Scam Detective
Scam wave report · Edition 4 · August 12, 2026

This Week's Scam Wave, in Numbers

Scam Detective's research desk documented 10 net-new scam patterns this week — every one deduplicated against our August 9 edition, the August 2 edition, and the July 30 edition before it. The shape of the wave, in numbers:

Scam Detective research desk · Published
Got one of these in your hand right now?
Paste the link, number, or sender into the instant check — free risk signal in 60 seconds, the full 0–100 report for $2, one-time.
Check a suspicious link — $2
10
Net-new scam patterns documented by our research desk this week
5 of 10
Impersonate a brand, platform, or institution you already trust
3 of 10
End with you moving the money yourself — a crypto-ATM deposit or a transfer you forward
2 of 10
Ride the season's news cycle — the midterms and peak summer travel
1 of 10
Turns your own keyboard into the malware installer
The data

The wave, pattern by pattern

01
Bitcoin-ATM “protect your money” demands
Arrives via phone call · The costume: Your bank's fraud department or a federal agent
Yes — scamFull verdict →
02
Sextortion emails carrying your real address
Arrives via email · The costume: A hacker with your footage
No — scamFull verdict →
03
Fake “prove you're human” run-command pages
Arrives via web page / online ad · The costume: A CAPTCHA security check
Yes — scamFull verdict →
04
“Copyright violation” page-deletion DMs
Arrives via facebook / instagram dm · The costume: Meta enforcement
No — phishingFull verdict →
05
WhatsApp “investment club” groups
Arrives via whatsapp / telegram group · The costume: An investment community
Yes — scamFull verdict →
06
Mystery packages with a QR code inside
Arrives via physical mail · The costume: An unknown sender
A scam tacticFull verdict →
07
Midterm voter-registration texts
Arrives via text message · The costume: Your election office
Verify it yourselfFull verdict →
08
Flight-delay “compensation claim” sites
Arrives via search and social ads · The costume: A claims agency
Verify it yourselfFull verdict →
09
Romance money-forwarding requests
Arrives via dating app / dm · The costume: A romantic partner
Yes — scamFull verdict →
10
eBay Motors “escrow and shipping” car sales
Arrives via marketplace listing · The costume: eBay buyer protection
Yes — scamFull verdict →
Analysis

What stands out

01
The money exit moved into the victim's own hands.
In three of this week's ten patterns — the Bitcoin-ATM demand, the investment-club platform, the romance forwarding ask — the mark is the one who physically moves the money. That is the point: a transfer you make yourself, to a wallet you were handed, is the hardest kind to reverse.
02
The costume is increasingly the platform you're standing on.
A Meta warning delivered inside Facebook, an investment club inside WhatsApp, eBay branding inside a marketplace listing, a CAPTCHA inside the page you were already reading — the scam no longer arrives at the platform; it lives inside it.
03
Fear claims now arrive pre-loaded with your real data.
The sextortion email's home address, street photo, and old password are breach leftovers and public records bought in bulk. Credibility is the product being purchased — none of it is evidence anyone was ever inside your computer.
04
Civic season is a scam season.
The midterm voter-registration text shows every civic deadline creates a costume. The same smishing engine that ran DMV and toll messages in earlier editions now runs on the election calendar — and the real check stays free at official sites.
05
Malware now outsources its own installation.
The fake-CAPTCHA page needs no software exploit at all: its entire trick is convincing the victim to open the Run box and paste the payload themselves. The searched moment — “a site told me to press Windows+R” — is the tell, and the only correct answer is to close the tab.
For businesses · $29, one-time
Is someone impersonating your brand?

The costume in these scams — a lookalike domain, a copied storefront, a spoofed sender — is exactly what the brand impersonation audit researches for your company: lookalike domains, typosquats, and copycat sites trading on your name, each with evidence and a risk rating, plus a ready-to-send takedown-request template.

Audit my brand — $29
Free brand scan first — you only pay for the full audit.
For your readers

What to do now

1
No bank, agency, or business will ever tell you to move money to keep it safe — not into a crypto ATM, not to a “secure account,” not to a courier. If a caller is directing where your money goes, hang up and call the number on your card or statement.
2
Real details attached to a threat are proof of a data breach, not proof of access. An email that knows your address or an old password bought them in bulk — don't pay, don't reply, and change any password that still matches the one they quoted.
3
Check the link before you click, scan, or pay. Paste it into Scam Detective's instant check ($2, one-time) before entering card or bank details anywhere new — and verify any money you're owed, or told you owe, through the official site you navigate to yourself.
Methodology

This report is published by Scam Detective's research desk. The figures describe the mix of distinct scam scripts newly documented during the week of August 10–12, 2026: they are counts of scam patterns our desk verified and published as verdict pages at scam-detective5.acoco.ai/answers, not victim counts, loss estimates, or scans of customer-submitted URLs. Patterns are identified from the exact questions people search when a scam reaches them, cross-checked against public warnings from law-enforcement and consumer-protection agencies, including the FBI, the FTC, and state attorneys-general and consumer-protection offices. This edition is deduplicated against our July 30, 2026, August 2, 2026, and August 9, 2026 editions — every pattern below is net-new, and no entry repeats a pattern already covered in any earlier report.

Each pattern links to its full verdict page. Verdicts are educational, based on documented scam patterns — they are not live Scam Detective reports on specific URLs. Scam Detective does not run continuous monitoring or real-time threat feeds, and nothing in this report is legal advice.

For journalists

Using these figures

You may quote this report with attribution to Scam Detective and a link to this page:

https://scam-detective5.acoco.ai/reports/scam-wave-2026-08-12

Each pattern above links to its full verdict page for background, and the August 9 edition covers the nine patterns documented the prior week (with the August 2 and July 30 editions before that). To check a specific URL mentioned in your coverage, the instant check is $2, one-time — no subscription.

About Scam Detective: Scam Detective is pay-per-use scam intelligence — an instant $2 URL risk check and a $29 brand impersonation audit, delivered in minutes, with no subscription. Spot the scam before it spots you.

Got a link that matches this week’s wave?

Paste it into the instant check — free risk signal in seconds, the full 0–100 report for $2, one-time.

Check a suspicious link — $2Browse all verdict pages