Scammers’ Strategic Tactics: When and Where You’ll Be Targeted

Research from Malwarebytes highlights how scammers are evolving their tactics to maximize impact when sending fraudulent messages. By analyzing threat data between April 15 and July 14, 2026, the study sheds light on scam categories and the strategic timing of messages.

Timing Matters in Scam Texts

For U.S. recipients, peak scam text volume occurred around 12 p.m. ET, with a significant increase compared to 1 a.m., the least busy hour. Message frequency rose as the week progressed, hitting its highest on Fridays. This indicates that criminals finely tune their strategy based on when you’re most likely engaged.

Scammer Strategies by Platform

The choice of platform plays a crucial role in the effectiveness of various scams:

• Email: Often used for job scams.
• Social Media: Commonly targets romance scams.
• Phone Calls: Typically associated with tech support scams.

Each method plays on specific vulnerabilities that people have on each platform.

The Web as a Major Vector

Despite the attention to scam texts and DMs, the internet remains the main gateway for fraudulent activity. Malwarebytes reports blocking around 500,000 phishing websites daily, highlighting the constant influx of imitation pages from banks to tech firms.

Gaming and Impersonation Scams

Gaming communities see rising impersonation activities, particularly targeting platforms like Roblox, Steam, Discord, and Minecraft. Scams can appear as offers for free items or exclusive content, leading to fake login pages.

Jimmy Donaldson, known as MrBeast, emerged as the most impersonated figure, featuring in 30% of observed impersonation scams, while Elon Musk and Donald Trump also appeared frequently in scam data.

Notably, Google tops the list of impersonated brands, followed by Microsoft, Apple, Roblox, and Amazon.

Protective Measures Against Scams

To safeguard against scams, consider these strategies:

1. Refrain from clicking on links or calling numbers in unsolicited messages.
2. Confirm messages through official channels or directly via company apps.
3. Be wary of sponsored search results to avoid mimicked websites.
4. Keep passwords and verification codes private.
5. Be suspicious of immediate payment demands.
6. Utilize browser security features and antivirus software.
7. Enable spam and scam filters on your phone.
8. Investigate any suspicious messages before replying.
9. Report and block known scam messages promptly.

Should you accidentally click or provide sensitive information to a suspected scam site, react swiftly by changing passwords and contacting relevant financial institutions.

Reflecting on Scam Campaigns

The data illustrates how targeted scam campaigns have become. The observed trends in message timing and platform choice demonstrate a sophisticated understanding by scammers of user behavior. Always verify unexpected requests for money or information by reaching out to real companies independently.