# Digital fraud and evolving cybersecurity risks > Live situation record from CLSTR: https://clstr.news/situations/digital-fraud-and-cybersecurity-risks > Updated: 2026-09-09T13:26:21.000Z. Sources: 78. Developments: 18. Authorities and cybersecurity experts continue to warn of evolving digital fraud schemes that prioritize psychological manipulation over technical banking vulnerabilities. Criminals frequently use digital channels to perform classic scams, tricking individuals into surrendering sensitive credentials or tokens. Recent trends show a strategic shift toward using stolen legitimate credentials to evade security controls, with password guessing accounting for 34.8% of detected attack indicators according to Kaspersky. Newer tactics include smishing—fraudulent text messages—targeting users of major platforms like Netflix, Amazon, and Facebook. These scams utilize urgent, false security alerts regarding unauthorized account access to induce panic, directing victims to fake websites designed to harvest usernames and passwords. In response to these rising threats, consumer protection organizations are promoting preventative measures such as two-factor authentication, complex passwords, and VPNs. In Germany, the Verbraucherzentrale has introduced digital tools to assist consumers, including a ‘Fakeshop-Finder’ to analyze the legitimacy of online retailers and a ‘Fake-Check Geldanlage’ to help identify high-risk investment offers, such as fraudulent trading platforms or suspicious crypto-investments. Technical vulnerabilities also persist in payment methods. The Central Bank of Chile has highlighted increased risks for debit cards, noting they offer a minimal margin for reaction compared to credit cards because funds are drawn directly from accounts. Furthermore, ESET researcher Mario Micucci warns that generative AI is making digital evidence, such as screenshots, increasingly unreliable. As attackers bypass traditional methods, the industry is seeing a rise in ‘Phishing-as-a-Service’ and ‘quishing’ (QR code phishing). ## Claims - Cybercriminals are using psychological manipulation to steal sensitive data. (corroborated by 4 sources) - Scammers send messages impersonating known companies regarding deliveries, pending payments, or account issues. (corroborated by 4 sources) - Fraudulent links in messages lead to fake pages designed to steal user data. (corroborated by 4 sources) - Criminals use phone calls to impersonate bank or company employees to request security codes. (corroborated by 4 sources) - Fraudulent links in messages can lead to fake pages designed to steal user data. (corroborated by 4 sources) - Legitimate banks and companies do not request full passwords or security codes via unexpected calls. (corroborated by 4 sources) - The ‘Request Payment’ feature was designed for easy money requests between users but is being exploited by scammers as a ‘deposit trap’. (corroborated by 3 sources) - Victims are increasingly reporting similar fraud incidents on social media platforms. (corroborated by 3 sources) - Scammers target individuals listing vehicles or real estate for sale or rent online. (corroborated by 3 sources) - Fraudsters pose as government officials working out of town to establish trust with victims. (corroborated by 3 sources) - When the victim approves the notification, money is transferred from the victim's account to the fraudster. (corroborated by 3 sources) - The scam involves the fraudster entering the victim's own IBAN into the ‘Request Payment’ field instead of their own. (corroborated by 2 sources) ## Timeline ### 2026-09-09: Cybersecurity alert: Smishing scams targeting major online accounts Cybercriminals are using smishing scams to steal credentials from Netflix, Amazon, and Facebook users via fake security alerts sent through text messages. 2 sources. https://clstr.news/cluster/cybersecurity-alert-smishing-scams-targeting-major-online-accounts ### 2026-09-04: Greek Cyber Security Center warns of sophisticated digital fraud The Greek Cyber Security Center warns of increasingly sophisticated digital fraud, noting that AI is enhancing the effectiveness of phishing, smishing, and social engineering attacks. 2 sources. https://clstr.news/cluster/greek-cyber-security-center-warns-of-sophisticated-digital-fraud ### 2026-09-04: Digital security: Tools and tips to combat rising online fraud Experts and consumer protection agencies are providing tools and advice to combat rising digital threats, including phishing, fake online shops, and fraudulent investment schemes. 6 sources. https://clstr.news/cluster/digital-security-tools-and-tips-to-combat-rising-online-fraud ### 2026-08-31: Cybercriminals use QR code phishing to target banking data Criminals are using ‘quishing’—phishing via QR codes—to redirect users to fake banking and payment sites to steal sensitive data and credentials. 2 sources. https://clstr.news/cluster/cybercriminals-use-qr-code-phishing-to-target-banking-data ### 2026-08-27: Cybersecurity experts warn of rising digital fraud and credential theft Cybersecurity firms ESET and Kaspersky warn of rising digital risks, including the ease of forging screenshots via AI and the increasing effectiveness of credential theft and password guessing attacks. 4 sources. https://clstr.news/cluster/cybersecurity-experts-warn-of-rising-digital-fraud-and-credential-theft ### 2026-08-25: Android NFC attacks increase by 188% due to WindRelay malware Android users face a 188% increase in NFC-based attacks, driven by the WindRelay malware which intercepts real-time bank card data via social engineering and SpyNote spyware. 2 sources. https://clstr.news/cluster/android-nfc-attacks-increase-by-188-due-to-windrelay-malware ### 2026-08-25: ESET warns of rising quishing attacks using QR codes ESET warns of rising ‘quishing’ attacks, where criminals use QR codes to hide malicious links and bypass security filters by moving interactions to personal mobile devices. 4 sources. https://clstr.news/cluster/eset-warns-of-rising-quishing-attacks-using-qr-codes ### 2026-08-22: ESET warns of rising ‘quishing’ attacks using malicious QR codes Cybercriminals are using ‘quishing’—phishing via QR codes—to bypass corporate security filters and target employees' mobile devices, according to ESET. 3 sources. https://clstr.news/cluster/cybersecurity-experts-warn-of-rising-qr-code-phishing-attacks-1 ### 2026-08-21: Cybersecurity researchers identify new macOS and Android malware threats New malware threats have been identified targeting macOS via AmnesiaStealer and Android via a WindRelay and SpyNote combination used in NFC-based payment fraud. 3 sources. https://clstr.news/cluster/cybersecurity-researchers-identify-new-macos-and-android-malware-threats ### 2026-08-20: Digital fraud waves target motorists and banking users in Denmark and Norway New digital fraud waves are targeting motorists in Denmark with fake parking fines and Norwegian citizens through sophisticated screen-sharing scams designed to bypass traditional banking security. 3 sources. https://clstr.news/cluster/digital-fraud-waves-target-motorists-and-banking-users-in-denmark-and-norway ### 2026-08-18: Cybercriminals target young adults through institutional impersonation Cybercriminals are increasingly targeting young adults by impersonating public institutions via SMS and calls, often exploiting a false sense of digital confidence to steal data and funds. 6 sources. https://clstr.news/cluster/cybercriminals-use-sophisticated-phishing-to-target-bank-and-government-accounts ### 2026-08-18: Digital payment fraud rises as debit cards face higher risks Digital fraud is rising, with debit cards identified as high-risk due to direct fund access. Experts advise immediate card blocking and formal claims to mitigate losses from unauthorized transactions. 5 sources. https://clstr.news/cluster/digital-payment-fraud-rises-as-debit-cards-face-higher-risks ### 2026-08-18: Cybersecurity experts warn of new NFC-based banking fraud Cybersecurity experts warn of a new NFC relay attack where scammers use social engineering and malicious apps to steal contactless bank card data in real time. 3 sources. https://clstr.news/cluster/cybersecurity-experts-warn-of-new-nfc-based-banking-fraud ### 2026-08-16: Android malware uses SpyNote and WindRelay to steal credit card data Group-IB researchers discovered a new Android malware attack using SpyNote and WindRelay to steal credit card data via NFC and remote access during fraudulent phone calls. 2 sources. https://clstr.news/cluster/android-malware-uses-spynote-and-windrelay-to-steal-credit-card-data ### 2026-08-15: Cybersecurity experts warn of rising phishing and NFC-based mobile payment fraud Cybercriminals are deploying advanced phishing-as-a-service tools and specialized NFC relay malware to bypass authentication and steal payment card data, targeting both corporations and individuals. 3 sources. https://clstr.news/cluster/cybersecurity-experts-warn-of-rising-phishing-and-nfc-based-mobile-payment-fraud ### 2026-08-13: Cyber fraud tactics rise in Turkey targeting banking and government services Cybercriminals are using sophisticated phishing, fake government websites, and banking 'payment request' features to defraud citizens in Turkey, particularly during real estate and vehicle transactions. 12 sources. https://clstr.news/cluster/cybercriminals-exploit-mobile-banking-request-payment-feature-in-new-scam ### 2026-08-11: Cybersecurity experts warn of evolving digital scams and payment risks Cybersecurity experts warn that digital scams often target human trust rather than technical systems, noting that recovery of stolen funds depends heavily on whether credit cards or transfers were used. 4 sources. https://clstr.news/cluster/cybersecurity-experts-warn-of-evolving-digital-scams-and-payment-risks ### 2026-08-10: Cybercriminals deploy WhatsApp and parking fee phishing scams Scammers are using fake WhatsApp notifications and fraudulent parking fee SMS messages to steal money and personal data through phishing links and urgent social engineering tactics. 5 sources. https://clstr.news/cluster/cybercriminals-deploy-whatsapp-and-parking-fee-phishing-scams --- Cite as: Digital fraud and evolving cybersecurity risks. CLSTR, https://clstr.news/situations/digital-fraud-and-cybersecurity-risks