Verified scam directory

A phishing campaign abusing the Meta Business Manager 'Partner Request' system. Scammers send a legitimate-looking notification but set their business name to a phishing URL (sites.google.com) or a lure ('Your Facebook account is eligible for verification'). The goal is to trick the user into clicking a link that leads to a credential harvesting site or granting an attacker-controlled 'partner' access to their Facebook Business assets.

A phishing attempt impersonating a recruiter from Aerotek for a high-paying CMO role at HubSpot. The scam uses a personal Gmail account and a suspicious google/share link to solicit resumes and conduct 'benchmarking,' likely for identity theft or further social engineering.

The sender claims to be a coordinator for a 'StoryGraph reading community' and invites the author to include their book in a reading challenge. This is a common tactic used to eventually solicit 'participation fees' or 'promotional costs' from authors (a form of vanity press or service fraud). The email uses flattery and vague promises of exposure to entice the recipient.

Potential job scam impersonating an executive recruiter from Spencer Stuart. The sender uses a generic Gmail address and provides conflicting names (Robert vs. Olga) while promising 'highly confidential' senior leadership roles. The scammer attempts to deflect suspicion by claiming the communication is being routed through 'administrative channels.'

Fake crypto wallet security alert urging users to re-verify their seed phrase on a cloned website.

Impersonation of tax authority demanding immediate payment of overdue taxes via gift cards to avoid arrest.

Counterfeit Facebook Business verification notice threatening account deletion unless action is taken.

Fake LinkedIn recruiter offering remote work with inflated pay, requesting upfront payment for equipment.

SMS claiming a package delivery failed and requesting address confirmation via a phishing link.

Bogus Amazon order confirmation for a high-value item the recipient never purchased, with a fake support number.

Fraudulent Geek Squad auto-renewal invoice demanding phone callback to steal payment details.

Fake Netflix account suspension warning with a malicious login link designed to harvest credentials.