📞That "Fraud Alert" Is the Fraud

In 1876, Alexander Graham Bell's first phone call was a request for help: "Mr. Watson, come here, I want to see you." A century and a half later the phone is still the fastest way to make someone drop what they're doing — and scammers have rediscovered that an alarmed person on the line will do almost anything to make the alarm stop.

The fastest-growing lure in Scamwise data this fall is the fake fraud alert. It arrives most often as a robocall or voicemail, sometimes as a text: a purchase was just placed on your account — a $919 PlayStation 5 at Walmart, a $1,168 Amazon payment on your Chase card, a $394 Cash App charge from a state you've never visited. Press one to cancel. Call this number immediately. Reply N if this wasn't you.

Nothing was purchased. The alert exists only to get you to call back, and the person who answers is the scam. From there the script is well-worn: to "cancel" the order they need your card number; to "secure" your account they need the one-time code that just arrived; to "protect" your money it should be moved to a "safe account." Some calls hand you off to a second "investigator" claiming to be from your bank, Social Security or law enforcement, turning a fake charge into a full-blown imposter scam.

This one lure reshaped our Brand Imposter Leaderboard. Walmart and Chase entered the top 10 almost entirely on fraud-alert scripts, and Cash App jumped four places on fake security alerts. Submissions describing a call or voicemail were the single biggest reason people came to Scamwise with a brand name in September, and lookups of unknown phone numbers roughly doubled as a share of everything we check.

The important trend here is that the lure has become brand-agnostic. The same recorded voice, the same dollar amounts and the same "press one" cadence are being run against retailers, banks and payment apps interchangeably — the brand is just the label on the box. That makes the pattern, not the brand, the thing to recognize.

As we watch this trend, we're keeping an eye on caller-ID spoofing of banks' real numbers, which turns a check that used to work — "does the number match?" — into a trap.