Credit card? Try regret card

Look at the image. That’s not the real Omaha Steaks. It’s from a fake site designed to steal your money.

It’s happening all over the internet right now. You see a great deal on name-brand stuff, a new smartwatch, fancy cookware, maybe some designer jeans, and you click. 

Everything looks real. The logos, the layout, even Apple and Google Pay are options. But it’s a scam, and now your credit card info is out there.

A massive scam targeting you

Silent Push analysts uncovered thousands of fake websites posing as trusted stores like Apple, Michael Kors, Harbor Freight, REI, Omaha Steaks and more. There’s a massive global scam operation that uses real payment methods on fake checkout pages. Like thousands-of-sites massive.

The twist? The criminals, likely based in China, take your payment and ghost you. No product. No refund. No customer service. Total fake-out.

They cloned sites

They’re copying everything. Logos, layouts, even the checkout process, so much so that you’d swear you were on the real REI website while buying $10 trail shoes. 

But there were some sites with mismatched logos and products. A Harbor Freight clone showed Wrangler jeans.

Even worse: These scam sites are popping up faster than hosting companies can take them down. Many are still up right now.

Don’t fall for it 

  • Slow down and read. Misspelled words, weird domain names like “nordstromltems.com” (that’s an L, not an I) or random products are huge red flags.
  • Use virtual cards or a credit card. Not a debit card. You need that fraud protection.
  • Stick to the real URL. Skip the sketchy ads. Always type the URL in yourself.
  • If the deal looks too good, it probably is a scam. Period.

Continue reading

When your stock is actually a scam

I don’t mean to be a downer, but I need to warn you that tens of thousands of Americans, folks just like you, are getting duped into buying worthless Chinese stocks. 

The Wall Street Journal (paywall link) found even seasoned investors are falling for this scam, losing big bucks in the blink of an eye. 

Continue reading

🚨 FBI warns of new phone scam: Criminals are posing as federal agents, telling people they’re about to be arrested unless they pay up. They’re spoofing phone numbers so the calls look like it’s a real government agency asking for money, gift cards or crypto. Hang up and report it.

1 minute

That’s how much footage is mysteriously missing from Jeffrey Epstein’s jail video. The DOJ dropped 11 hours of grainy surveillance and still managed to skip the one minute everyone cares about. Conspiracy thriller writers, congrats, the feds just gave you your cold open. Oh, and it wasn’t just one, but two jail cams that “malfunctioned” near Epstein’s cell.

Stop using 2FA text codes already

Today’s a short but super important security tip. If you’re still getting login codes via text on your phone, stop. That’s so 2010 and one of the biggest mistakes people make when it comes to online security.

Sure, it’s convenient. You type in your password, get a six-digit code via SMS, enter it, and you’re in. But here’s the problem: Hackers have figured out how to steal those codes.

Continue reading

🚨 Prime Day scams to watch for: The big sale’s here, and so are the scammers! Common tricks? Fake order confirmations, account issue alerts, fishy social media deals and “package delayed” warnings. These land in your inbox or texts to push you into clicking shady links. Here’s a link to the best deals under $50.

🧠 This is one of the smartest things you can do to protect your identity. Don’t wait till it’s too late, sign up for NordProtect today and get 65% off. Bet you save a ton of money making the switch!

30 seconds

That’s all it took to spin up a fake Okta login page with generative AI.

Have mandatory cybersecurity classes at work? New research from Purdue found anti-phishing training may make workers worse at spotting scams. Turns out, binge-watching security videos doesn’t build instincts, it builds false confidence. One group even clicked more after “interactive” training. That’s right: Your IT team’s monthly guilt-trap quiz might be actively hurting.

TSA gets it right: Gold Star families now have free PreCheck, plus a discount for military spouses, and TSA is adding expedited lanes in 10 cities. It’s part of their July 4th rollout that finally makes airport lines suck a little less to thank families for their service to our country.

🩸 The FBI’s waving red flags: Scammers have a new angle. They’re impersonating health fraud investigators to steal sensitive data. They’ll slide into your texts or inbox asking for health info or fake reimbursements. Watch out for phone calls, too. Don’t bite, it’s all phishing designed to use your medical ID for something or someone else, along with stealing your cash. Have an older family member? Warn them about this one.

Microsoft Authenticator changes: It’s ditching password management. At the end of this month, the autofill password feature bites the dust. And by August? Say goodbye to accessing saved passwords in the app at all.  I use NordProtect for my password manager.

Crypto wallet trapdoor: Just do yourself a favor and don’t download any crypto extensions. Why? Over 40 sketchy extensions spoofing legit crypto wallets flooded Firefox’s store, all rigged to steal seed phrases and passwords. Thieves copied open-source code from Coinbase, MetaMask and co., then slid in exfil tools hiding behind glossy logos and fake reviews. 

Spider’s in the server: Qantas just revealed a data breach that hit 6 million customer records. No financial info leaked (phew), but names, birthdays and frequent flier numbers got scooped. The culprit might be Scattered Spider, the cybercrime crew currently doing a full tour of the aviation sector. Expect more airlines joining the hit list.

🚨 Booking.com warning: Speaking of travel, scammers will email or message you claiming your reservation is at risk. They’ll say it’s urgent and you’ll lose your spot unless you click a link to “verify” or “pre-authorize” your card. Don’t fall for it. If you’re worried, contact customer service.

🖨️ Oh, Brother! Millions of Brother printers have default passwords that hackers can reverse-engineer using the serial number. Brother can’t fully fix it via firmware. For the love of toner, change the admin password so your printer doesn’t get hacked.

Spies on the road: Washington State’s using motion data from your phone — yep, the same one in your car’s cupholder — to find speeding hot spots. A Michelin-backed system anonymously logs braking and acceleration, then tips off the State Patrol. The upside? Fewer crashes. The downside? Your commute just joined the surveillance state. Not tracked personally, but just enough to ruin your shortcut.

📞 Press 1 to scream: This drives me nuts, and now we know it’s on purpose. The customer service endless holds. The loops. The “wrong department” reroutes. Turns out it’s not a glitch, it’s the point (paywall link). These systems are designed to wear you down until you give up and hang up. You’re not crazy. You’re just trapped in the admin-industrial complex. 

🤖 Dirt = debt: Watch out the next time you rent a car. Hertz renters are getting slapped with $195 to $440 charges for microscopic car damage, like a wheel scuff or tiny dent, caught by new AI scanners at drop-off. PSA: Take a video of the entire car before you drive off the lot.

🎭 Who owns your face? Get this. Denmark’s rewriting copyright law to give people ownership over their face, voice and vibe. Yes, really. If a deepfake of you pops up without consent, you can make platforms take it down. It’s the first law of its kind in Europe, and the U.S. might want to take notes. This will be ID theft in 2035.