Scams Got an Upgrade. Here's How to Spot Them in 2026 (Two Hit Our Own Inbox)

October is Cybersecurity Awareness Month, and this year's theme for everyday people is refreshingly blunt: "Don't Make It Easy for Them." It's good timing. The Better Business Bureau's Scam Tracker logged about 146,000 scam reports in 2025, up from 81,000 the year before, an 80% jump in a single year. Social media is now where the most money gets lost, and scam texts went from under 10% of reports to nearly 15%.

We're not above it either. This month, two of these landed in our own inbox.

The two that hit us

Both claimed to be from our web host, Hostinger. One said our "hosting package faces suspension within 24 hours." The other said "Pay now to avoid service interruption." Each came with a case number and a button. If you run a website, that's precisely the email you're conditioned to act on fast.

Here's what gave them away:

• The sender's address, not the name. The name said "Hostinger." The actual address ended in lokin.be, a domain that has nothing to do with Hostinger.
• The name was booby-trapped. The word "Hostinger" had invisible characters hidden between the letters. It looks normal to you, but it slips past spam filters that look for the real brand name.
• The clock. "Within 24 hours" and "pay now" are there for one reason: to get you clicking before you think. Real billing problems come with reminders, not ultimatums.

We didn't click anything. We logged in to our hosting account the normal way, confirmed everything was paid and fine, and deleted both.

What's actually different in 2026

The old advice was "look for bad spelling." That advice is dead. Here's why:

• AI writes the email now. Scam emails are grammatically perfect, match the real company's tone, and can be personalized with your name, business and even recent activity.
• Voices can be cloned. A few seconds of someone's voice from a video or voicemail is enough to fake a convincing "it's me, I need this paid today" call.
• The fake invoice is the favorite. Criminals impersonate a vendor you actually use and ask you to "update our bank details." Nothing looks wrong, except where the money goes.
• It's moving to your phone. Texts and DMs get clicked more than email, and they're harder to inspect on a small screen.

Five habits that stop most of it

None of these need special software. They just take away the things scammers rely on: speed, trust, and you staying inside their message.

• Check the address, not the name. Tap or hover on the sender. The display name can say anything; the part after the @ is much harder to fake.
• Go around the message, never through it. If an email says there's a problem with an account, don't use its link. Open the app or type the website yourself and check there.
• Any change to payment details gets a phone call. Call the vendor on a number you already have on file, not the one in the email. This single habit stops the most expensive business scam there is.
• Agree on a code word. Pick a word with your team or family for urgent money requests. A cloned voice won't know it.
• Turn on two-step login for email and banking. If a password does get stolen, a code on your phone is often the only thing standing between a scammer and your accounts.

Bottom line

You don't need to become a security expert. You need to slow down at the exact moment a message is trying to rush you, and check it somewhere the scammer doesn't control. That's what "Don't Make It Easy for Them" really means. If you want a second pair of eyes on how your business handles email, logins and payments, that's exactly what an IT Clarity session is for.

Sources: BBB Scam Tracker Risk Report · National Cybersecurity Alliance, Cybersecurity Awareness Month · FTC: Pay your bills, not scammers

Book a Free Call, No Obligation →