Consumer Rights · Aug 10, 2026FBI: AI Scams Drain $900M as Imposter Fraud Surges

KEMETIC MINDS
Cybersecurity Scam Watch — Weekly Report — August 10, 2026

Photo: Gustavo Fring via Pexels (source)

This week’s lead story is the FBI’s warning that AI-powered scams drained nearly $900 million from Americans (FBI, 2026). Around the same time, the FTC issued a fresh alert on surging imposter scams, and Framework customers learned their data was exposed in a breach (FTC, 2026; Engadget, 2026). The common thread: technology is making fraud look and sound legitimate, so the demand to act fast is the real red flag.

• AI-powered scams drained nearly $900 million from Americans (FBI, 2026).
• The FTC warns imposter scams are surging; no legitimate government agency will demand cryptocurrency, gold, or a money transfer to resolve an unexpected problem (FTC, 2026).
• Framework customer names, login IPs, addresses, phone numbers, and emails were accessed in a hack of provider Metabase; payment details were not exposed (Engadget, 2026).
• Companies reported 3,322 data breaches in 2025, a 79% jump since 2020, with 279 million breach notifications sent to U.S. consumers (CNBC, 2026).
• Fake party invitations impersonating Evite, Paperless Post, and Punchbowl are stealing credentials and installing malware (Bitdefender, 2026).
• A new Microsoft 365 login trap abuses the OAuth device code flow to bypass two-factor authentication (PCWorld, 2026).

1. This Week’s Top Scams

The FBI reports that AI-powered scams drained nearly $900 million from Americans (FBI, 2026). Artificial intelligence has lowered the cost of making a lie look and sound believable (FBI, 2026). Criminals can now produce a familiar voice, a polished investment pitch, or a convincing fake identity in minutes (FBI, 2026).

Imposter scams are a big part of the problem. The FTC’s new consumer alert describes criminals who fake caller ID, use real employee names and badge numbers, and send documents bearing official-looking seals (FTC, 2026). They may claim you owe taxes, missed jury duty, or have an account tied to criminal activity (FTC, 2026). Some impersonate Amazon, Geek Squad, package-delivery companies, or even the FTC itself (FTC, 2026).

Family-emergency scams are getting scarier, too. Criminals pull personal details from online sources and can use AI-generated voice cloning to pose as a child, grandchild, or relative who urgently needs money (FTC, 2026). The common thread is pressure: scammers want you to act immediately, before you check the story (FTC, 2026).

Watch how a real ai voice-clone family emergency unfolds — and the red flags that give it away.

Another fast-growing lure is the fake party invitation. Scammers impersonate Evite, Paperless Post, and Punchbowl, and the FTC is warning about the trend (Bitdefender, 2026). Curiosity and fear of missing out drive clicks, and the link leads to a fake sign-in page that steals email credentials or installs malware (Bitdefender, 2026). Some victims are even asked to enter a one-time verification code, which goes straight to the scammers (Bitdefender, 2026).

PCWorld also details a Microsoft 365 login trap that bypasses two-factor authentication (PCWorld, 2026). Victims get a message saying “Your session has expired” and are walked through the real Microsoft OAuth device code flow (PCWorld, 2026). They end up authorizing an application controlled by the criminals, not their own device (PCWorld, 2026).

2. Official Warnings & Advisories

The FTC’s consumer alert on imposter scams is the week’s central advisory: no legitimate government agency will demand cryptocurrency, gold, or a money transfer to resolve an unexpected problem (FTC, 2026). The agency says it will never threaten consumers, order them to transfer money for “protection,” or tell them to withdraw cash or purchase gold and give it to someone (FTC, 2026).

New York officials are warning parents and students about AI-powered back-to-school scams during one of the most expensive times of the year for parents and caregivers (SILive, 2026). Amazon, meanwhile, is urging India’s first-time internet users to stay alert against phishing, fake calls, and online fraud (YourStory, 2026).

The BBB has also flagged “free” gas and grocery card postcard scams, a warning highlighted alongside the fake invitation phishing trend (Bitdefender, 2026).

3. Data Breaches

Framework, maker of repairable laptops, notified all customers that their information was exposed in a breach of its business database provider Metabase (Engadget, 2026). Accessible data includes customer names, login IPs, addresses, phone numbers, and emails; payment information was not included (Engadget, 2026).

Metabase says someone used an unknown 0-day vulnerability to access the data, which it has now identified and patched; a third-party forensic investigation is underway (Engadget, 2026). Framework says it rotated its credentials and confirmed no changes in admin access or access to systems outside Metabase (Engadget, 2026).

The bigger picture is sobering. Companies reported 3,322 data breaches in 2025, a 79% uptick since 2020, and 279 million breach notifications were sent to U.S. consumers that year (CNBC, 2026). The average cost of a U.S. data breach reached a record $11.5 million in 2025, and the FTC logged almost 500,000 identity theft reports in the second quarter of 2026 alone (CNBC, 2026).

4. AI-Powered Phishing: Why Fakes Look Real Now

Generative AI has changed phishing forever, PCWorld reports: emails are now linguistically almost perfect, with professional design and tone that are virtually indistinguishable from legitimate messages from Microsoft, banks, or parcel services (PCWorld, 2026). The old tell — clumsy language — is gone (PCWorld, 2026).

Attackers are targeting login credentials, session tokens, and personal information, and some techniques now bypass two-factor authentication (PCWorld, 2026). AI is also behind more convincing fake party invitations and family-emergency calls (Bitdefender, 2026; FTC, 2026).

5. Scam Texts: Six Checks Before You Tap

Phishing texts about fake deliveries, toll notices, and bank alerts are everywhere. A six-step scam text test can help you spot these messages before you click or share anything (MSN, 2026).

How to Protect Yourself

• If a caller demands cryptocurrency, gold, gift cards, or a money transfer to fix an “urgent” problem, hang up — no legitimate government agency will do that (FTC, 2026).
• Never rely on caller ID, badge numbers, or official-looking seals; contact the organization or family member directly through a number or website you found yourself (FTC, 2026).
• Don’t sign in with your email or enter a one-time verification code from an unexpected invitation link; go to the invitation platform directly instead (Bitdefender, 2026).
• Treat “session expired” re-authorization prompts with suspicion, and make sure you’re authorizing your own device — not an app controlled by criminals (PCWorld, 2026).
• Run the six-step scam text test before tapping links in delivery, toll, or bank messages, and after any breach notification, check exactly what data was exposed (MSN, 2026; CNBC, 2026).

References

1. Bing News. (2026, August 4). FTC warns imposter scams are surging. consumeraffairs.com
2. Bing News. (2026, August 8). The FBI says AI-powered scams drained nearly $900 million from Americans. msn.com
3. Bing News. (2026, August 4). The scam text test: Spot danger before you tap. msn.com
4. Bing News. (2026, August 4). Phishing attacks don’t look fake anymore: Watch for these 7 scams. pcworld.com
5. Bing News. (2026, August 7). Received an unexpected party invite? Watch out for this phishing scam. bitdefender.com
6. Bing News. (2026, August 9). Framework’s Data Breach Revealed Customer Data: Here’s What to Know. msn.com
7. Bing News. (2026, August 7). Framework customer information was accessed as part of a data breach. engadget.com
8. Bing News. (2026, August 6). What is a data breach? The best tools to protect yourself after a cyberattack. cnbc.com
9. Bing News. (2026, August 6). AI-powered back-to-school scams are on the rise, New York officials warn parents and students. silive.com
10. Bing News. (2026, August 3). Amazon warns AI scams are targeting India's new internet users. yourstory.com