THE SCAM
The factory behind a billion scam messages.
That unpaid-toll text. The package-delivery notice. The "verify your account" email. A lot of them weren't coming from lone scammers in a basement — they came from the same industrial operation.
Investigators say an underground marketplace called YAM Store sold ready-made phishing kits with more than 2,300 templates impersonating banks, delivery companies, retailers, and government agencies. The kits covered 130 countries and were updated as recently as October 1. Just this year, over 750 million of these messages were aimed at Microsoft customers by email and text — more than a billion total, hitting over 75,000 organizations across 150 countries.
THE RED FLAG
The fakes were factory-built to pass as real: the operators bought expired domains of real organizations, rebuilt their websites so they looked alive, and even used AI to generate entire fake companies complete with documentation. Their phishing pages used fake CAPTCHA gates and filters so only real victims — never security researchers — saw the trap.
On October 13, a global takedown led by Microsoft with Japan's National Police Agency — under a U.S. federal court order — seized the operation's domains, deactivated 20,000 accounts, and blocked 100,000 scam domains. Good news. But factories like this are exactly why the scam texts never seem to stop: there's always another one running.
THE RULE
One factory down doesn't change what you do. Never click a link in an unsolicited text or email — check any claim by opening your real app or typing the company's real address yourself. A billion messages all started with the same ask: click here. Forward spam texts to 7726 (SPAM) so carriers can shut down the new ones faster.
(Source: BleepingComputer, October 13, 2026 (Microsoft's report))
SIGN-OFF
That's today's red flag. One scam, one red flag, one rule — pass it to someone who clicks first and asks questions later.
Got a scam text or a sketchy email? Send it via the contact page — the best ones make future red flags.