LIVE · cybersecurity feed
Live wire
security

Imposter scams cost Americans $3.5 billion in 2025 – and it’s getting worse

Someone is pretending to be your bank, your government, or your local planning office. And according to the FTC, they're making billions doing it. Read more in my article on the Fortra blog.

zeroday.news · 43d ago

Americans lost an estimated $3.5 billion to imposter scams in 2025, a figure that represents a worsening trend in fraudulent activity. These scams involve perpetrators falsely representing themselves as trusted entities such as financial institutions, government agencies, or local administrative offices to deceive victims.

The Federal Trade Commission (FTC) has reported on the significant financial impact of these schemes. The increasing scale of these losses underscores the growing sophistication and prevalence of imposter scams targeting the public.

While the source material does not provide specific details on the methods used by these scammers, the nature of imposter scams typically involves phishing, vishing (voice phishing), or smishing (SMS phishing) to solicit personal information or direct financial transfers from unsuspecting individuals. The impersonated entities are often chosen for their perceived authority and trustworthiness, making the deception more effective.

The financial losses indicate that a substantial number of individuals fell victim to these fraudulent tactics throughout the year. The trend suggests that awareness campaigns and security measures may not be keeping pace with the evolving tactics of scammers.

Further details regarding the specific types of imposter scams, the demographics most affected, or the breakdown of losses by impersonated entity were not provided in the source material. However, the overarching figure of $3.5 billion highlights a critical issue in consumer protection and cybersecurity.

The FTC's data serves as a stark warning about the persistent threat of these deceptive practices. As scammers continue to exploit public trust, individuals are urged to remain vigilant and critically evaluate unsolicited communications that request personal information or financial transactions.

General best practices for avoiding such scams include verifying the identity of the sender through independent channels, being wary of urgent requests or threats, and never sharing sensitive information like passwords, Social Security numbers, or bank account details in response to unsolicited contact.

The increasing financial toll of imposter scams emphasizes the need for ongoing education and robust security protocols to protect individuals from falling prey to these widespread fraudulent activities.

ShareXLinkedInWhatsAppFacebook

More News

view all →
vulnerability

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite. A March 2021 firmware integration error routed seed generation to a deterministic software pseudorandom number generator (PRNG

vulnerabilitycritical

Rails patches critical Active Storage flaw with RCE potential

A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). [...]

malware

Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens

Microsoft says Russian hackers hijacked hotel Wi-Fi portals to spread malware and steal Microsoft 365 tokens from travelers. Microsoft Threat Intelligence disclosed CaptiveCrunch, a campaign it attributes to Storm-2945, an operational sub-cluster of Midnight Blizzard, the Russian SVR-linked group also known as APT29 and Cozy Bear. Since early May 2026, Storm-2945 has been manipulating DNS […]

CVE-2026-48449critical

Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic

Adobe fixed a maximum severity vulnerability in Campaign Classic that could let attackers run code remotely without user interaction. Adobe has addressed a critical vulnerability, tracked as CVE-2026-48449 (CVSS score of 10.0), in Adobe Campaign Classic, the company’s enterprise marketing automation platform. The flaw is caused by incorrect authorization and could allow attackers to execute […]

security

Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments

The funding round was led by SYN Ventures, with participation from existing investors DataTribe and TEDCO. The post Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments appeared first on SecurityWeek.

vulnerabilitycritical

Ruby on Rails Patches Critical Vulnerability

The flaw can be exploited by unauthenticated attackers to read arbitrary files and potentially achieve remote code execution (RCE). The post Ruby on Rails Patches Critical Vulnerability appeared first on SecurityWeek.