Current threats

On the radar
right now

What's actually happening out there and the one move that beats each one. No fear-mongering, no jargon.

Human-checked. No bots posting straight to your feed. Last updated 13 August 2026.

ScamsWhatsApp

WhatsApp's new Scam Alert has your back

WhatsApp is rolling out an optional Scam Alert feature that uses on-device AI to flag messages that look like a scam before you reply. It's a heads-up, not a verdict — it just gives you a reason to pause on anything sketchy landing in your chats.

The move Switch it on, but still trust your gut: if a flagged message pushes you to act fast, slow down and verify through another channel before replying. Sharpen your radar with Swipe to Survive.
Practise it: Swipe to Survive →
Seen via BleepingComputer
Account takeover

Hackers are breaking into accounts to grab private pics

The FBI is warning that hackers are hijacking people’s social media accounts to steal private or explicit photos and videos. They get in through fake login pages, passwords reused from old leaks, or by tricking you into handing over login codes — then they dig through your DMs, saved media, or anything private in the account.

The move Turn on two-factor authentication now, and never read out or forward a one-time code to anyone — no real login ever needs that. And if a login link lands in your DMs, don’t tap it: open the app or type the site yourself.
Practise it: How Exposed Are You? →
ExploitationDiscord

Brazil suspends Discord's Go Live after a 13-year-old's death

Brazilian regulators ordered Discord to suspend its Go Live streaming feature after linking it to the death of a 13-year-old. The risk isn’t the button itself — it’s the people in the room who push you, dare you, or pile on while you’re live and can’t step back.

The move If a live stream turns into pressure or dares, end the stream, block and report whoever’s behind it in Discord, and tell an adult you trust.
Seen via The Record
Privacy

AI tutors: helpful, but check what they're taking

AI tutoring apps can be genuinely useful for schoolwork, but they vary a lot in how much of your data they hoover up and how reliable their answers actually are. Some are solid; others quietly collect way more than they need, or confidently hand you stuff that's just wrong.

The move Before you lean on any AI tutor, check what permissions and data it's asking for and only allow what it actually needs.
Practise it: Permission Panic →
Account takeoverTikTok ShopAmazon

TikTok Shop scam led to a £1,400 Amazon takeover

People are being targeted via TikTok Shop by fraudsters who then break into their Amazon accounts and go on a spending spree. One victim lost £1,400 this way. The usual trick is getting you to hand over a login or one-time code without realising who you're really talking to.

The move Turn on 2FA everywhere and never read out a one-time code to anyone — real companies never ask for it.
Practise it: Swipe to Survive →
Seen via Which? - News
MalwareChrome

Hundreds of fake VPN extensions were quietly rerouting traffic

People hunting for free VPNs on Chrome got hit: hundreds of extensions posed as popular services but secretly pushed your internet traffic through servers run by strangers. A VPN is supposed to hide your traffic, so one that funnels it through someone else's proxy is the opposite of private.

The move Before you install any extension, check the publisher and read exactly what permissions it wants — if a free tool asks to see all your traffic, walk away. Try Permission Panic to sharpen your instinct.
Practise it: Permission Panic →
Seen via BleepingComputer
MalwareRoblox

Fake Roblox 'Xeno' launchers are stealing logins

Copies of the Xeno cheat tool for Roblox are secretly packing malware that grabs your saved passwords and hands attackers remote control of your PC. It's the classic trap: the 'hack' that promises an edge quietly owns your whole machine instead.

The move Don't run Roblox executors or script launchers at all — there's no clean copy to find, and the one you install is the one that takes your logins.
Seen via BleepingComputer
Scams

A screenshot proves nothing

A screenshot of a payment or a message can be edited in seconds, so "look, I sent it" isn't actual proof of anything. People use fake screenshots to make you believe a payment landed or a deal's legit when it never happened.

The move Open the real app or account and check the payment actually arrived before you send anything back.
Practise it: Swipe to Survive →
MalwareSteam

That "fix" on the Steam forum? It's mining crypto on your PC

People are being targeted with fake fixes on Steam game forums. A forum reply promises to solve a bug or crash, but the steps they provide walk you into pasting a command into Windows PowerShell. That command installs a hidden cryptominer that quietly hogs your PC — and the same trick can be used to drop password-stealing malware.

The move Don't paste commands from forum replies into PowerShell or Terminal. If a "fix" tells you to run one, go to the official game site or Steam support yourself and check there.
Practise it: Would You Click? →
Seen via BleepingComputer
Exploitation

Some online 'friends' are recruiting teens — here's the tell

Europol says 4,340 URLs tied to violent online networks were flagged for removal. The playbook's always the same — they act like a mate, get you onside, then use secrets, flattery and threats to push you into doing harmful things and keep you quiet.

The move The pressure to keep a secret or "prove yourself" is the red flag — not whether the person seems sound. Don't go along with it and don't deal with it alone: block, screenshot, and tell a trusted adult straight away (or report it to CEOP).
Seen via BleepingComputer
PrivacyRoblox

Roblox age checks decide who can message you

Roblox now uses an age check to unlock chat and decide who's allowed to message you. That doesn't set everything for you — check your privacy settings so only the people you actually want can reach you.

The move Open your Roblox chat settings and keep chat to people you actually know and trust. Roblox already limits you to around your own age — if you want it locked down further, Parental Controls can do that too.
Practise it: How Exposed Are You? →
Seen via Childnet
ScamsWhatsApp

WhatsApp usernames are coming — here's the catch

WhatsApp is rolling out usernames so people can message each other without swapping phone numbers. Handy, but it also means someone can hit you up without you knowing who they really are — and scammers can lean on that to pose as a mate or a brand.

The move Before you trust a new message, check who's really behind it on another channel you already have for them.
Practise it: Swipe to Survive →
Seen via Which? - News
Privacy

Your chatbot isn't your mate (and that's fine)

Spending hours pouring everything into an AI chatbot can quietly mess with your mood, because it feels like it gets you when it actually can't. It's not a real friend, and it's no replacement for actual people when things get heavy.

The move Set yourself limits, take proper breaks, and take the big stuff to a person you trust — not a bot.
Seen via Internet Matters
Privacy

Some face unlock systems can be fooled by a photo

Some phones, usually ones that just use the front camera, can be fooled by a photo of your face. Face scanners that map your face in 3D are much harder to trick.

The move Use a strong PIN, passcode or fingerprint for your phone lock, and turn on 2FA for your most important accounts.
Practise it: How Exposed Are You? →
Seen via Which? - News
MalwareWhatsApp

That random WhatsApp 'document'? It can hijack your PC

People are being targeted on WhatsApp with messages carrying what looks like a business document — but it's really a script file in disguise. Open it on a Windows PC and it can quietly install software that hands a stranger control of your computer.

The move Don't open attachments you weren't expecting — check with the sender on another channel first.
Practise it: Swipe to Survive →
Seen via BleepingComputer
Scams

That 'handmade' shop with the sad story? Might be all fake

Some accounts on social media are pulling people in with emotional sob stories, deepfake videos and 'artisan' shops selling stuff that doesn't actually exist. The sad story rushes you so you pay before you think to check anything.

The move Slow down, check the shop's URL properly, and look the seller up somewhere else before you send a penny.
Practise it: Spot the Fake →
Seen via Which? - News
Account takeoverInstagramMetaTelegram

Hackers tricked Instagram's AI bot into stealing accounts

People are being targeted via Instagram after hackers worked out how to social-engineer Meta's AI support bot into resetting passwords. Once they're in, they lock the real owner out and take over the account. It's proof that even an official help tool can be played.

The move Turn on two-factor authentication now, so a password reset alone can't get anyone into your account.
Practise it: How Exposed Are You? →
Phishing

Fake World Cup ticket sites are out to score your cash

Scammers are spinning up websites that look exactly like the official FIFA shop, selling tickets and merch that don't exist. Hand over your card and details and they just vanish with both.

The move Only buy from the official seller — get there by typing the address in yourself, not from an ad, DM or search result.
Practise it: Would You Click? →

Looking for older waves? Browse the radar archive →