Scam Detective
Scam wave report · Edition 6 · August 19, 2026 · The script edition

This Week's Scam Wave, in Numbers

Four days after our August 15 edition documented this wave, not one of its 10 scam patterns has crested. So instead of counting a new wave, this edition goes one level deeper on the same ten and publishes what actually recognizes a scam on sight: the scripts, verbatim— each with its 5 red flags and 3-step response, rebuilt today onto every pattern’s verdict page.

Scam Detective research desk · Published
Got one of these in your hand right now?
Paste the link, number, or sender into the instant check — free risk signal in 60 seconds, the full 0–100 report for $2, one-time.
Check a suspicious link — $2
10
Patterns from the August 15 wave still circulating — none has crested
10
Verbatim scam scripts published for the first time — the exact words, line by line
4 days
Since our August 15 edition documented this wave — republished because it hasn't stopped
7 of 10
Open by impersonating someone you already trust — a brand, an agency, your boss, a match
4 of 10
Demand a fee before money that's supposedly yours can move — the fee is the entire scam
The scripts

The wave, word for word

01
Crypto-exchange “withdrawal alert” texts
Arrives via text message
“Coinbase: A withdrawal of 2.417 BTC ($284,113.06) was initiated on your account… If you did NOT authorize this, call Coinbase support immediately.”
No — scamFull script + verdict →
02
“Password expiring” emails with a QR code
Arrives via email
“IT Notification: Your Microsoft 365 password expires TODAY… scan the QR code below with your phone camera and confirm your credentials within 24 hours.”
No — phishingFull script + verdict →
03
Deepfake “boss” video-call payment orders
Arrives via video meeting
“Sorry to drop this on you with no warning — I'm about to board, so keep this between us for now. We are finalizing an acquisition. I need a transfer executed today.”
Verify it yourselfFull script + verdict →
04
Medicare “verify your number” cold calls
Arrives via phone call
“We are updating beneficiary records, and I need to confirm your Medicare number to keep your coverage active. Do you have your red, white, and blue card handy?”
Yes — scamFull script + verdict →
05
Fake “your computer is infected” popups
Arrives via browser popup
“WARNING: Windows has detected (5) viruses on this device… Do not close this window. Call Microsoft Support immediately.”
Yes — scamFull script + verdict →
06
Deepfake “famous doctor” supplement ads
Arrives via social video ad
“As a doctor, I have never said this on television — until now. Big Pharma does not want you to know about this one natural compound.”
No — scamFull script + verdict →
07
Timeshare “exit specialist” upfront fees
Arrives via cold call / mailer
“We already have a buyer interested in weeks at your property… To open your file we just need the processing fee today.”
Verify it yourselfFull script + verdict →
08
Dating-app “safety verification” sites
Arrives via dating app chat
“I'd love to meet, but I need to feel safe first. Can you verify yourself real quick? It's just a background-check site — it's totally free.”
Yes — scamFull script + verdict →
09
Marketplace “payment pending” screenshots
Arrives via marketplace dm
“Payment sent! Here's the confirmation screenshot. It shows pending until you mark the item shipped… check your spam folder.”
Yes — scamFull script + verdict →
10
“You won” prize notices with fees first
Arrives via phone call / email
“Congratulations! You've won two point five million dollars… Federal regulations require the taxes to be prepaid before we can release your check.”
Yes — scamFull script + verdict →
Analysis

Read ten scripts, learn five lessons

01
Every script runs on a clock.
“Fifteen minutes before it confirms,” “expires TODAY,” “within 24 hours,” “before we can release your check” — all ten scripts attach a deadline to the ask. Urgency isn't a mood; it's a load-bearing line, because the con collapses the moment you take an hour to verify.
02
The script always moves you somewhere safer for them.
Off the dating app and onto a “verification” page, off the work laptop and onto your phone, out of the exchange's app and onto a callback line, off the marketplace and into an email thread. Every costume change is a channel change — toward ground the real institution doesn't watch.
03
The ask is always small next to the promise.
A $50 “upgrade fee” against a pending payment, a processing fee against $2.5 million, a card number for a “free” safety check. The disproportion is the tell: legitimate processes never price a fortune at one small irreversible payment.
04
Secrecy is a scripted line, not a side effect.
“Keep this between us,” “do not discuss this with family or your bank,” “do not hang up” — the scripts know exactly who talks victims out of it, and they pre-empt those people by name. Any urgency that can't survive being said out loud is the scam confessing.
05
The costumes change; the verbs don't.
Confirm, verify, read back, scan, pay, ship. Ten different costumes — an exchange, an IT desk, a CFO, Medicare, Microsoft, a doctor, a buyer, a match, a prize office — running one short list of verbs. Learn the verbs and the costumes stop mattering.
For businesses · $29, one-time
Is someone impersonating your brand?

The costume in these scams — a lookalike domain, a copied storefront, a spoofed sender — is exactly what the brand impersonation audit researches for your company: lookalike domains, typosquats, and copycat sites trading on your name, each with evidence and a risk rating, plus a ready-to-send takedown-request template.

Audit my brand — $29
Free brand scan first — you only pay for the full audit.
For your readers

What to do now

1
Verify on a second channel you initiate. An alert from your exchange, a call from “Medicare,” a payment order from your boss — hang up, leave the meeting, close the tab, and confirm through a number or app you already have. No real institution objects to being double-checked; every script does.
2
Never pay to receive, release, or keep what's yours. A prize, a pending payment, your own coverage, a “safe wallet” — the legitimate version of every one is free and starts with you contacting them. A fee-first demand isn't a step in the process; it is the entire scam.
3
Check the exact words before you tap, scan, call, or pay. Paste the link, number, or sender into Scam Detective's instant check ($2, one-time) — and if the message you got reads like the scripts above, you already have your verdict.
Methodology

This report is published by Scam Detective's research desk. Unlike our five previous editions, this is not a net-new-pattern count: it deliberately revisits the same 10 patterns documented in our August 15, 2026 edition — all still circulating as of August 19 — and goes one level deeper, publishing the scripts those patterns run on, verbatim, with a 5-item red-flag checklist and a 3-step response for each. The figures above are counts of documented scam patterns and of the scripts published with them — not victim counts, loss estimates, or scans of customer-submitted URLs. Script language is drawn from documented versions of each pattern, cross-checked against public warnings from law-enforcement and consumer-protection agencies, including the FBI, the FTC, HHS-OIG, and state attorneys-general and consumer-protection offices; phone numbers shown in the quoted scripts are illustrative placeholders, not real scam lines.

Each pattern links to its full verdict page, rebuilt today with the complete script, the dated surge context, the checklist, and the steps. Verdicts are educational, based on documented scam patterns — they are not live Scam Detective reports on specific URLs. Scam Detective does not run continuous monitoring or real-time threat feeds, and nothing in this report is legal advice.

For journalists

Using these figures

You may quote this report — including the scripts — with attribution to Scam Detective and a link to this page:

https://scam-detective5.acoco.ai/reports/scam-wave-2026-08-19

Each pattern above links to its full verdict page — complete script, checklist, and steps. The August 15 edition documents this same wave's arrival in numbers; earlier waves are covered in the August 12, August 9, August 2, and July 30 editions. To check a specific URL mentioned in your coverage, the instant check is $2, one-time — no subscription.

About Scam Detective: Scam Detective is pay-per-use scam intelligence — an instant $2 URL risk check and a $29 brand impersonation audit, delivered in minutes, with no subscription. Spot the scam before it spots you.

Got a message that reads like these scripts?

Paste the link, number, or sender into the instant check — free risk signal in seconds, the full 0–100 report for $2, one-time.

Check a suspicious link — $2Browse all verdict pages