---

Google is warning that cybercriminals are using increasingly sophisticated tactics to steal money and personal information, identifying four major scam categories that its security teams believe currently pose the greatest risks online. Older adults may be especially vulnerable.

In its latest fraud and scams advisory, Google said advanced phishing attacks, cryptocurrency investment fraud, mobile extortion schemes, and police impersonation scams have emerged as some of the most significant threats facing internet users, young and old.

The company said scammers are becoming more effective by combining artificial intelligence, social engineering, and trusted online platforms to evade security protections and trick victims. Google cited estimates that global fraud losses reached nearly $580 billion in 2025 and noted that roughly one in five adults worldwide report falling victim to scams.

---

Watch out for QR code scams

Among the most concerning developments are so-called “Adversary-in-the-Middle” phishing attacks, which allow criminals to intercept login credentials and session information even when users have enabled multifactor authentication. Google said scammers are also increasingly using QR-code phishing campaigns and hiding malicious content within legitimate cloud services to avoid detection. 

Cryptocurrency fraud remains another major concern. Google said Americans lost more than $11 billion to crypto-related scams in 2025. The schemes often involve fake token giveaways, fraudulent mining software, or deceptive online tutorials that secretly install malware or drain victims’ digital wallets. 

Mobile scams are also evolving. According to Google, cybercriminals increasingly disguise malicious software as legitimate finance or loan applications. Some apps seek excessive access to contacts, text messages, and photos, then use the stolen information to extort victims. 

The company said scammers are now submitting seemingly harmless apps to app stores and later updating them with malicious code after they have been approved and installed.

---

Police impersonation scams

Google also pointed to a rise in police and government impersonation scams. These operations often involve criminals posing as law enforcement officials or government agencies through email, messaging apps, and video calls. 

Victims are falsely told they are under investigation and pressured into paying supposed legal fees or surrendering sensitive financial information. Google said such schemes have been particularly active in parts of Asia and the Middle East. 

To combat the growing threat, Google said it is deploying AI-powered detection systems, strengthening account protections, and pursuing legal action against cybercriminal networks. The company also continues to suspend fraudulent accounts, block deceptive advertisements, and enhance security reviews for mobile applications. 

Google urged consumers to remain skeptical of unsolicited messages, avoid scanning QR codes from unexpected emails, be wary of investment opportunities promising guaranteed returns, and download apps only from trusted sources. The company also advised users to remember that legitimate government agencies and law enforcement organizations do not demand payments or sensitive information through messaging apps or unsolicited calls.