Almost every scam on Wallapop and Vinted begins with the same demand: move the conversation elsewhere. A buyer who prefers WhatsApp, a link to “receive” a payment, a courier that is supposedly cheaper than the platform’s own service. Once a user accepts, the protection that makes a marketplace safer than a classifieds board vanishes. TechNews … Read more
A message lands from a friend or relative: they supposedly sent a verification code to the wrong number by mistake and need you to forward it. Or the phone rings inside WhatsApp itself, and a calm voice claiming to represent technical support wants to “verify” your account. In both scenarios the caller is fishing for … Read more
Bizum has become a default payment rail for millions, which makes one misunderstanding especially dangerous: accepting a money request does not collect cash. It sends cash. That distinction sits at the heart of most Bizum fraud, from bogus second-hand buyers to messages claiming a payment was made by mistake. Core mechanic: A Bizum request asks … Read more
Microsoft has secured a court order in Florida to seize and redirect domains belonging to YAM Store, an underground marketplace that sold compromised Microsoft 365 and Google environments along with the phishing kits built on top of them. The Digital Crimes Unit announced the action on October 14, describing infrastructure tied to more than 1 … Read more
Phishing emails have acquired a second reader. Security researchers have documented a campaign in which each message carries two payloads: a conventional social-engineering lure meant for the person who opens it, and a set of concealed instructions aimed at the AI assistant that summarizes, prioritizes and triages the inbox before any human sees it. A … Read more
Three seconds of audio is enough for a criminal to rebuild your voice convincingly enough to fool your own family. That is the figure Starling Bank puts at the heart of its Safe Phrases campaign, and it reframes a very old fraud. The “relative in trouble” call has not changed its script, only its raw … Read more
The code that arrives by text message protects the wrong asset: your phone number, not your account. That design flaw makes SMS two-factor authentication a last resort. The upgrade path runs from authenticator apps to passkeys, then to hardware FIDO2 keys for accounts you cannot afford to lose. SMS codes follow the number, not the … Read more