourself in 30 days."

$5,000 went in. Two weeks later, his dashboard showed $900 in gains.

It was real money he could see. He felt smart for taking the risk.

Then the advisor called: "The fund is closing this round early due to demand. If you want serious returns, you need to commit now. I'd suggest $40,000 minimum."

He pulled $40,000 from his business operating account.

For three weeks, his dashboard showed beautiful exponential growth. $47,000 became $58,000 on paper.

When he asked to withdraw $15,000 to reinvest in his actual business, the "compliance team" emailed: "Tax adjustment fee required before withdrawal — $8,200."

He paid it.

The withdrawal still didn't process.

Another email: "Currency conversion hold — $6,400 needed to release funds."

He paid again.

Finally, his nephew — a software engineer — looked at the website. The domain was registered three days before the first LinkedIn message. The "SEC filing" was fabricated. The investor dashboard was a custom-built fake. Every piece was theatrical.

By then, $47,000 was gone. The advisor's profile vanished within hours.

His bank couldn't reverse it. The crypto address belonged to a money mule network in Eastern Europe.

What our threat intelligence would have caught:

- The LinkedIn profile used a photo from a stock photography site (reverse image search would have exposed it in seconds)
- The "investment firm" website was 19 days old, hosted on a bulletproof hosting provider known for phishing sites
- The crypto wallet had received deposits from 312 other victims in 4 months
- The PDF prospectus contained subtle grammar errors and a fake SEC EDGAR registration number
- The payment processor wasn't regulated — it was a shell company in Malta

He trusted because they moved slowly. They built credibility with a small win. Then they leveraged his greed.

It works every single time.

Forward this to someone you care about — especially anyone thinking about "alternative investments" right now.

Check any website, LinkedIn profile, or investment opportunity →

https://t.co/9fTPuCAaHg

#ScamAlert #FraudPrevention #InvestmentScam

[ScamLens @scamlens]

Your cousin just sent you a crypto wallet address to "invest together." Looks legit. But $5,000 is a lot to risk on a gut feeling.

Paste it into ScamLens.

Our crypto scanner runs that address against 18 blockchains + OFAC sanctions lists + known scam databases in seconds. You'll see:
- Transaction history (is it moving real money or collecting dust?)
- Link to known scam networks
- Whether it's flagged by major exchanges

Takes 30 seconds. Free. Could save you thousands.

Same thing works for any suspicious link, email domain, or phone number someone sends your way.

Try it — paste any link →

https://t.co/9fTPuCAaHg

#CryptoScam #FraudPrevention #InfoSec

[ScamLens @scamlens]

A single mother in her mid-40s lost $47,000 to a job scam.

She'd been unemployed for 8 months. Her savings were nearly gone. Her 12-year-old needed braces. She was applying to 40 jobs a week.

Then a recruiter from "TechStaff Solutions" reached out on LinkedIn. They were hiring for a remote data analyst role — $65,000 annually, flexible hours, work from home.

Perfect.

The interviews felt legitimate. Zoom calls with a hiring manager. Technical questions. An offer letter came via email. She signed it that night and cried.

Then came "onboarding fees."

"Standard in our industry," the recruiter explained. "Equipment deposit: $1,200. Background check: $800. Software license: $500."

She paid from her credit card. They sent a "welcome package" confirmation.

A week later: "We need to process your first paycheck early. Wire $2,400 for payroll setup."

She did.

Then: "Tax documents require a certified check — $3,100."

Then: "Your equipment was damaged in transit. Insurance claim needs $2,800 upfront."

Each time, the recruiter apologized. Each time, she believed the next payment would unlock her salary.

After 6 weeks and $47,000 in wire transfers, credit card advances, and borrowed money from her sister, she asked for her first actual paycheck.

The recruiter's email bounced.

The LinkedIn profile was gone.

The company website still exists — but the "About Us" photos are stock images. The phone number routes to a voicemail that's full.

Her daughter asked why she was crying. She couldn't explain.

What ScamLens would have caught immediately:

- The LinkedIn recruiter's profile was created 3 weeks before outreach (new accounts are a massive red flag)
- The company domain was registered through a privacy service 2 months earlier
- The email address used for "onboarding" didn't match the company domain — it was a Gmail lookalike
- The job posting appeared on 7 different boards in the same day (bulk scam tactic)
- The Zoom meeting link routed through a proxy service — not company infrastructure

This isn't rare. The FTC reports job scams cost victims an average of $3,000 each. But many lose far more.

Before you accept a job offer, before you pay ANY upfront fee, check it.

https://t.co/9fTPuCAaHg

Share this — it could save someone you know.

#ScamAlert #JobScam #FraudPrevention #OnlineSafety

[ScamLens @scamlens]

How to spot a fake job offer in 3 steps (before you give them your SSN):

1. **Check the company domain in the email header**
- Scammers use lookalike domains: "https://t.co/kCpjK91I9o" instead of "https://t.co/JVLc4P8vlD"
- Hover over the sender's email — does it match the official company domain? If it says "https://t.co/3MrAIbDYFP" or "https://t.co/7UMYhOBaps," it's fake.

2. **Search for the job posting on the OFFICIAL company career site**
- Real job offers come from the company's verified job board, not random emails
- If you can't find it listed there, the offer isn't real

3. **They're asking for money or personal info upfront? It's a scam**
- Legitimate employers never charge application fees, deposit fees, or "background check fees"
- They never ask for your full SSN, bank details, or passport info before you're hired

**The giveaway:** Scammers often promise remote work, high pay, minimal experience required, and use urgent language ("Respond by midnight"). Real offers include specific job details, clear reporting structure, and verifiable contact info.

Our threat intelligence platform flags phishing domains and spoofed job posting sites in real-time.

Run a free company domain check → https://t.co/N5vJloqdDl

#PhishingAlert #JobScam #FraudPrevention #OnlineSafety

[ScamLens @scamlens]

FTC shut down a fake job recruitment network targeting healthcare workers — 850+ job posting sites used the same infrastructure.

Victims uploaded ID docs, bank info, and SSNs thinking they were applying for nursing and admin roles. The scheme had been running since 2022.

Red flags that caught it:
- Jobs posted across 50+ states simultaneously
- Zero company verification on LinkedIn
- "Interview" conducted via email only
- Upfront "background check fee" requested

If you're job hunting in healthcare, IT, or finance right now — verify the employer independently. Don't use links from job boards.

Check for similar campaigns in your industry →
https://t.co/impfeXcS0T

#PhishingAlert #FraudPrevention #ThreatIntel

[ScamLens @scamlens]

FBI warns of surge in "CEO fraud" targeting finance departments — criminals impersonating executives via compromised email to authorize wire transfers.

The scam works like this:

1. Attacker gains access to executive email account (phishing, credential stuffing)
2. Sends urgent message to accounting: "Need wire transfer approved immediately — confidential deal"
3. Victims authorize transfers before verification happens

Finance teams reported $2.7B in losses to this tactic last year. Most common targets: mid-market companies with decentralized approval workflows.

Red flags:
- Urgent language + unusual payment requests
- Executive asking via email (not Slack/Teams)
- Requests to skip normal verification steps
- Grammar/tone slightly off from normal

Your company's best defense? Require a second verification channel (phone call to known number) for any wire over a threshold amount.

Monitor emerging threats in your industry →
https://t.co/impfeXckbl

#ThreatIntel #FraudPrevention #PhishingAlert

[ScamLens @scamlens]

Your bank will NEVER text you a link asking to "confirm your account."

If you got a message like this from "Chase" or "Bank of America" — it's fake. Every time.

The trick: the link looks real (might even say "https://t.co/Tsk6gxxyp0" in the URL), but it takes you to a lookalike site where they steal your login.

Real banks ask you to call THEIR number or log in through the app. They never send clickable links.

Got a suspicious text? Don't reply. Don't click.

Paste it here to verify → https://t.co/9fTPuCzCRI

#ScamAlert #PhishingAlert #OnlineSafety

[ScamLens @scamlens]

How the 'pig butchering' scam actually works:

Step 1: They find you on dating apps or LinkedIn. Attractive profile, perfect English, claims of being a businessman/engineer living overseas. Initial contact feels natural — asks about your day, your work, your goals.

Step 2: For 2-4 weeks, they build genuine emotional trust. Daily messages. They ask about your finances casually. "What do you do for income?" They're mapping your financial literacy and desperation.

Step 3: They mention cryptocurrency casually. "I've been making 40-50% returns through this investment app my friend runs." They share screenshots of fake trading platforms showing gains.

Step 4: They offer to "help you get started." They send you a link to download a fake trading app. It looks professional — real company branding, smooth interface. You create an account with real money ($500, $2,000, whatever you can afford).

Step 5: The fake app shows your balance growing. $500 becomes $1,200. You deposit more. "This is how I made my money," they say. Dopamine trap engaged.

Step 6: When you try to withdraw: "You need to pay a verification fee to unlock your account." $200. You pay it (the money goes to the scammers). Then: "Tax withholding fee." Then: "Insurance deposit." Each time, the promised withdrawal never comes. Eventually they ghost you.

THE RED FLAGS:
- They never video call (they're using stolen photos)
- The trading app isn't on official app stores
- The domain was registered less than 6 months ago
- They isolate you from telling friends/family
- They rush the investment step after emotional bonding

HOW SCAMLENS CATCHES THIS:
Our system cross-references 90+ threat feeds in real-time. We'd flag that fake trading domain before you ever clicked the link — analyzing registration data, SSL certificates, behavioral patterns, and known phishing infrastructure. The app itself would be identified as malicious in seconds.

This isn't about being smarter. It's about having the right tools watching your back.

Run a deep scan → https://t.co/impfeXcS0T

#ScamAlert #PhishingAlert #CyberCrime