Seen a scam? Report it. Protect someone.

Report scams. Earn points. Top contributors get rewarded.

Stay active, climb the leaderboard, and be first in line when we launch contributor rewards.

Upload phishing emails, fake texts, and fraud attempts. Earn points, climb the leaderboard, and help security researchers understand what's happening right now.

Report a scam
16
scams reported
44
contributors
4
countries

Report a scam

Drag & drop, paste, or tap to upload

Screenshot · Email file (.eml) · Text message · Document

Your personal info is automatically removed before storing

What type of scam is this?

Severity:Low
Earn points for every report

Latest reports

Other5 days ago · NG

This is a fake Microsoft Copilot/AI Bounty Award scam claiming the recipient has been selected to receive $30,000 for supposedly exposing a security vulnerability. It impersonates Microsoft's legitimate bug bounty programme (MSRC) and uses a fabricated CVE reference number (Ref/CVE-2026-21520) to appear credible. The contact email is a personal Outlook address, which immediately betrays it as fraudulent — Microsoft would never use outlook.com for official bounty payouts.

7 views0 confirmedSeverity: Moderate
Other18 Sept · NG

This is a scam email impersonating UNICEF, claiming the recipient has been selected for the 'UNICEF Innovation Fund Grant Program.' The email is sent from a personal Gmail account (owenjayjay10@gmail.com) with no affiliation to UNICEF, using the UNICEF logo and professional language to appear legitimate. Victims are typically later asked to pay upfront 'processing fees' or provide financial details to receive the fictitious grant.

16 views0 confirmedSeverity: Moderate
Business email18 Sept · NG

This email impersonates Shimizu Corporation, a real and well-known Japanese construction company, falsely claiming they need a local representative in Nigeria/Africa to procure raw materials and set up an annex office. The reply-to address is a Gmail account, not an official corporate domain, which is a clear red flag. This is a classic advance-fee or business impersonation scam designed to extract upfront payments or personal information from the target under the guise of a legitimate business opportunity.

17 views0 confirmedSeverity: Moderate
Smishing18 Sept · NG

This is a smishing (SMS phishing) attack impersonating the Federal Road Safety Corps (FRSC) of Nigeria. Recipients are falsely told they have an outstanding road traffic offence record and are urged to click a suspicious link hosted on a non-governmental, free subdomain service. If the submitter's claim is accurate that this was sent specifically to people with valid driver's licences, it may indicate a data breach or insider threat involving FRSC or a related licensing database.

19 views0 confirmedSeverity: High
Other28 Jul · NG

A scam email impersonating a company called 'Candy TV' falsely informs the recipient they have been shortlisted for a Remote Customer Care Representative role. The email directs the recipient to purchase or access a book from a suspicious third-party website as supposed preparation for an assessment. This is a classic job scam pattern where fraudsters exploit genuine job seekers — the use of a free Gmail address to represent a company's PR or recruitment team is a strong red flag.

100 views0 confirmedSeverity: Moderate
Other27 Jul · NG

Fraudsters are impersonating Hilton Hotels & Resorts UK to trick job applicants into submitting sensitive identity documents including passport copies and degree certificates under the guise of a recruitment process. The 24-hour deadline creates artificial urgency to prevent the victim from verifying the legitimacy of the request. Legitimate hotel chains do not conduct interviews entirely by email or request passport scans before any verified interview stage.

77 views0 confirmedSeverity: High

Frequently asked questions

Everything you need to know about using UbuntuScamBank.