The latest online phishing scams and how to avoid them

Online scams are an unfortunate part of being on the internet, whether it's on your phone, laptop or computer. And while there are common scams always in circulation that everyone should be aware of, new ones pop up all the time.

We put together this guide to the latest scams so you can keep yourself protected. Be sure to check back as we update it with new scams – how to spot them, how to avoid them, and how to report them.

1. Amazon impersonation scam

An Amazon impersonation phishing scam is exactly what it sounds like – an email or text message impersonating Amazon claiming there is something wrong with your order or account. As with most phishing scams, this tactic involves embedding malicious links within the message that directs you to a website that's designed to steal your information (think Social Security number, payment details, login credentials).

How to spot an Amazon impersonation scam

Even if you don't have an Amazon account or didn't place a recent order, you may still fall for this scam thinking your card was used fraudulently. Amazon had to release a statement warning its users of these sophisticated scams, as they are hard to spot. At this point, it's wise to assume any email or message coming from Amazon claiming an "issue" is a phishing scam.

How to avoid an Amazon impersonation scam

The simplest advice is to not click on any links provided in an email or message from Amazon claiming to "solve an issue." Instead, go directly to your Amazon account to check for any problems. If you don't have an account and want to confirm your credit card isn't being used fraudulently, contact Amazon directly by finding its customer support number, email, or chat box and contacting a real representative.

2. Shipping package scam

A shipping package scam is one where you receive a text or email claiming that there is an issue with your package being delivered, and you need to click on a link to be able to pick it up.

How to spot a shipping package scam

Other than the fact that you may not have a pending package, you can rest assured that any delivery issues will almost never come from the shipping company itself (USPS, Fedex, etc.). You would most likely first receive an alert from the retailer you bought from (e.g. Walmart) and you can use the tracking number originally provided to look into a delay or other problem.

Another way to spot it is through the context of the email itself. While AI is helping some scams appear more legitimate with better and sometimes personalized writing, most scams will still read like they're a scam. Also, they will always have an urgency to them, and whenever you see pressure to act quickly take it as a red flag.

How to avoid a shipping package scam

The simplest way to tackle this type of scam is to directly check any tracking codes you may have. Find the original order confirmation from the retailer with the code and check to see if there is indeed an issue (and then contact the shipper directly, don't click on a link in the suspect text or email).

If you think there is a chance something is being shipped to your house that you didn't order – there isn't. If you still don't believe me, contact the shipper mentioned in the email directly (again, find its customer support number online on a verified website) to alleviate any concerns.

3. Immigration scams

This is an especially egregious one, as it preys on the vulnerable during an ongoing political issue.

There are a few different variations of the immigration scam that span social media, email, and phone. The commonly used tactic is to impersonate an official from an agency such as U.S. Immigration and Customs Enforcement. The fake ICE representative contacts people via email or phone, falsely claims there's a problem, and pressures the victim to make urgent payments via gift cards, cryptocurrency, or wire transfers.

On social media, these same fraudulent parties pretend to be attorneys or law firms, offering help with immigration paperwork or guaranteeing work permits, green cards, or citizenship in exchange for payment.

How to spot an immigration scam

When it comes to anything that is government related, do not trust anyone or any communication that doesn't come from an official channel. The U.S. Citizenship and Immigration Services website notes that it never contacts people through social media. It also asks anyone who receives a suspicious email to forward it to [email protected].

Also, you can verify an attorney's license via the American Immigration Lawyers Association or the U.S. Department of Justice Accredited Representatives List.

As soon as you see that any payment is being asked for, especially if it's using a nontraditional method like a wire transfer or a gift card, immediately cease all communication.

How to avoid an immigration scam

Like in any other scam where the scammer is impersonating an established institution, always look up that institution's official website (not the one listed or mentioned in the scam email/text) and contact it directly to verify if the offer or the representative is legitimate.

A guide to phishing scams

What is a phishing scam?

A phishing scam is any scam that tries to draw out your personal information, usually in the form of an email or text message that asks you to follow a link. This is usually under the pretence of verifying your account due to "fraudulent activity," and typically appears to be from a bank, credit card institution, or even a shipping company like UPS or Fedex.

How to identify a phishing scam

Don't feel bad if you fall for a phishing scam, they are persistent and persuasive. A Pew Research Center survey in April 2025 found 73% of U.S. adults had fallen victim to an online scam or attack. That includes 24% who said a scam message or call led them to give away personal info.

The name of the game is to always be safe, not sorry. Even if the email or the text looks legitimate enough, call or contact the alleged sender yourself. Don't take a chance by clicking on an unknown link or giving away any personal information when you're not the one that initiated contact.

How to prevent phishing scams

While email and phone/text services have gotten a lot smarter in the past several years, using AI and other algorithmic methods to screen out spam and possible phishing content, the scammers too have gotten smarter and learned how to circumvent some of those guardrails.

There is no perfect way to prevent a phishing email or text from coming through, which is why it's important to learn how to identify and defeat them when they do come in.

Frequently asked questions about phishing scams