Scam Detective
Scam wave report · Edition 7 · August 28, 2026 · 8 net-new patterns

This Week's Scam Wave, in Numbers

This week’s wave charges admission to money that doesn’t exist and holds what you already own as leverage: fake iCloud storage warnings with 48-hour deletion deadlines, government grant cold calls, hostage-load movers who double the price at the truck, and Cash App money flips — eight net-new patterns, each verified against public warnings and linked to its full verdict page with the exact script.

Scam Detective research desk · Published
Got one of these in your hand right now?
Paste the link, number, or sender into the instant check — free risk signal in 60 seconds, the full 0–100 report for $2, one-time.
Check a suspicious link — $2
8
Net-new scam patterns documented this edition — each verified against public warnings
57
Patterns documented across the series — 49 net-new in editions 1–5, plus this edition's 8
3 of 8
Charge admission to money that doesn't exist — a grant, an inheritance, a “flipped” $100
2 of 8
Hold something of yours as leverage — your household goods, your car's shipping slot
3 of 8
Wear a platform's costume to steal the account behind it — Apple, a grant office, Google
The patterns

The wave, word for word

01
“iCloud storage is full” warnings with a deletion deadline
Arrives via email or popup
“Your iCloud storage is full… ACTION REQUIRED: Your files will be permanently deleted in 48 hours if you do not upgrade.”
Check before you clickFull script + verdict →
02
“You qualify for a government grant” calls and messages
Arrives via call, text, or social dm
“I'm calling from the federal grants department — our records show you qualify for a $9,400 personal grant.”
Yes — scamFull script + verdict →
03
Google business listing “urgent issue” robocalls
Arrives via robocall
“This is an urgent notification regarding your Google Business listing on Google Maps… your listing is not verified and may be removed.”
No — not GoogleFull script + verdict →
04
Moving-company hostage loads
Arrives via moving day, at the truck
“Your load came in way over the estimate. The new total is double — cash, Zelle, or a money order, today.”
A documented conFull script + verdict →
05
Auto-transport “reservation deposit” cons
Arrives via quote site or phone call
“We can ship your car for $650 — a locked-in, guaranteed rate. To reserve your spot we just need a $250 deposit today.”
Check the patternFull script + verdict →
06
Cash App “money flip” offers
Arrives via instagram or facebook dm
“I'm blessing 10 people today — turn $100 into $1,000 in 30 minutes. Cash App only. DM me your receipt.”
No — scamFull script + verdict →
07
Inheritance “next of kin” letters and emails
Arrives via email or postal mail
“I am personal attorney to the late Mr. ——, who shares your family name. He left $14.7 million with no next of kin. I traced you.”
No — scamFull script + verdict →
08
“Is this you in this video?” Facebook messages
Arrives via messenger, from a friend
“is this you in this video?? 😂 [link] — You must log in to Facebook to watch this video.”
Yes — don't clickFull script + verdict →
Analysis

Eight costumes, five lessons

01
Three of this wave's scams charge admission to money that isn't real.
A $250 “processing fee” against a $9,400 grant, $2,800 in “probate fees” against a $14.7 million inheritance, a $100 send against a $1,000 “flip.” The disproportion is the confession: no legitimate process prices a fortune at one small, irreversible payment.
02
The newest leverage is your own stuff.
The hostage-load mover and the bait-and-switch auto transporter run the same engine: take possession of what you own — or of the schedule you can't miss — then renegotiate. The lowball quote was never the price; it was the bait that put your belongings on their truck.
03
The costume is now the credential.
The fake iCloud page, the fake “Google listing specialist,” and the fake Facebook login aren't selling anything — they're harvesting the account itself. When the “fix” for a platform problem is typing that platform's password into a page a message handed you, the costume is the payload.
04
A hacked friend is the new cold call.
The “is this you?” video and the “I just got my grant” DM arrive from accounts you trust — because those accounts were stolen by the same message. Trust is now the delivery mechanism: any out-of-character offer or link from a friend is a reason to call them, not click.
05
Every script still exits down the same payment rails.
Cash, Zelle, wires, gift cards, instant transfers — eight costumes, one short list of channels your bank can't pull back. The channel is chosen before the costume is: anything insisting on irreversible payment is telling you what it is.
For businesses · $29, one-time
Is someone impersonating your brand?

The costume in these scams — a lookalike domain, a copied storefront, a spoofed sender — is exactly what the brand impersonation audit researches for your company: lookalike domains, typosquats, and copycat sites trading on your name, each with evidence and a risk rating, plus a ready-to-send takedown-request template.

Audit my brand — $29
Free brand scan first — you only pay for the full audit.
For your readers

What to do now

1
Verify the costume where the costume actually lives. An iCloud warning is real or not in Settings; a listing problem shows inside your Google account; a mover's record lives in FMCSA's database. Never verify through the message that found you — the message is the crime scene.
2
Refuse both shapes of fake money. A fee to receive money you're owed — a grant, an inheritance, a shipment release — and a payment that “multiplies.” Neither is a step in a real process; each is the entire scam wearing a process costume.
3
Check the exact link, number, or sender before it costs you. Paste it into Scam Detective's instant check ($2, one-time) — and if the message in your hand reads like the scripts above, you already have your verdict.
Methodology

This report is published by Scam Detective's research desk. The 8 patterns above are net-new for this edition: each was selected from the scam questions people are panic-searching right now, verified by live web research against public documentation — including federal and state consumer-protection warnings (FMCSA's Operation Protect Your Move and the DOT Office of Inspector General for the moving patterns; Cash App's own fraud guidance for money flips; security-press and platform documentation for the Apple, Google, and Facebook costumes) — and deduplicated against all 87 verdict pages previously published across this series and the /answers index. The figures above are counts of documented scam patterns — not victim counts, loss estimates, or scans of customer-submitted URLs. Script language is drawn from documented versions of each pattern; phone numbers, dollar figures, and names shown in the quoted scripts are illustrative, not real scam lines.

Each pattern links to its full verdict page, built today with the complete script, the dated surge context, a 5-item red-flag checklist, and a 3-step response. Verdicts are educational, based on documented scam patterns — they are not live Scam Detective reports on specific URLs. Scam Detective does not run continuous monitoring or real-time threat feeds, and nothing in this report is legal advice.

For journalists

Using these figures

You may quote this report — including the scripts — with attribution to Scam Detective and a link to this page:

https://scam-detective5.acoco.ai/reports/scam-wave-2026-08-28

Each pattern above links to its full verdict page — complete script, checklist, and steps. Earlier waves are covered in the August 19, August 15, August 12, August 9, August 2, and July 30 editions. To check a specific URL mentioned in your coverage, the instant check is $2, one-time — no subscription.

About Scam Detective: Scam Detective is pay-per-use scam intelligence — an instant $2 URL risk check and a $29 brand impersonation audit, delivered in minutes, with no subscription. Spot the scam before it spots you.

Got a message that reads like these scripts?

Paste the link, number, or sender into the instant check — free risk signal in seconds, the full 0–100 report for $2, one-time.

Check a suspicious link — $2Browse all verdict pages