Scams have never been this easy to produce or this hard to spot. In 2026, artificial intelligence lets criminals clone a real person's voice from a few seconds of audio, generate a convincing deepfake video call, and write flawless, personalized phishing messages in seconds. Impersonation of banks, delivery couriers, government agencies, and even family members has become routine. Fake websites and paid search ads now mimic real companies closely enough to fool careful people, scam ads run openly on major social platforms, and malicious QR codes and "verify you're human" pages are being used to install malware with a single misplaced click. Underneath all of it, the actual psychological playbook — urgency, authority, fear, greed, and emotion — hasn't changed much at all. This guide covers ten scam patterns that regulators, law enforcement, and security researchers have flagged as active and trending going into August 2026, wherever in the world you live, with the concrete red flags and steps that help you catch each one before it costs you anything.
What Scams Are Trending in August 2026?
10 Scam Trends to Watch in August 2026
Each of the patterns below has been flagged by an official consumer-protection agency, law-enforcement body, or reputable cybersecurity research team. Where a specific figure or alert date is cited, it comes from one of those sources — general observations about how a scam typically operates are noted as such. For scale, the FBI's Internet Crime Complaint Center (IC3) recorded $20.877 billion in total reported cyber-enabled fraud losses for 2025 alone, a 26% increase over the prior year, and imposter scams were the FTC's most-reported scam category for the ninth year running.
1. AI Voice, Deepfake & Impersonation Scams
What is it? Scammers use AI to clone a real person's voice or generate a live deepfake video, then impersonate a family member, a company executive, or another trusted figure to pressure the victim into sending money or sharing sensitive information.
How does it work? Modern voice-cloning tools need only a few seconds of audio — often pulled from a public social media video — to produce a convincing clone. The FBI has warned about scam calls that use a cloned voice of a family member claiming to be in an accident or in police custody, urgently asking for bail or medical money, sometimes escalating into a fake "virtual kidnapping." A related pattern targets businesses: a deepfaked voice or video of an executive instructs an employee to urgently wire funds or change payment details, a tactic security researchers describe as one of the fastest-growing forms of business impersonation fraud in 2026. The FBI's IC3 tracked AI-enabled fraud as a distinct category for the first time in its 2025 annual report, recording over 22,000 complaints and roughly $893 million in reported losses.
Why does it look convincing? Hearing what sounds exactly like a loved one's or boss's real voice overrides the skepticism people normally apply to a text or email. The urgency of the fake emergency also discourages victims from pausing to verify.
Red flags:
- An urgent call or video claiming a family member is hurt, arrested, or in trouble and needs money immediately
- Pressure to keep the situation secret from other family members
- Payment requested via wire transfer, cryptocurrency, or gift cards
- A "boss" or executive urgently requesting a payment or a change to banking details over chat, voice note, or a video call with poor quality or a bad connection
How to protect yourself: Agree on a private verification phrase with close family members that a caller could never guess or find online. If you receive an urgent call, hang up and call the person back directly on a number you already have — never one given to you during the call. For business calls, verify any payment change request through a second channel before acting.
What to do if you already interacted with it: If you sent money, contact your bank or payment provider immediately to ask about recalling the transfer, and report the incident to your national cybercrime authority. If you shared personal details, monitor your accounts and consider a credit freeze.
ScamSense has a dedicated guide to this category: AI Deepfake Scams: How Scammers Use Fake Voices & Videos.
2. Refund & Recovery Scams
What is it? A follow-up scam that specifically targets people who already lost money to a previous scam, offering to recover the stolen funds for an upfront fee.
How does it work? A "recovery agent," lawyer, investigator, or government-sounding compensation office contacts a past scam victim — sometimes using accurate details of the original loss — and offers to retrieve the stolen money in exchange for a "processing fee," "legal retainer," or "tax clearance" paid upfront. Consumer-protection agencies have described refund and recovery scams as being among the cruelest scams in circulation precisely because they target people at their most desperate. Scam networks are known to buy and sell lists of confirmed victims specifically because someone already scammed once is statistically more likely to be scammed again.
Why does it look convincing? Referencing real details from the original scam builds instant, false credibility, and the promise of undoing a painful loss is emotionally powerful enough to override caution.
Red flags:
- Unsolicited contact soon after you reported or posted about a scam loss
- Any request to pay a fee before funds are recovered
- A guarantee of full or near-full recovery
- Requests for your OTP, PIN, or remote access to your device
How to protect yourself: Remember that no legitimate bank, regulator, or law firm ever charges an upfront fee to recover stolen funds. Verify any firm through your official financial regulator's public register, never through a link the caller provides.
What to do if you already interacted with it: Stop sending further payments immediately, contact your bank about the transaction, and report it as a separate, second incident to your national cybercrime authority.
Read the full breakdown: The Scam After the Scam: How Recovery Scams Target Fraud Victims.
3. Unexpected Package & Brushing Scams
What is it? Also called a brushing scam, this involves an unordered, usually cheap, package arriving in your name so a seller can post a fake "verified purchase" review to boost their online listings.
How does it work? A seller ships low-cost items using addresses harvested from data leaks or public records, then uses the delivery as proof to leave a glowing review under your name. Regulators have warned about a more dangerous variant: the package includes a note or QR code claiming you need to scan it to identify the sender or process a "return." Scanning the code instead leads to a phishing website designed to steal your personal or payment information.
Why does it look convincing? A real, physical package at your door feels more legitimate than a message or email, and a QR code framed as necessary for a return or refund creates a plausible reason to scan it quickly without thinking.
Red flags:
- A package you never ordered, often containing something low-value or unusual
- A note or sticker with a QR code asking you to scan it to identify the sender or arrange a return
- No return address, or one that doesn't match a real retailer
How to protect yourself: Never scan a QR code included with an unexpected package. If you want to identify the sender, contact the marketplace or courier directly through their official app or website instead.
What to do if you already interacted with it: If you scanned the code and entered any information, change your passwords on affected accounts and monitor your bank and credit statements closely. Report the package to the marketplace where it likely originated and to your consumer-protection agency.
For more delivery-related and everyday scam patterns, see 5 Common Online Scams and How to Avoid Them.
4. Fake Search Results & Payment Websites
What is it? Scammers buy paid search ads or build lookalike websites that impersonate a real company's customer support, billing, or payment page.
How does it work? A scam ad is styled to look official — sometimes using a real company's name or logo — and appears above the genuine company's own website in search results. Clicking it leads to a fraudulent site controlled by the scammer rather than the real business, where victims are asked to "verify" a bill, log in, or make a payment. Financial regulators have specifically flagged this tactic being used against people searching for customer support numbers and bill-payment portals.
Why does it look convincing? Appearing at the top of a genuine search result lends false authority, and most people don't check a URL carefully before clicking a result that looks official.
Red flags:
- A slightly misspelled or unusual domain name in the address bar
- A payment or login page reached through a search ad rather than typing the address yourself
- Urgent language about an overdue bill or account suspension
How to protect yourself: Type the company's known web address directly instead of clicking search ads for support or billing pages, and double-check the domain before entering any payment or login details.
What to do if you already interacted with it: If you entered payment details, contact your card issuer immediately to flag possible fraud and request a new card if needed.
Fake support numbers follow a similar pattern — see Fake Customer Care Numbers: How to Stay Safe.
5. Fake Social Media Ads
What is it? Ads on social media platforms promoting fake discounts, nonexistent products, or counterfeit goods from stores that don't actually deliver what was promised.
How does it work? A scammer copies a familiar brand's look, or invents an attractive storefront entirely, and runs paid ads offering steep discounts on clothing, electronics, or other popular items. The FTC has reported that shopping scams are the most commonly reported type of scam that starts on social media, with a large share of victims saying they ordered something after seeing a social media ad — receiving nothing, a counterfeit, or something completely different from what was pictured. Platforms have acknowledged that not every advertiser is thoroughly vetted before an ad runs. The FTC has reported that people lost $2.1 billion to scams that began on social media in 2025, including roughly $95 million lost specifically to purchases made after seeing a fake ad.
Why does it look convincing? Borrowing a trusted brand's reputation, combined with a steep "limited time" discount, short-circuits normal shopping caution.
Red flags:
- Prices dramatically lower than anywhere else
- A store you've never heard of with a very new-looking website or social page
- No verifiable customer reviews outside the platform itself
- Checkout pages that only accept irreversible payment methods
How to protect yourself: Search the store's name plus "reviews" or "scam" before ordering, and verify the website's domain matches the brand it claims to represent.
What to do if you already interacted with it: Dispute the charge with your card issuer, report the ad to the platform it ran on, and avoid any further contact from the seller offering a "resolution."
General warning-sign guidance is covered in How to Identify a Scam Message.
6. Social Media Investment & Trading Scams
What is it? Scammers use social media personas, group chats, or paid promotions to lure victims into fake trading platforms or cryptocurrency schemes, often combined with a fabricated romantic or friendly relationship — sometimes called "pig butchering."
How does it work? A contact builds trust over weeks through messaging, shares screenshots of supposedly huge trading profits and a luxury lifestyle, and eventually introduces a trading platform or app. Early "withdrawals" may be allowed to build confidence, but once a victim deposits a larger amount, further withdrawals are blocked behind invented "fees" or "taxes" until the victim stops paying. Securities regulators have separately warned about paid social media influencers, including paid actors posing as ordinary people, promoting investments without disclosing compensation or exaggerating returns. This category is consistently reported as one of the most financially damaging scam types by law enforcement: the FBI's IC3 recorded $8.6 billion in investment-fraud losses in 2025, with cryptocurrency investment fraud — the category "pig butchering" falls under — accounting for $7.2 billion of that total.
Why does it look convincing? A real relationship (romantic or otherwise) built over time, combined with a slick platform showing fabricated but realistic-looking profits, is far more persuasive than a cold investment pitch.
Red flags:
- An online contact who steers conversation toward a "guaranteed" trading opportunity
- A trading app or platform you can't find registered with an official financial regulator
- Any request for an additional "fee" or "tax" before you can withdraw funds
- Testimonials or screenshots of profits with no verifiable, independent source
How to protect yourself: Never invest based solely on a social media contact's advice, and check that any platform is registered with your country's financial regulator before depositing money.
What to do if you already interacted with it: Stop depositing money immediately, even if promised it will unlock a withdrawal. Report the platform to your financial regulator and your bank, and preserve all chat records as evidence.
More on the warning signs: Investment Scam Warning Signs and Romance Scams Explained.
7. Fake Tax-Debt & Financial Relief Services
What is it? Companies or callers falsely claiming to be affiliated with the government, offering to reduce your tax debt or other debt for a large upfront fee.
How does it work? A call or ad from an official-sounding name — something like a "tax resolution department" or "debt mediation office" — claims you qualify for a special program that will dramatically reduce what you owe, but only if you pay a setup or processing fee first. Consumer-protection regulators have taken enforcement action against operators who impersonated federal and state tax authorities and collected millions of dollars from consumers this way, while providing little or no actual relief.
Why does it look convincing? Financial stress makes the promise of an easy way out of debt highly appealing, and official-sounding department names mimic real government language.
Red flags:
- A claim that you "qualify" for a program before any review of your actual finances
- Pressure to pay a fee before any debt is actually reduced
- Contact that starts with a cold call, text, or online ad rather than official correspondence
How to protect yourself: Only your national tax authority or your state/regional revenue office can determine what you actually owe or qualify for — go directly to their official website or phone number rather than a number a caller provides.
What to do if you already interacted with it: Stop payment if possible, report the company to your consumer-protection agency, and contact your actual tax authority directly to confirm your real account status.
Broader scam-avoidance guidance: How to Avoid Online Fraud.
8. Fake Government, Benefits & Authority Notices
What is it? Text messages, emails, or calls impersonating a government agency, law enforcement, or a benefits program, demanding payment or personal information.
How does it work? Common variants include fake toll-payment texts claiming a small unpaid toll with a threatened late fee, and messages impersonating a national social-benefits agency claiming a benefit increase requires you to "confirm" your account online. Consumer-protection agencies have specifically named fake toll texts as one of the fastest-growing forms of government impersonation, contributing to a roughly 40% jump in government-impersonation reports and pushing total imposter-scam losses to $3.5 billion in 2025, according to the FTC. A more severe, globally reported variant impersonates police or law-enforcement officials, falsely claiming the victim is under investigation or "digital arrest" and must stay on a call and transfer money to avoid arrest.
Why does it look convincing? Government seals, official-sounding department names, and the implied threat of legal consequences trigger fear and a desire to resolve the "problem" immediately, discouraging victims from checking independently.
Red flags:
- A text or email with a link to "confirm" your account or pay a small amount urgently
- Any threat of arrest, fines, or account suspension unless you act immediately
- A demand to stay on the phone or keep a video call active while you make a payment
- Requests for payment via gift cards, cryptocurrency, or wire transfer
How to protect yourself: Government agencies and law enforcement do not ask for payment by gift card or cryptocurrency, and do not threaten immediate arrest over the phone. Go directly to the agency's official website or a phone number you already know, never one provided in the message.
What to do if you already interacted with it: Hang up or stop responding immediately, do not send any further payment, and report the contact to your national cybercrime authority or consumer-protection agency.
ScamSense has a full guide to the most severe version of this scam: Digital Arrest Scam: What It Is, How It Works & How to Protect Yourself. Urgency tactics are also covered in How Scammers Create Urgency.
9. Fake CAPTCHA / "Verify You're Human" Scams
What is it? A fake human-verification page that tricks visitors into manually running a malicious command on their own device, silently installing malware.
How does it work? Also known as "ClickFix," this attack shows a fake CAPTCHA or error message on a compromised or lookalike website, instructing the visitor to press a specific key combination — typically Windows key + R, then paste a code with Ctrl+V, then press Enter. The page has secretly copied a malicious command to the clipboard, and pasting and running it hands the attacker remote access to the device. Consumer-protection regulators issued a fresh warning about this tactic in 2026, and security researchers have reported that this style of CAPTCHA-gated phishing attack has surged sharply this year.
Why does it look convincing? Fake "verify you're human" prompts are something people encounter constantly and rarely think twice about, so the instructions feel routine rather than suspicious.
Red flags:
- A "CAPTCHA" or "verification" step that asks you to open the Run dialog, paste something, and press Enter
- Any instruction to copy and paste a command outside your browser
- A verification page reached from an unfamiliar or freshly clicked link
How to protect yourself: A real CAPTCHA only ever asks you to click images or type distorted text inside the browser — it never asks you to leave the page or run anything on your device. Never paste unknown clipboard content into the Run dialog or a terminal.
What to do if you already interacted with it: Disconnect the device from the internet, run a full antivirus/anti-malware scan, change your passwords from a different, clean device, and monitor your accounts for unauthorized activity.
Full details here: Fake CAPTCHA Scams: How "I'm Not a Robot" Can Become a Security Trap.
10. Fake Banking Apps & Malicious Mobile Pages
What is it? Fraudulent apps or download pages that impersonate real banking, financial, rewards, or government apps to steal login details and one-time passcodes.
How does it work? Victims receive a text or chat message with a link to download an app file directly (an APK on Android) rather than through an official app store, often disguised with an enticing filename. Security researchers have tracked banking malware campaigns that impersonate real, well-known banks across multiple countries, and have reported a sharp year-over-year rise in this category of malware. Once installed, these fake apps can present a convincing fake login screen, intercept SMS one-time passcodes, or in some cases use near-field communication to capture card data.
Why does it look convincing? A fake app can closely copy a real bank's branding and login flow, and arrives with a plausible pretext — a security update, a reward, or a fraud alert — that creates urgency to install it quickly.
Red flags:
- A link to download an app file directly instead of through your phone's official app store
- A message urging you to "update" your banking app outside the store
- An app requesting unusual permissions, such as SMS access, immediately after installation
How to protect yourself: Only download banking, government, or financial apps from your phone's official app store, never from a link in a text or chat message.
What to do if you already interacted with it: Uninstall the app immediately, contact your bank to freeze the account and reissue credentials, and run a security scan on your device.
See the full guide: Banking Scam Guide.
The 5 Psychological Tricks Behind Most Scams
Every scam pattern above looks different on the surface — a fake package, a cloned voice, a phony investment platform — but nearly all of them rely on the same handful of psychological levers to get you to act before you think.
Urgency
A countdown, a threat of an immediate fine, or a "limited time" offer is designed to remove the time you'd normally spend verifying something. Scammers know that a rushed decision is a worse decision.
Authority
Impersonating a bank, a government agency, a police officer, or a company executive borrows instant credibility that most people are reluctant to question out loud.
Fear
Threats of arrest, account suspension, or a family member in danger trigger a stress response that overrides careful, rational thinking in the moment.
Greed
The promise of an unusually high investment return, a huge discount, or free money appeals to a desire for an easy financial win, making people more willing to skip due diligence.
Emotion
Romance, loneliness, hope, and desperation to undo a past loss are all exploited deliberately — an emotionally invested victim is far less likely to pause and verify.
Different scam. Same psychological tricks.
Before You Click, Pay, Reply or Download
Whatever the specific scam, running through these five questions takes less than a minute and catches the overwhelming majority of the patterns above.
- WHO contacted me? Is this a person, number, or address I actually recognize?
- WHY are they contacting me right now, and does the reason actually make sense?
- WHAT are they asking me to do — pay, click, download, or share information?
- WHERE does the link actually go? Does the real domain match what it claims to be?
- HOW can I independently verify it, using a contact method I found myself rather than one they gave me?
If you're unsure whether a message, link or other suspicious content could be a scam, ScamSense can help you evaluate it before you act. You can paste text, enter a link, or upload a screenshot on ScamSense for an AI-powered risk assessment with a plain-language explanation — a useful second opinion alongside your own judgment, not a replacement for it.
Key Takeaways
- AI has made impersonation scams — cloned voices, deepfake video, and fluent phishing text — faster to produce and harder to detect by ear or eye alone.
- Several of the fastest-growing scams in 2026 specifically target people who were already scammed, or piggyback on ordinary moments like a package delivery or a routine bill.
- Government agencies, banks, and law enforcement never ask for payment by gift card or cryptocurrency, and never ask you to pay an upfront fee to "release" money that's already yours.
- A short pause and independent verification — contacting the organization yourself, through a number or website you already trust — defeats nearly every scam on this list.
- These scams are trending globally, not just in one country; the specific wording changes by region, but the underlying tactics are the same everywhere.
Frequently Asked Questions
What scams are trending in August 2026?
What are the latest online scams in 2026?
How are AI scams changing in 2026?
How can I identify a fake message or website?
What should I do if I already lost money to a scam?
Can scammers clone voices or create deepfake videos?
Can an unexpected package be a scam?
How can I check a suspicious link?
What should I do if someone claiming to be my bank contacts me?
Can ScamSense check suspicious messages and links?
Related topics:
How to Identify a Scam Common Online Scams Digital Safety Guide AI Deepfake Scams Fake CAPTCHA Scams Investment Scam Warning Signs Recovery Scam Digital Arrest ScamNot sure if something is a scam?
Paste a message, enter a link, or upload a screenshot into ScamSense for an instant AI-powered risk assessment before you click, pay, reply, or download.
Start 3-Day Free TrialStay Ahead of What's Trending
The specific costume a scam wears changes every month — a toll text this week, a fake CAPTCHA page the next, an AI-cloned voice after that. What doesn't change is the underlying pressure to act fast, trust an unearned authority, and skip verification. Bookmark this guide, revisit it as new scam patterns emerge, and when in doubt, take the ten seconds to check before you click, pay, reply, or download.