What Happened
Google published a scams advisory documenting emerging fraud tactics. According to the report, global fraud losses are estimated at nearly $580 billion for 2025, and approximately one in five adults have fallen victim to scams.
The advisory detailed four primary scam categories:
1. Adversary-in-the-Middle (AITM) and Quishing
Google reported that traditional phishing has evolved into sophisticated attacks that capture users' passwords and session cookies, bypassing multi-factor authentication. Scammers are abusing trusted cloud services like Google Calendar by adding fake renewal notices directly to invites. Others are using \"invisible pages\" in cloud documents to host malicious instructions and phishing landing pages.
Google also documented \"Calendar Phishing\" bypasses and the \"ClickFix\" campaign, which uses fake browser update lures to distribute malware on Google Sites.
2. AI Cryptocurrency Investment Scams
Google stated that Americans lost more than $11 billion to cryptocurrency scams in 2025. The advisory detailed schemes where individuals provide step-by-step guides claiming to teach users how to set up crypto nodes to earn rewards. When users run the provided code, it drains their cryptocurrency wallets.
According to Google, scammers use on-screen QR codes or description links to direct victims to phishing forms or malicious software downloads.
3. Mobile Extortion and Banking Trojans
Google documented a rise in malicious finance apps disguised as legitimate personal finance tools. These apps demand excessive system permissions (contacts, SMS history, photos) and in some cases operators use the stolen data to extort and publicly shame victims.
Google reported that attackers are increasingly using versioning tactics: submitting a legitimate-looking utility app for initial review by app stores, then updating the app with extortion malware after installation.
4. Police Impersonation and Digital Arrest Scams
Google reported coordinated impersonation campaigns particularly active in South Asia, Southeast Asia, and Middle Eastern countries. Scammers register official-sounding email addresses that mimic legitimate law enforcement agencies and labor ministries, then conduct high-pressure video calls claiming the victim is under investigation, demanding upfront \"legal fees\" or harvesting banking credentials.
These \"digital arrest\" scams are conducted using government branding and aggressive social engineering.
Why This Matters
Scams at this scale represent a massive transfer of wealth from ordinary people to organized crime networks. $580 billion in fraud is not a problem that will be solved by individual awareness campaigns alone.
But the pattern is clear: scammers are becoming more sophisticated at mimicking legitimate institutions, abusing trusted cloud services, and exploiting the assumption that if something looks official, sounds official, or comes from an official-sounding email address, it probably is official.
The Dumb Part With The Crypto Node Dream
The dumb part is how persistent the basic crypto node scam remains. Someone posts a tutorial claiming you can earn passive income by running a node. You never personally verify the tutorial author. You copy-paste code you don't understand directly into your terminal. Your wallet empties.
This is not complicated. Code from the internet is not a financial product. Code from the internet is instructions that tell your computer what to do, and if you don't understand it, do not run it on a computer connected to anything valuable.
According to Google's own data, enough people are still falling for this that it remains worth scammers' time to run these schemes at scale in 2026.
The Bottom Line
The real stupid shit is that the basic infrastructure of the internet—email, messaging apps, app stores, cloud documents—has become so trustworthy that scammers can abuse that trust to run industrial-scale fraud operations.
Google's defenses are improving. But Google cannot watch every video call, every QR code, every tutorial, or every app update. The responsibility to not get scammed remains largely on the user: verify before you click, never scan random QR codes from emails, never copy code from tutorials unless you understand it, and never trust official-looking messages from unexpected sources.
Sources
Google: Our latest fraud and scams advisory
NASDAQ Verafin: Global Financial Crime Report