This article describes real election-themed scams that use fake voter-support messages, political donation appeals, survey prizes, official-looking penalty notices, and bogus campaign merchandise. The scams pressure voters to click fraudulent links, share personal or payment information, download an app, or send money.
These scams use election season as a trusted backdrop to push people toward fraudulent links, apps, or payment requests. One text message offers to put voters on a permanent absentee list so their ballots arrive automatically, borrowing language from a real Minnesota voting service while linking to a fake site. In Brazil, scammers used a WhatsApp account styled after the Superior Electoral Court, inventing a nonexistent 'Customer Service Department' and warning that an unresolved voter issue could cost victims access to banking or government services unless they downloaded an app. Other variants involve fake voter-registration pages that harvest personal data, fraudulent political fundraising appeals, polling calls that pivot into payment requests, fake fine notices, and counterfeit campaign merchandise that never ships.
Each scenario borrows credibility from something voters expect to see during an election cycle: official-sounding services, government agencies, campaigns, and pollsters. The Minnesota text reinforces trust with reassuring language like 'Verified. Tracked. Counted.' The WhatsApp message uses fear of losing banking or government access to pressure quick action. The polling call keeps victims engaged with survey questions before introducing a payment request, so the ask for card details arrives after rapport has already been built. These pretexts work because they mimic legitimate civic processes closely enough that a hurried recipient may not question them.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
It is a fraudulent text message that offers to put recipients on a permanent absentee voter list so ballots arrive automatically, using a link not associated with the real Minnesota voting service it imitates.
Scammers impersonate candidates and political fundraising organizations to collect supposed campaign contributions, so donors should independently find the campaign's official website before giving money.
After engaging victims with survey questions, callers ask for credit card details to supposedly cover shipping, taxes, or fees tied to a promised prize, which is the actual goal of the call.
Voters should check registration status, deadlines, and penalty notices only through an official election website they locate independently, not through links or numbers provided in an unsolicited message.
“Get your ballot on autopilot.” Sounds helpful, right? The text promises Minnesota ballots at home for every election: “Verified. Tracked. Counted.” But its link isn’t Minnesota’s voting service. It leads to a fake sign-up page asking for your information. That’s the trick: election help becomes a reason to hand over data. In Brazil, a fake Superior Electoral Court WhatsApp message even told voters to download “Soluciona Pendência” or risk losing services. A reassuring slogan isn’t proof. For any voter message, skip its link and open your election authority’s official website yourself.
A real campaign is targeting logistics firms with fake Google Play pages impersonating well-known logistics brands to trick employees into installing an Android spyware app. Once installed, the spyware can steal newly received SMS messages (including one-time passcodes) and enable call forwarding,…
Following a Revolut data breach, scammers sent text messages that appeared to come from the same message thread as legitimate Revolut texts. The texts pushed victims to click a link for a fake identity “liveness check,” request camera access, and then capture passwords, information that could be…
Days after Revolut disclosed that customer records were shared with an unauthorized party, some customers reported receiving phishing texts that appeared in the same SMS thread as real Revolut messages. The link led to a fake site that asked for camera access to mimic Revolut’s identity “liveness”…
Malwarebytes reports that scammers are increasingly tailoring different scams to the platforms where they work best, like unpaid-toll lures via email/SMS, romance scams via social media, and IRS scams via phone calls. The report highlights heavy brand and celebrity impersonation (including MrBeast)…
This weekly roundup describes several real social-engineering campaigns, including fake government-payment posts that compromised thousands of Bluesky accounts and mobile scams disguised as community activities. It also documents AI-generated bank-helpdesk calls that persuaded victims to install an…
Microsoft says it uncovered and disrupted an underground marketplace (“YAM Store”) that sold phishing kits and access to cloud accounts, enabling massive global phishing and SMS scam campaigns. The operation allegedly supported over a billion scam messages since January 2026 and targeted 75,000+…
