Cybersecurity Reach Foundation
Language
EnglishEspañol

Protect your community
from scams.

We share scam patterns with groups people already trust, and you pass them on. Partnership is free. Leave your organization name and a work email, and our partnerships team will set it up with you. There is no long form.

Join the partner programFreeSee the partner digest
Two Cybersecurity Reach Foundation volunteers presenting to a room of university students
One of our workshops, hosted in partnership with Baruch ISACA.
  • Free for every partner
  • 501(c)(3) nonprofit
  • Member of the Global Anti-Scam Alliance
  • English and Español

Our results

5.7M
Campaign impressions
30,000+
Monthly uses of our products
$0
Amount charged
Free for every partner

What partners get.

A weekly email, warnings you can share, and print materials you can use as they are. Take what fits the people you serve.

  1. Weekly Partner Digest

    • Aggregate scam patterns for your audience
    • Seniors, small businesses, young people, plus a general digest
    • Past issues for subscribers

  2. Warnings you can share

    • Dated figures from reports sent to us and our research
    • Ready-to-share warnings
    • Aggregate patterns only. Never victim or personal data

  3. Posters, handouts, and newsletter copy

    • Print and share them with your community
    • Add your organization's details in your browser
    • Nothing is uploaded

  4. A way to send reports back

    • Tell us the scams you are seeing
    • Help spread warnings to the people you serve
    • We set this up with you when we write back
Join the partner program →
Who we partner with

Groups people already trust.

Clubs and associations include sports, hobby, social, and community clubs, separate from schools. No security team is required.

  • Community organizations
  • Libraries
  • Senior services
  • Immigrant-serving groups
  • Faith groups
  • Nonprofits
  • Small and medium-sized businesses
  • Clubs and associations
  • Schools
  • Brands
  • Reporting partners
  • Consumer protection
  • Government and CSIRTs
  • Press
  • Funders

Aggregate patterns only

The digest is built from reports submitted to CSRF and from our research. It covers scam types and who is being targeted, including seniors, small businesses, and young people, plus a general digest.

We share aggregate patterns only. Never victim details or personal data. Figures are dated, and subscribers can read past issues.

Partner Digest

Keep your team and community a step ahead of scams.

Each week you get a short briefing on the scams reaching people like yours, so your staff know what to look for and your community hears about a scam before it reaches them. Every issue ends with a warning you can share the same day.

  • What happened last week

    How many scam reports came in, with the source and dates beside every number, and the few scams that came up most.

  • A part just for you

    The scams aimed at your people: seniors, small businesses, young people, plus a general digest.

  • What the fakes look like

    Examples of fake web addresses, broken on purpose so nobody can click them by accident.

  • A message you can send

    A short warning to copy into your newsletter, a text or a group chat.

Latest issue

Week of Oct 5 to 11, 2026

Fake fine and parcel-fee pages, Telegram job tests and lookalike shops led the week.

2,202
Reports received

About 3% above the prior week (approximate). 113 countries.

703
Rated high-risk by our checker

31.9% of reports.

Libraries, senior services, clubs, faith groups

Community organizations

  • Fake parking, traffic-fine and courier pages asked for a vehicle number or a small fee.

    What to doShare this warning:

    Message to share

    Got a message about an unpaid fine or parcel fee? Don't tap the link. Open the official app or website yourself, or check the link free at cybersecurityreach.org.

Schools and youth

  • Gaming: a fake Steam invite asks players to sign in; a site pushes a "free script executor".

    Fake websites we saw

    • s[.]team-d[.]my
    • exec-roblox[.]com

    What to doSign in only through the official app. Never install cheat tools.

  • Jobs: fake "initial assessment" pages move applicants to Telegram; watch-to-earn sites promise payouts.

    Fake websites we saw

    • initial-assessment[.]page[.]gd
    • initial-assessment[.]wuaze[.]com
    • paid2watch[.]co

    What to doReal employers don't hire via Telegram or charge fees.

Scams aimed at children

  • Fake game-item shops and "free code" pages aimed at young players asked for usernames and payment.

    What to doBuy game items only inside the official game.

    Message to share

    Kids: if a site offers free or cheap game items, ask a grown-up first. Real game items are sold only inside the game.

Retailers, delivery firms and small businesses

Brands and businesses

  • Retail: brands we saw impersonated include Flipkart and JioMart.

    Fake websites we saw

    • flipkartbigmillions[.]com
    • jiiomart[.]shop

    What to doAdd to brand monitoring.

  • Delivery and transport: brands we saw impersonated include Econt, EasyPark and India Post.

    Fake websites we saw

    • econt[.]expeditor[.]top
    • easypark[.]rfsdcgr[.]top
    • indiapost[.]uqob[.]top

    What to doTell customers where real tracking happens.

Reporting partners

  • 703 checks rated high-risk this week (see above).

    What to doIndicator packages available on request: TLP:AMBER, human-reviewed.

Where it's happening

No country reached 10 reports with a known lure target this week.

Public warnings you can link to

Past issues

Sep 28 to Oct 4, 2026Fake tax-refund and registry pages, copycat shops and fake game-item stores topped the reports.Read

Week of Sep 28 to Oct 4, 2026

Fake tax-refund and registry pages, copycat shops and fake game-item stores topped the reports.

2,134
Reports received

About 19% below the prior week. 110 countries.

775
Rated high-risk by our checker

36.3% of reports.

Libraries, senior services, clubs, faith groups

Community organizations

  • Fake tax-refund and property-registry pages asked for tax codes, owner details and set fees.

    What to doShare this warning:

    Message to share

    Got a message about a tax refund or a fee for an official certificate? Don't tap the link. Go to the agency's real website yourself, or check the link free at cybersecurityreach.org.

  • A store "anniversary gift" quiz promised prizes for a few answers.

    Fake websites we saw

    • promocvg[.]com

    What to doRemind members that real stores don't give prizes for quizzes.

Schools and youth

  • Jobs: recruitment pages sent applicants to Telegram for an "assessment"; task sites promised pay for reviews.

    Fake websites we saw

    • start-assessment[.]netlify[.]app
    • rate44[.]com

    What to doReal employers don't hire via Telegram or charge fees.

Scams aimed at children

  • Fake game-item shops and "free code" pages aimed at young players asked for usernames and payment.

    What to doBuy game items only inside the official game.

    Message to share

    Kids: if a site offers free or cheap game items, ask a grown-up first. Real game items are sold only inside the game.

Retailers, delivery firms and small businesses

Brands and businesses

  • Retail: brands we saw impersonated include Amazon; a car-sales site listed newer cars at unusually low prices.

    Fake websites we saw

    • amazonprimefurnitures[.]netlify[.]app
    • ttpmotorsukltd[.]co[.]uk

    What to doAdd to brand monitoring.

  • Small businesses: a fake government services portal asked shop operators to register and enter certificate numbers.

    Fake websites we saw

    • csc-egovernance[.]com

    What to doRegister only through the official portal you already use.

Reporting partners

  • 775 checks rated high-risk this week (see above).

    What to doIndicator packages available on request: TLP:AMBER, human-reviewed.

Where it's happening

No country reached 10 reports with a known lure target this week.

Public warnings you can link to
Sep 21 to 27, 2026Telegram job tests, fake shopping and work logins, and anniversary prize quizzes stood out.Read

Week of Sep 21 to 27, 2026

Telegram job tests, fake shopping and work logins, and anniversary prize quizzes stood out.

2,649
Reports received

About 24% below the prior week (approximate). 130 countries.

1,180
Rated high-risk by our checker

44.5% of reports.

Libraries, senior services, clubs, faith groups

Community organizations

  • Anniversary "giveaway" pages using Tim Hortons and M-Pesa names asked for quiz answers or a phone number.

    Fake websites we saw

    • timhortonssave[.]com
    • mpesa-special-bonus1827[.]fcg3d[.]top

    What to doShare this warning:

    Message to share

    Got a message saying you won a store or mobile-money anniversary prize? Don't tap the link or enter your number. Real companies announce prizes in their own app. Check a link free at cybersecurityreach.org.

  • A fake state lottery asked "winners" for bank details and a deposit.

    Fake websites we saw

    • keralaonamticket[.]online

    What to doRemind members that real lotteries never charge winners a fee.

Schools and youth

  • Jobs: recruitment notices sent applicants to Telegram for an "initial assessment"; at-home income sites asked for sign-ups and referral codes.

    Fake websites we saw

    • initialassessment[.]tiiny[.]site
    • nexorapaybd[.]com

    What to doReal employers don't hire via Telegram or charge fees.

  • Gaming: a fake Steam profile page and a Steam "gift card" page imitated the real site.

    Fake websites we saw

    • s[.]team-ow[.]com
    • steamcomrnuunity[.]com

    What to doSign in only through the official app.

Scams aimed at children

  • "Free Robux" reward pages asked young players for their username.

    What to doTell children that free Robux offers are always tricks.

    Message to share

    Kids: a website promising free Robux or game money is a trick. Never type your username or password there. Ask a grown-up first.

Retailers, delivery firms and small businesses

Brands and businesses

  • Retail: fake Myntra login pages on many throwaway domains asked for a registration number and password; a copycat Dedeman shop appeared in Romania.

    Fake websites we saw

    • wf1629[.]com
    • bht2537[.]com
    • rodedeman[.]com

    What to doAdd to brand monitoring.

  • Delivery and payments: a The Courier Guy checkout asked for a small card payment to release a parcel; a fake payout page asked freelancers for their card's security code.

    Fake websites we saw

    • proceed-payment[.]forum

    What to doTell customers you never ask for card details by link to release a parcel or a payment.

  • Workplace logins: fake SharePoint, IONOS and Zoom pages asked staff to sign in.

    Fake websites we saw

    • kalemrahue[.]cl
    • zoom-meeting-call-eight[.]vercel[.]app

    What to doRemind staff to open shared files only from the app they already use.

Reporting partners

  • 1,180 checks rated high-risk this week (see above).

    What to doIndicator packages available on request: TLP:AMBER, human-reviewed.

Where it's happening
  • India: Prize, job and government-service lures, including a fake state lottery and fake vehicle-fine (challan) apps. (11 reports)
Public warnings you can link to
Sep 14 to 20, 2026"Free money" grant pages, fake vehicle-fine sites and marketplace payout scams were the main patterns.Read

Week of Sep 14 to 20, 2026

"Free money" grant pages, fake vehicle-fine sites and marketplace payout scams were the main patterns.

3,499
Reports received

About 7% above the prior week (approximate).

803
Rated high-risk by our checker

22.9% of reports.

Libraries, senior services, clubs, faith groups

Community organizations

  • "Free money" pages promised grants and scholarships, then asked for bank and phone numbers and for the link to be shared on WhatsApp.

    Fake websites we saw

    • bit-ely[.]com
    • ongoing-grant[.]cfd

    What to doShare this warning:

    Message to share

    Got a link promising free money, a grant or a scholarship if you share it on WhatsApp? It's a trick to collect your details. Don't enter your bank or phone number. Check a link free at cybersecurityreach.org.

  • Fake vehicle-fine sites and apps imitated India's mParivahan service.

    Fake websites we saw

    • vehicle[.]mparivahan[.]autos
    • seva-mparivahan[.]vercel[.]app

    What to doRemind members to pay fines only on the official government site.

Schools and youth

  • Jobs: an online typing-job site showed made-up payouts to sign people up.

    Fake websites we saw

    • typing-assignments[.]online

    What to doReal employers don't charge fees or promise pay for simple typing.

Scams aimed at children

  • Copies of real Roblox player profiles on lookalike web addresses were sent to young players as "check my profile" links.

    What to doTell children to open Roblox only in the app, never from a link.

    Message to share

    Kids: if someone sends a link to their Roblox profile, don't open it. Find the player inside the Roblox app instead. Ask a grown-up if you're unsure.

Retailers, delivery firms and small businesses

Brands and businesses

  • Marketplaces: a fake OLX Romania page told a seller the buyer had paid, then asked for card details to receive the money.

    Fake websites we saw

    • olx[.]ro-trav[.]world

    What to doTell sellers that getting paid never needs their card details.

  • Logins: fake webmail and DANA e-wallet pages sent whatever people typed straight to a Telegram bot.

    Fake websites we saw

    • tfbrimo[.]gt[.]tc

    What to doRemind staff and customers to sign in only through the app they already use.

  • Retail: an Indomaret "anniversary gift" quiz ran on a lookalike domain.

    Fake websites we saw

    • indomaretrewawrd[.]com

    What to doAdd to brand monitoring.

Reporting partners

  • 9 reported pages showed our scanner a decoy Google search page instead of the scam, a sign they hide from security tools.

    What to doIndicator packages available on request: TLP:AMBER, human-reviewed.

Where it's happening

Not enough of this week's reports have a known lure target to show countries.

Public warnings you can link to
Join free

Ready to protect your community?

Tell us who you are and where to reach you. A person from our partnerships team will write back and set things up with you.

  • Two details to start. No long form.
  • A real person from our team writes back.
  • Free for every partner, always.

Start your partnership

Two details. That's all we need.

Your group, school, library, club or business.

Free for every partner. No fees, ever.