BeforeYouPay

Community scam reports

Recent experiences reported by shoppers worldwide.

Internet Crime Complaint Center (IC3) | Critical Vulnerability Alert: PHP Core

other

In a follow on to the FBI 's initial social media posting on October 21st regarding the identified PHP vulnerabilities, the FBI is sharing this PSA to continue to warn the public of the criticality and necessity to take steps to protect any affected networks from these known vulnerabilities. PHP is a widely used programming language that powers websites and web applications. These…

United States

Source: FBI IC3 Public Service Announcements

Internet Crime Complaint Center (IC3) | Suspicious Letters Containing White Powder Mailed to State and Local Election Officials, Media Organ

other

The Federal Bureau of Investigation ( FBI ) and the U.S. Postal Inspection Service ( USPIS ) are investigating multiple letters containing suspicious substances mailed to various locations nationwide, including elected officials, Secretaries of State and their related election offices, and various election-related entities. Law enforcement is working diligently to intercept any additional…

United States

Source: FBI IC3 Public Service Announcements

Phishing Report: zyvqaro.shop

Phishing

A phishing indicator related to zyvqaro.shop was reported by PhishDestroy Destroylist on October 23, 2026. This source-reported item has not been independently verified by BeforeYouPay. Verify the destination before paying, downloading files, or sharing sensitive information.

Unknown

Source: PhishDestroy Destroylist

Malware URL Report: 38.137.250.247

Malware distribution

A malware distribution indicator related to 38.137.250.247 was reported by URLhaus on October 23, 2026. This source-reported item has not been independently verified by BeforeYouPay. Verify the destination before paying, downloading files, or sharing sensitive information.

Unknown

Source: URLhaus

Malware URL Report: 42.224.144.194

Malware distribution

A malware distribution indicator related to 42.224.144.194 was reported by URLhaus on October 23, 2026. This source-reported item has not been independently verified by BeforeYouPay. Verify the destination before paying, downloading files, or sharing sensitive information.

Unknown

Source: URLhaus

Malware URL Report: 219.155.202.121

Malware distribution

A malware distribution indicator related to 219.155.202.121 was reported by URLhaus on October 23, 2026. This source-reported item has not been independently verified by BeforeYouPay. Verify the destination before paying, downloading files, or sharing sensitive information.

Unknown

Source: URLhaus

Malware URL Report: 182.127.104.120

Malware distribution

A malware distribution indicator related to 182.127.104.120 was reported by URLhaus on October 23, 2026. This source-reported item has not been independently verified by BeforeYouPay. Verify the destination before paying, downloading files, or sharing sensitive information.

Unknown

Source: URLhaus

Malware URL Report: 182.127.104.120

Malware distribution

A malware distribution indicator related to 182.127.104.120 was reported by URLhaus on October 23, 2026. This source-reported item has not been independently verified by BeforeYouPay. Verify the destination before paying, downloading files, or sharing sensitive information.

Unknown

Source: URLhaus

Malware URL Report: 103.172.186.170

Malware distribution

A malware distribution indicator related to 103.172.186.170 was reported by URLhaus on October 23, 2026. This source-reported item has not been independently verified by BeforeYouPay. Verify the destination before paying, downloading files, or sharing sensitive information.

Unknown

Source: URLhaus

The FTC is not calling to deactivate your phone number

impersonation

Here’s the latest twist on FTC impersonators: someone claiming to be an FTC official (who’s really a scammer) calls to say a phone was registered under your name and number and is being used to commit scams in another country. The “FTC official” even reads off their badge ID (it’s a fake badge). If you don’t cooperate, they threaten to deactivate your phone number. Sounds scary? That’s…

United States

Source: FTC Consumer Alerts

Some franchising basics from the FTC’s case against Premier Martial Arts franchisor

other

If you’re thinking of buying a franchise, you’re probably considering lots of factors — weighing benefits like training and brand name recognition with potential risks and costs. Like any other business, a franchise has no guarantee of success. That’s why franchisors are required to give potential buyers honest information about what it takes to open and operate their franchise.

United States

Source: FTC Consumer Alerts

Internet Crime Complaint Center (IC3) | Scammers Exploit 2026 U.S. Midterm Election to Perpetrate Multiple Fraud Schemes

other

The FBI warns the public that scammers could exploit the 2026 US Midterm Election to perpetrate financial fraud schemes. These schemes target victims across the United States and have previously exploited state and local elections. This PSA is an update to alert number I-102924-PSA , published on 29 October 2024, titled “Scammers Exploit 2024 US General Election to Perpetrate Multiple Fraud…

United States

Source: FBI IC3 Public Service Announcements

Internet Crime Complaint Center (IC3) | FBI Warns Voters on Election Crimes Ahead of the November 2026 Midterm Election

other

Free and fair democratic elections are one of the foundational pillars of the United States. The FBI is committed to protecting every eligible citizen's right to vote. Consistent with past practice, the FBI is providing this information to educate voters about federal election crimes and how to avoid them, and to encourage voters to report suspected violations to the FBI.

United States

Source: FBI IC3 Public Service Announcements

Internet Crime Complaint Center (IC3) | FBI Cautions About Threats to Election Workers Ahead of the November 2026 Midterm Election

other

Threats to election workers not only endanger the safety of the individuals involved but also jeopardize the stability of the US electoral process. The FBI defines "election workers" broadly as individuals who have responsibility over one or more aspects of election administration, including elected officials, appointed officials, staff, volunteers, contractors, vendors, and liaisons.

United States

Source: FBI IC3 Public Service Announcements

Phishing Report: zylofam.com

Phishing

A phishing indicator related to zylofam.com was reported by PhishDestroy Destroylist on October 14, 2026. This source-reported item has not been independently verified by BeforeYouPay. Verify the destination before paying, downloading files, or sharing sensitive information.

Unknown

Source: PhishDestroy Destroylist

How to avoid deceptive sextortion assistance services and find real help

other

Sextortion — when someone threatens to share your intimate images unless you pay — can be stressful and upsetting. And figuring out what to do can be overwhelming. While searching for help, you might find companies that offer quick fixes (for a price) but don’t deliver on their promises. One example, according to the lawsuit filed by the FTC, is Digital Forensics, a company behind websites…

United States

Source: FTC Consumer Alerts

Phishing Report: zywyzyskorent.com

Phishing

A phishing indicator related to zywyzyskorent.com was reported by PhishDestroy Destroylist on October 13, 2026. This source-reported item has not been independently verified by BeforeYouPay. Verify the destination before paying, downloading files, or sharing sensitive information.

Unknown

Source: PhishDestroy Destroylist

Phishing Report: zywakapovin-fr.fyi

Phishing

A phishing indicator related to zywakapovin-fr.fyi was reported by PhishDestroy Destroylist on October 13, 2026. This source-reported item has not been independently verified by BeforeYouPay. Verify the destination before paying, downloading files, or sharing sensitive information.

Unknown

Source: PhishDestroy Destroylist

Phishing Report: zywacapovin-pl.fyi

Phishing

A phishing indicator related to zywacapovin-pl.fyi was reported by PhishDestroy Destroylist on October 13, 2026. This source-reported item has not been independently verified by BeforeYouPay. Verify the destination before paying, downloading files, or sharing sensitive information.

Unknown

Source: PhishDestroy Destroylist

Phishing Report: zywa-capovin.pro

Phishing

A phishing indicator related to zywa-capovin.pro was reported by PhishDestroy Destroylist on October 13, 2026. This source-reported item has not been independently verified by BeforeYouPay. Verify the destination before paying, downloading files, or sharing sensitive information.

Unknown

Source: PhishDestroy Destroylist

Scam alert: Investment scams hiding in plain sight

investment-scam

<div class="field field--name-field-accc-news-published-date field--type-datetime field--label-inline clearfix"> <h3 class="field__label">Published</h3> <div class="field__item"><time datetime="2026-09-28T01:05:00Z" class="datetime">28 Sep 2026</time> </div> </div> <div class="field field--name-field-scamwatch-summary field--type-string-long…

Australia

Source: Australian Scamwatch Alerts

MBJob Scam Campaign Misusing BGD e-GOV CIRT’s Name

job-scam

Cyber Threat Intelligence Unit of BGD e-GOV CIRT, BCC has identified widespread fraudulent financial activities being conducted through the platforms MBJob, MBJOB[.]CC (https[:]//mbjob[.]cc/), and associated mobile apps/ social platforms/ messenger platforms.

Bangladesh

Source: BGD e-GOV CIRT Alerts

Community reports are unverified allegations. External entries reproduce source-reported indicators and are not independent BeforeYouPay findings.

Report Scam

Share factual details to help protect the next shopper.