May 2026 Monthly Scam Report

Overview

May 2026 brought a notable surge in debt-reduction scam calls, with several toll-free numbers generating thousands of consumer complaints. The most-reported number, (877) 419-6664, drew over 3,000 complaints alone, while (888) 269-4978 followed with nearly 1,900, both part of a broader wave of callers falsely promising to reduce credit card, mortgage, or student loan debt. In total, five of the ten most-complained-about numbers this month were linked to debt-reduction schemes, suggesting a coordinated and widespread effort to target financially vulnerable consumers. Impersonation calls also featured prominently, with (855) 909-0815 and (800) 436-5244 tied to reports of callers pretending to be government agencies, businesses, or even family members.

On the digital threat side, newly flagged domains and IP addresses pointed to active malware distribution and browser-based deception. Multiple IP addresses were flagged for spreading Mozi, malware that hijacks home routers and cameras and quietly drafts them into a criminal attack network (a botnet). The domain mbhofdf.kortalanmuveszet.hu was flagged for hosting ClearFake, a technique that tricks visitors into running malicious code by disguising it as a routine browser update. Community members also identified dpd.ntqylxzwpr.cfd as a fake parcel delivery site impersonating DPD, a courier company based in the United Kingdom. The fake delivery notice is a classic phishing approach that preys on the expectation of a package delivery.

Community reports this month reflected a wide range of scam tactics affecting real people. One user described a family member falling victim to a romance scam and potentially being used as a money mule to transfer funds on a scammer's behalf, a situation that can carry serious legal and financial consequences for the victim. Others flagged Visaplan.au as a fraudulent visa application site and raised concerns about reversely.ai and duplichecker.com for using deceptive design to mislead users into unwanted charges. Consumers are encouraged to verify any unsolicited contact independently, whether it arrives by phone, text, or email, before sharing personal or financial information.

Most Reported Phone Numbers

Newly Flagged Domains

Community reports on these domains:

"[UK] Is this a delivery scam? (https://dpd.ntqylxzwpr.cfd/com) Hi! So I’m very new to this subreddit and I’m usually someone who is able to deduce wether a message is a scam or not but for some." (1 upvotes)

Names Showing Up in User Reports

Community reports surface company names in two patterns. The first is real businesses scammers impersonate to gain trust. The second is shell names that show up inside narratives but have no regulator footprint and no BBB record.

Likely Fake Operators

These names appear in community-filed reports this month but carry no BBB record and effectively zero regulator volume. The pattern fits a shell entity used in an active campaign rather than a real business.

Impersonated Brands

Real businesses with high regulator complaint volume (1,000+ CFPB filings) that scammers cite when they call. High mention counts here indicate active impersonation campaigns, not the brand misbehaving.

What People Are Saying

The most upvoted community reports from Reddit this month:

"Visaplan.au website is a fraud/scam I almost got scammed by Visaplan.au when applying for my Australian visa." (7 upvotes)

"reversely.ai/duplichecker.com reverse ai search scam reversely.ai duplichecker.com those website uses dark patterns and deceptive claims to scam users." (6 upvotes)

"[US] My grandma fell for a romance scam, and might be a money mule. Hi all, This has been a really tough situation to deal with, and I really hope you guys could offer me some advice around this." (4 upvotes)

"21 victim on feet finder I was desperate for money and I subscribe to sea Finder I uploaded two pictures and immediately I got a couple messages, but there was one in specific that stood out for me." (3 upvotes)

"Scammed on vehicle purchase by mechanic/dealer LOCATION, New Hampshire, USA TLDR, I purchased a pickup truck from a mechanic/tow company/dealer and the owner of the business has not delivered on his." (3 upvotes)

"21 years old, sextortion victim, i’m scared I'm a 21-year-old Italian boy and a victim of sextortion." (2 upvotes)

"Microsoft Support scam (SCREENSHOT SUCKS I KNOW) 1-[phone] is the number." (2 upvotes)

"landlord/tenant law Location, Alaska I moved out of a 3-roommate rental in Alaska on April 30. The lease runs through end of June." (2 upvotes)

"I'm so confused about if this is a phishing scam or not. I put the url through SEVERAL virus checkers yet most say "Clean" while a few said it was bad yet the screenshot of the website from one of." (2 upvotes)

"Crybex??? Crybex.io- Anyone know anything about this? I’m worried some people I know that were in BG have started talking about this and I can’t find much about it yet." (2 upvotes)

New Scam Campaigns Identified

• Dropped call or no message, 603-362-4844
• Reducing your debt (credit cards, mortgage, student loans), 425-728-6237
• Low Activity, 843-892-1380
• Calls pretending to be government, businesses, or family and friends, 888-357-6722
• Calls pretending to be government, businesses, or family and friends, 240-232-5053

By the Numbers

Pipeline ingestion stats for May 2026:

This report is auto-generated from Scam Detective's data pipeline. Phone numbers, domains, and companies listed here have been reported by consumers to federal agencies or flagged by threat intelligence feeds. Presence in this report does not constitute a determination of wrongdoing.