Worth Your Time: Scammers Have a Favorite Doorway for Every Con

Scammers aren’t spraying the same message everywhere and hoping something sticks anymore. They’ve worked out which con plays best on which platform — and they’re choosing your inbox, your feed, or your phone accordingly.

Malwarebytes Labs just released a report built on three months of its own threat data (mid-April through mid-July 2026), and it earns a spot here because it turns “be careful online” into something you can actually use. The pattern is striking: roughly nine out of ten fake unpaid-toll notices arrive by email or text, about six in ten romance scams start on social media, and half of IRS impersonation scams come as a phone call. Job scams favor email, tech support scams favor the phone. Each con shows up where it feels most natural — which is exactly why it works.

The timing data is just as useful. Scam texts aimed at Americans peak right around noon Eastern, and they build all week long until Friday, when there are about 50% more of them than at the start of the week. Translation: scammers like to catch you when you’re busy, distracted, or halfway out the door. Their favorite famous face to borrow? YouTuber MrBeast, who shows up in roughly 30% of celebrity impersonation scams. Their favorite brands to fake: Google, Microsoft, Apple, Roblox, and Amazon. And gaming sites like Roblox, Steam, Discord, and Minecraft are drawing more scam activity — worth knowing if there are grandkids in your life.

One honest note: this is a security company’s report, and its advice section closes with recommendations for its own products. You don’t need to buy anything to use what’s in it. The core advice is free, and it’s the same advice we give.

The Short Version

• Text or email about an unpaid toll? That’s scammer home turf. Don’t tap the link — check your account by typing your toll agency’s real website yourself.
• A charming stranger sliding into your Facebook or Instagram messages is the classic opening move of a romance scam.
• “IRS” or “tech support” on the phone demanding you act right now? Hang up. Call back using a number you looked up yourself — never the one they gave you.
• Celebrity giveaway in your feed asking for a “verification” payment? Nobody famous is going to double your money. That’s the whole scam.
• Looking up a company’s website? Scroll past the “Sponsored” results at the top — scammers buy those spots too.
• Never read a verification code, PIN, or password to anyone who contacted you first. Real companies don’t ask.
• Lunchtime and Friday afternoons are rush hour for scam texts. If a message lands while you’re juggling three other things, that’s your cue to slow down, not speed up.

📄 Read the full article: “Scammers are getting smarter about where they target you” — Malwarebytes Labs

Jay’s Take

The timing data stuck with me. If a text shows up while you’re rushing out the door on a Friday, that’s exactly when the scammer wanted it to arrive. Put the phone down. It can wait.

More like this: All Phishing Email & Text alerts

Already clicked a link in a suspicious text, or gave something away on a call you now regret? Our What To Do page walks you through exactly what to do first.