Cybersecurity Reach Foundation

Proteja a su comunidad
de las estafas.

Compartimos patrones de estafas con grupos en los que la gente ya confía, y usted los comparte. La colaboración es gratuita. Deje el nombre de su organización y un correo de trabajo, y nuestro equipo de alianzas lo prepara con usted. No hay un formulario largo.

Dos voluntarios de la Cybersecurity Reach Foundation dando una charla a un aula de estudiantes universitarios
Uno de nuestros talleres, en colaboración con Baruch ISACA.
  • Gratis para todos los aliados
  • Organización sin fines de lucro 501(c)(3)
  • Miembros de la Global Anti-Scam Alliance
  • Español e inglés

Nuestros resultados

5,7 M
Impresiones de campaña
30.000+
Usos mensuales de nuestros productos
$0
Importe cobrado
Gratis para todos los aliados

Qué reciben los aliados.

Un correo semanal, avisos para compartir y materiales para imprimir. Use lo que le sirva a la gente a la que atiende.

  1. Boletín semanal para aliados

    • Patrones agregados de estafas para su público
    • Mayores, pequeños negocios, gente joven, y un boletín general
    • Números anteriores para quienes están suscritos
  2. Avisos para compartir

    • Cifras con fecha, de reportes que nos envían y de nuestra investigación
    • Avisos listos para compartir
    • Solo patrones agregados. Nunca datos de víctimas ni datos personales
  3. Carteles, folletos y textos de boletín

    • Imprímalos y compártalos con su comunidad
    • Añada los datos de su organización en el navegador
    • No se sube nada
  4. Una vía para enviar reportes

    • Cuéntenos las estafas que está viendo
    • Ayude a difundir los avisos entre la gente a la que sirve
    • Lo preparamos con usted cuando le escribamos
Unirse al programa →
Con quién nos asociamos

Grupos en los que la gente ya confía.

Los clubes y asociaciones incluyen clubes deportivos, de aficiones, sociales y comunitarios, aparte de las escuelas. No hace falta un equipo de seguridad.

  • Organizaciones comunitarias
  • Bibliotecas
  • Servicios para mayores
  • Grupos que atienden a inmigrantes
  • Grupos de fe
  • Organizaciones sin fines de lucro
  • Pequeñas y medianas empresas
  • Clubes y asociaciones
  • Escuelas
  • Marcas
  • Aliados de reporte
  • Protección al consumidor
  • Gobierno y CSIRT
  • Prensa
  • Financiadores

Solo patrones agregados

El boletín se arma con reportes enviados a CSRF y con nuestra investigación. Cubre tipos de estafa y a quién van dirigidas, incluidas personas mayores, pequeños negocios y gente joven, más un boletín general.

Compartimos solo patrones agregados. Nunca datos de víctimas ni datos personales. Las cifras llevan fecha, y quienes están suscritos pueden leer números anteriores.

Boletín para aliados

Mantenga a su equipo y su comunidad un paso adelante de las estafas.

Cada semana recibe un informe breve sobre las estafas que están llegando a gente como la suya, para que su equipo sepa qué buscar y su comunidad se entere de una estafa antes de que le llegue. Cada número termina con un aviso que puede compartir el mismo día.

  • Qué pasó la semana pasada

    Cuántos reportes de estafa llegaron, con la fuente y las fechas junto a cada cifra, y las estafas más frecuentes.

  • Una parte para usted

    Las estafas dirigidas a su gente: personas mayores, pequeños negocios, gente joven, más un boletín general.

  • Cómo se ven los sitios falsos

    Ejemplos de direcciones web falsas, escritas a propósito para que nadie pueda abrirlas por error.

  • Un mensaje para compartir

    Un aviso breve para copiar en su boletín, un mensaje de texto o un chat de grupo.

Último número

Por ahora los boletines se publican en inglés.

Semana del 5 al 11 de oct de 2026

Fake fine and parcel-fee pages, Telegram job tests and lookalike shops led the week.

2202
Reports received

About 3% above the prior week (approximate). 113 countries.

703
Rated high-risk by our checker

31.9% of reports.

Libraries, senior services, clubs, faith groups

Community organizations
  • Fake parking, traffic-fine and courier pages asked for a vehicle number or a small fee.

    Qué hacerShare this warning:

    Mensaje para compartir

    Got a message about an unpaid fine or parcel fee? Don't tap the link. Open the official app or website yourself, or check the link free at cybersecurityreach.org.

Schools and youth
  • Gaming: a fake Steam invite asks players to sign in; a site pushes a "free script executor".

    Sitios falsos que vimos

    • s[.]team-d[.]my
    • exec-roblox[.]com

    Qué hacerSign in only through the official app. Never install cheat tools.

  • Jobs: fake "initial assessment" pages move applicants to Telegram; watch-to-earn sites promise payouts.

    Sitios falsos que vimos

    • initial-assessment[.]page[.]gd
    • initial-assessment[.]wuaze[.]com
    • paid2watch[.]co

    Qué hacerReal employers don't hire via Telegram or charge fees.

Scams aimed at children
  • Fake game-item shops and "free code" pages aimed at young players asked for usernames and payment.

    Qué hacerBuy game items only inside the official game.

    Mensaje para compartir

    Kids: if a site offers free or cheap game items, ask a grown-up first. Real game items are sold only inside the game.

Retailers, delivery firms and small businesses

Brands and businesses
  • Retail: brands we saw impersonated include Flipkart and JioMart.

    Sitios falsos que vimos

    • flipkartbigmillions[.]com
    • jiiomart[.]shop

    Qué hacerAdd to brand monitoring.

  • Delivery and transport: brands we saw impersonated include Econt, EasyPark and India Post.

    Sitios falsos que vimos

    • econt[.]expeditor[.]top
    • easypark[.]rfsdcgr[.]top
    • indiapost[.]uqob[.]top

    Qué hacerTell customers where real tracking happens.

Reporting partners
  • 703 checks rated high-risk this week (see above).

    Qué hacerIndicator packages available on request: TLP:AMBER, human-reviewed.

Dónde está pasando

No country reached 10 reports with a known lure target this week.

Avisos públicos que puede enlazar

Números anteriores

28 de sep al 4 de oct de 2026Fake tax-refund and registry pages, copycat shops and fake game-item stores topped the reports.Leer

Semana del 28 de sep al 4 de oct de 2026

Fake tax-refund and registry pages, copycat shops and fake game-item stores topped the reports.

2134
Reports received

About 19% below the prior week. 110 countries.

775
Rated high-risk by our checker

36.3% of reports.

Libraries, senior services, clubs, faith groups

Community organizations
  • Fake tax-refund and property-registry pages asked for tax codes, owner details and set fees.

    Qué hacerShare this warning:

    Mensaje para compartir

    Got a message about a tax refund or a fee for an official certificate? Don't tap the link. Go to the agency's real website yourself, or check the link free at cybersecurityreach.org.

  • A store "anniversary gift" quiz promised prizes for a few answers.

    Sitios falsos que vimos

    • promocvg[.]com

    Qué hacerRemind members that real stores don't give prizes for quizzes.

Schools and youth
  • Jobs: recruitment pages sent applicants to Telegram for an "assessment"; task sites promised pay for reviews.

    Sitios falsos que vimos

    • start-assessment[.]netlify[.]app
    • rate44[.]com

    Qué hacerReal employers don't hire via Telegram or charge fees.

Scams aimed at children
  • Fake game-item shops and "free code" pages aimed at young players asked for usernames and payment.

    Qué hacerBuy game items only inside the official game.

    Mensaje para compartir

    Kids: if a site offers free or cheap game items, ask a grown-up first. Real game items are sold only inside the game.

Retailers, delivery firms and small businesses

Brands and businesses
  • Retail: brands we saw impersonated include Amazon; a car-sales site listed newer cars at unusually low prices.

    Sitios falsos que vimos

    • amazonprimefurnitures[.]netlify[.]app
    • ttpmotorsukltd[.]co[.]uk

    Qué hacerAdd to brand monitoring.

  • Small businesses: a fake government services portal asked shop operators to register and enter certificate numbers.

    Sitios falsos que vimos

    • csc-egovernance[.]com

    Qué hacerRegister only through the official portal you already use.

Reporting partners
  • 775 checks rated high-risk this week (see above).

    Qué hacerIndicator packages available on request: TLP:AMBER, human-reviewed.

Dónde está pasando

No country reached 10 reports with a known lure target this week.

Avisos públicos que puede enlazar
21 al 27 de sep de 2026Telegram job tests, fake shopping and work logins, and anniversary prize quizzes stood out.Leer

Semana del 21 al 27 de sep de 2026

Telegram job tests, fake shopping and work logins, and anniversary prize quizzes stood out.

2649
Reports received

About 24% below the prior week (approximate). 130 countries.

1180
Rated high-risk by our checker

44.5% of reports.

Libraries, senior services, clubs, faith groups

Community organizations
  • Anniversary "giveaway" pages using Tim Hortons and M-Pesa names asked for quiz answers or a phone number.

    Sitios falsos que vimos

    • timhortonssave[.]com
    • mpesa-special-bonus1827[.]fcg3d[.]top

    Qué hacerShare this warning:

    Mensaje para compartir

    Got a message saying you won a store or mobile-money anniversary prize? Don't tap the link or enter your number. Real companies announce prizes in their own app. Check a link free at cybersecurityreach.org.

  • A fake state lottery asked "winners" for bank details and a deposit.

    Sitios falsos que vimos

    • keralaonamticket[.]online

    Qué hacerRemind members that real lotteries never charge winners a fee.

Schools and youth
  • Jobs: recruitment notices sent applicants to Telegram for an "initial assessment"; at-home income sites asked for sign-ups and referral codes.

    Sitios falsos que vimos

    • initialassessment[.]tiiny[.]site
    • nexorapaybd[.]com

    Qué hacerReal employers don't hire via Telegram or charge fees.

  • Gaming: a fake Steam profile page and a Steam "gift card" page imitated the real site.

    Sitios falsos que vimos

    • s[.]team-ow[.]com
    • steamcomrnuunity[.]com

    Qué hacerSign in only through the official app.

Scams aimed at children
  • "Free Robux" reward pages asked young players for their username.

    Qué hacerTell children that free Robux offers are always tricks.

    Mensaje para compartir

    Kids: a website promising free Robux or game money is a trick. Never type your username or password there. Ask a grown-up first.

Retailers, delivery firms and small businesses

Brands and businesses
  • Retail: fake Myntra login pages on many throwaway domains asked for a registration number and password; a copycat Dedeman shop appeared in Romania.

    Sitios falsos que vimos

    • wf1629[.]com
    • bht2537[.]com
    • rodedeman[.]com

    Qué hacerAdd to brand monitoring.

  • Delivery and payments: a The Courier Guy checkout asked for a small card payment to release a parcel; a fake payout page asked freelancers for their card's security code.

    Sitios falsos que vimos

    • proceed-payment[.]forum

    Qué hacerTell customers you never ask for card details by link to release a parcel or a payment.

  • Workplace logins: fake SharePoint, IONOS and Zoom pages asked staff to sign in.

    Sitios falsos que vimos

    • kalemrahue[.]cl
    • zoom-meeting-call-eight[.]vercel[.]app

    Qué hacerRemind staff to open shared files only from the app they already use.

Reporting partners
  • 1,180 checks rated high-risk this week (see above).

    Qué hacerIndicator packages available on request: TLP:AMBER, human-reviewed.

Dónde está pasando
  • India: Prize, job and government-service lures, including a fake state lottery and fake vehicle-fine (challan) apps. (11 reportes)
Avisos públicos que puede enlazar
14 al 20 de sep de 2026"Free money" grant pages, fake vehicle-fine sites and marketplace payout scams were the main patterns.Leer

Semana del 14 al 20 de sep de 2026

"Free money" grant pages, fake vehicle-fine sites and marketplace payout scams were the main patterns.

3499
Reports received

About 7% above the prior week (approximate).

803
Rated high-risk by our checker

22.9% of reports.

Libraries, senior services, clubs, faith groups

Community organizations
  • "Free money" pages promised grants and scholarships, then asked for bank and phone numbers and for the link to be shared on WhatsApp.

    Sitios falsos que vimos

    • bit-ely[.]com
    • ongoing-grant[.]cfd

    Qué hacerShare this warning:

    Mensaje para compartir

    Got a link promising free money, a grant or a scholarship if you share it on WhatsApp? It's a trick to collect your details. Don't enter your bank or phone number. Check a link free at cybersecurityreach.org.

  • Fake vehicle-fine sites and apps imitated India's mParivahan service.

    Sitios falsos que vimos

    • vehicle[.]mparivahan[.]autos
    • seva-mparivahan[.]vercel[.]app

    Qué hacerRemind members to pay fines only on the official government site.

Schools and youth
  • Jobs: an online typing-job site showed made-up payouts to sign people up.

    Sitios falsos que vimos

    • typing-assignments[.]online

    Qué hacerReal employers don't charge fees or promise pay for simple typing.

Scams aimed at children
  • Copies of real Roblox player profiles on lookalike web addresses were sent to young players as "check my profile" links.

    Qué hacerTell children to open Roblox only in the app, never from a link.

    Mensaje para compartir

    Kids: if someone sends a link to their Roblox profile, don't open it. Find the player inside the Roblox app instead. Ask a grown-up if you're unsure.

Retailers, delivery firms and small businesses

Brands and businesses
  • Marketplaces: a fake OLX Romania page told a seller the buyer had paid, then asked for card details to receive the money.

    Sitios falsos que vimos

    • olx[.]ro-trav[.]world

    Qué hacerTell sellers that getting paid never needs their card details.

  • Logins: fake webmail and DANA e-wallet pages sent whatever people typed straight to a Telegram bot.

    Sitios falsos que vimos

    • tfbrimo[.]gt[.]tc

    Qué hacerRemind staff and customers to sign in only through the app they already use.

  • Retail: an Indomaret "anniversary gift" quiz ran on a lookalike domain.

    Sitios falsos que vimos

    • indomaretrewawrd[.]com

    Qué hacerAdd to brand monitoring.

Reporting partners
  • 9 reported pages showed our scanner a decoy Google search page instead of the scam, a sign they hide from security tools.

    Qué hacerIndicator packages available on request: TLP:AMBER, human-reviewed.

Dónde está pasando

Not enough of this week's reports have a known lure target to show countries.

Avisos públicos que puede enlazar
Únase gratis

¿Listo para proteger a su comunidad?

Díganos quién es y dónde escribirle. Una persona de nuestro equipo de alianzas le responderá y lo preparará con usted.

  • Dos datos para empezar. Sin formularios largos.
  • Una persona de nuestro equipo le escribe.
  • Gratis para todos los aliados, siempre.

Comience su alianza

Dos datos. Es todo lo que necesitamos.

Su grupo, escuela, biblioteca, club o negocio.

Gratis para todos los aliados. Sin costo, nunca.