Phone Scams Impersonate Major Brands to Lure Victims Into Calling Fraudsters
Summary
Cofense describes mass-distributed email scams impersonating familiar brands, using urgent purchase or password-reset alerts to push recipients to call fraudsters. AI can help generate convincing variations, and some lures link to fake invoices.
Key points
- Scam emails impersonate brands including Microsoft, Amazon, Target, Geek Squad, and the FTC, often claiming a purchase or password reset requires attention.
- Messages create urgency and provide a phone number, steering recipients away from email replies and into calls where scammers have more control.
- Operators can use free email accounts, basic text or image editors, and free VoIP numbers to distribute campaigns at scale.
- Cofense says AI can help generate many convincing variations, making the campaigns harder for email security systems to detect.
- One Geek Squad-themed example included working GitHub links that redirected to a fake invoice.
- Warning signs include urgent instructions to call, unexpected purchase or account alerts, and impersonation of trusted brands.
Article Details
- Topic
- Mass-distributed phone scams that impersonate familiar brands and prompt recipients to call scammers