Scam Detective

Scam Campaign

Fake IRS Calls and Fraudulent Credit Card Charges Scam

Identified on 4/22/2026

Primary Entity

domain

www.whatsthatcharge.com
Suspicious
  • No SSL certificate
  • 1 community report from users

Campaign Narrative

**Multi-Domain Credit Card Fraud Campaign Report**

This cybersecurity investigation has identified a coordinated fraud campaign operating through an interconnected network of two phone numbers and three domains. The campaign centers around phone number 866-978-5981, which has generated 1 FCC complaint with activity concentrated in Lakewood Ranch, Florida, and phone number 888-302-5224, which shows 0 FTC complaints but significant community reporting. These numbers operate in conjunction with three domains: cravingsnomore.com, zyxicisupport.com, and www.whatsthatcharge.com, all connected through 16 documented cross-entity relationships showing reported_together patterns with 0.30 confidence levels across all connections.

The campaign's primary method involves unauthorized credit card charges, as evidenced by community reports receiving 15 upvotes describing fraudulent charges of $49.95 appearing on bank statements linked to phone number 888-302-5224. Victims report receiving calls from their banks about unusual activity, with charges appearing as "888 302 522" on online banking statements. An additional community report with 4 upvotes describes more substantial fraudulent charges exceeding $2,000 on international credit cards, suggesting the operation may have expanded beyond domestic targeting. The interconnected nature of all entities through reported_together relationships indicates a sophisticated infrastructure designed to process unauthorized transactions across multiple channels.

Based on available geographic data, this campaign shows targeting patterns focused on Florida, specifically the Lakewood Ranch area, though the international credit card fraud reports suggest broader geographic reach. The relatively low formal complaint counts (1 FCC complaint, 0 FTC complaints) compared to active community reporting with 15 upvotes indicates this may be an emerging threat that has not yet reached peak consumer awareness or regulatory attention.

To protect against this campaign, consumers should verify the legitimacy of any unexpected charges by contacting their bank immediately and requesting charge details. If contacted by any of these phone numbers, hang up immediately and do not provide personal or financial information. Do not click on links from the associated domains or engage with unsolicited communications. Report suspicious activity to the FTC at reportfraud.ftc.gov and file complaints with the FCC for unwanted calls. Consumers can check the safety of phone numbers and domains by searching community fraud databases and reviewing complaint histories before engaging with unfamiliar contacts.

This campaign represents a moderate-to-high threat level due to the documented financial losses and interconnected infrastructure spanning multiple communication channels. Recommended next steps include continued monitoring of all five entities, alerting financial institutions about the specific charge patterns associated with 888-302-5224, and encouraging consumers to report any contact from these numbers or domains to appropriate regulatory authorities to build a stronger enforcement case.

Entity Roster

Phone Numbers (2)

Domains (3)

Data Sources

Related Campaigns

Other campaigns that share phone numbers, domains, or companies with this one.

Scam Prevention Resources

NordPass Stop reusing passwords across accounts

After a breach, attackers try stolen passwords on every site you use. NordPass generates and stores a unique password for each account.

View all campaigns