Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

INETCO team shares fraud predictions for 2026

From real-time payment (RTP) scams to account takeovers to card testing, Visa reports that 98% of merchants experienced one or more types of fraud in 2025. No wonder it has gone down in history as the year these crimes exploded in scope. So what does 2026 have in store? According to the INETCO Team, the coming months will see payment fraud evolve like never before — into something more autonomous and far harder for banks and payment processors to detect using traditional approaches.

My close call with an adoption scam and the red flags to watch for

Adoption fraud can target hopeful families. Discover common scams, warning signs, and how to protect your adoption journey. Adoption fraud can blindside even the most prepared families, especially when emotions run high. Understanding common adoption scams and how to stay safe can help you move forward with more peace of mind. Adoption fraud is a scam in which someone uses deception to extract money, gifts, or emotional leverage from people hoping to adopt.

It's About Time: Why Memcyco Raised $37M, and Why Now

Digital fraud hasn’t stood still. Attackers have adopted automation, refined tooling, and improved coordination across phishing, impersonation, and account takeover (ATO). In that sense, fraud has become smarter in how it’s delivered and scaled. But this form of sophistication isn’t primarily about more complex technical breaches, and it doesn’t explain why losses continue to rise even as enterprises deploy increasingly advanced security controls.

The CTI Pivot: Weaponizing Decoy Data Against Airline ATO

That question reflects a growing reality inside airline security teams. Account takeover is no longer a downstream fraud event. It is an access-layer problem driven by adversaries who specialize in impersonation, reverse proxies, and rapid monetization of loyalty accounts. For Cyber Threat Intelligence teams, the mission is not to clean up after fraud. It is to disrupt adversary capability early, attribute campaigns accurately, and break the kill chain before customer harm occurs.

Hiring fraud and deepfakes with Tom Cross

Join us for this week's Defender Fridays as we explore the evolving threat of deepfakes in hiring and remote work with Tom Cross, Head of Threat Research at GetReal Security. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.

As online fraud expands, here's how you can stay ahead

Globally, companies lost an average of 7.7% of their annual revenue to fraud, according to TransUnion’s 2025 Digital Identity Risk Accelerates Fraud Losses report. In the US, companies reported revenue losses of 9.8%, a 46% increase from the previous year. That’s hundreds of billions of dollars heading into the hands of fraudsters. And those stats don’t account for the loss of trust, hit to brand reputation, and time and resources spent on mitigating and resolving the fraud.

What is identity muling, and how can you prevent this new fraud vector?

An identity mule is someone who is compensated for sharing their identity. They may be asked for pictures of their identification documents and video selfies. Or, instructed to create an account and complete an identity verification flow before handing over the account’s credentials to a bad actor. The fraud cat-and-mouse game is taking a new turn. As organizations get better at detecting deepfakes, some bad actors are using real people’s identities to commit fraud.

The rise of fake job applicants: Why workforce security must start before day one

All over the world, companies are seeing a rise in fake job applicants. You may have experienced it yourself: dozens of near-identical resumes arriving within hours, or candidates who refuse to turn on their camera during video interviews. Remote hiring, global talent pools, AI-generated resumes, and increasingly sophisticated fraud networks have profoundly changed the hiring landscape. Traditional hiring processes were never built to defend against the types of candidate fraud we’re seeing today.

The Comprehensive Guide to Brand Protection in 2026

Let’s be honest: in 2026, the traditional “firewall” is a bit of a relic. Having spent years analyzing how threat actors operate, I can tell you they aren’t banging on your front door anymore. Why would they? It’s much easier to build a pixel-perfect replica of your front door down the street and trick your customers into handing over their keys there.

Facebook tech support scams on the rise: How cybercriminals are turning your feed into a trap

From fake ads to tech support fraud, see how scammers exploit Facebook and how to protect your data and money. Facebook may feel like a safe place to connect, but scammers are increasingly using its ads, posts, and messages to deceive users. Here’s how cybercriminals are turning your feed into a gateway for fraud and what you can do to stay protected. When you open Facebook, you might expect birthday alerts, travel snapshots, or quick messages with friends.

Report: Scammers Stole $17 Billion Worth of Crypto Last Year

Scammers stole an estimated $17 billion worth of cryptocurrency in 2025, according to a new report from Chainalysis. Notably, the report found that AI-assisted scams stole 4.5 times more money than scams that didn’t leverage AI. “Our analysis reveals that, on average, scams with on-chain links to AI vendors extract $3.2 million per operation compared to $719,000 for those without an on-chain link — 4.5 times more revenue per scam,” the researchers write.

ITSP Magazine: Real-Time Defense Against AI-Driven Account Takeover

Memcyco recently featured in an ITSP Magazine podcast episode snippet, which this post is based on. You can listen to the full feature here, or below. Our thanks go to the podcasters for having our CEO, Israel Mazin, on with them. Account takeover attacks are surging, fueled by off-the-shelf phishkits and AI tools that make it faster and cheaper for bad actors to impersonate trusted brands and steal customer credentials.

ITSP / StudioC60 features Memcyco in latest podcast.

Real-Time Defense Against AI-Driven Account Takeover: How Memcyco Protects Organizations and Their Customers Memcyco recently featured in an ITSP Magazine podcast episode snippet, which this post is based on. You can listen to the full feature here. Our thanks go to the podcasters for having our CEO, Israel Mazin, on with them.

TikTok Content Ideas for Highlighting Smart Digital Habits

In today's digital age, the way we interact online has a profound impact on our daily lives. With platforms like TikTok dominating social media trends, there's a growing opportunity to share meaningful content that educates, entertains, and encourages positive online behavior. Highlighting smart digital habits on TikTok not only informs audiences about responsible online practices but also helps create a culture of awareness, safety, and efficiency in the digital world. If you are a content creator, educator, or simply someone passionate about fostering better online practices, exploring TikTok as a platform can be highly effective.

Attack Surface Management in 2026: The 4 Exposure Layers ASM Can't Cover

Exposure management in 2026 is no longer defined by how many assets you can scan. It is defined by where visibility and control still exist when attacks move from discovery to execution. Most modern attacks do not exploit misconfigurations or unpatched systems. They exploit trust. In fact, according to Statista, the usage of valid credentials is now the joint-top initial access vector globally (30%), tied with software exploitation.

How Liveness Detection Stops Identity Fraud Before It Starts

Identity fraud is no longer a distant problem that only affects big companies or governments. It's happening to everyday people-people like you and me. Have you ever wondered how someone could open a bank account, take a loan, or access services using someone else's face? That's where liveness detection quietly steps in as a digital gatekeeper.

Report: Microsoft Was the Most Impersonated Brand in Q4 2025

Microsoft was the most commonly impersonated brand in phishing attacks during the fourth quarter of 2025, according to researchers at Guardio. Microsoft was followed by Facebook, Roblox, McAfee, Steam, AT&T, Amazon, Google, Yahoo, and Coinbase. “Scammers ramped up brand impersonation attacks throughout Q4 2025, timing their campaigns around when people are busiest online, shopping for deals, renewing subscriptions, or looking for jobs,” Guardio says.

Website vs Device Defenses: How to Build a Modern Account Takeover Solution

Most account takeover solutions are built on a familiar assumption: if you can trust the device and secure the login, you can stop fraud. That assumption is no longer valid. Modern account takeover failures are driven by a structural issue most defenses still miss: the legitimacy gap. This is the period when access is treated as legitimate even though compromise has already occurred. During this gap, attackers operate freely while security and fraud teams see nothing actionable.

AI Deepfakes Are Impersonating Religious Figures to Solicit Donations

WIRED reports that deepfake attacks are impersonating pastors and other religious figures in order to scam congregations. Father Mike Schmitz, a priest who hosts a podcast with over a million followers, warned his listeners in November that AI-generated deepfakes were using his likeness to fraudulently solicit donations. WIRED found that several of these fake accounts are still active on TikTok, and they appear when a TikTok user searches for Father Schmitz.

How to Spot a Fake Twitch Viewer and Keep Your Channel Safe

Spotting fake Twitch viewers isn't about protecting your channel, it can also be about figuring out how to avoid getting caught if you're buying viewers. Some streamers learn how to identify fake viewers in order to keep their channels safe, yet these viewers (unless in massive numbers) won't necessarily affect channels. They're simply everywhere. On the other hand, people want to learn how to spot bots in order to buy some and go undetected. Either way, with technological advancements in bots these days, the main thing to pay attention to is unnatural behavior.

Domain Takedown Services vs In-House Tools: What Enterprises Actually Use

Domain takedown services are a familiar control for enterprises dealing with phishing, fake websites, and brand impersonation. When a spoofed domain appears, the instinctive response is to remove it as fast as possible. Security teams generally face a clear decision: handle takedowns internally using tools and SOC workflows, or rely on managed domain takedown services. What is less clearly understood is that this decision is not really about preference or maturity.

How to easily protect your identity from theft and fraud

Identity theft is no longer just about lost wallets or stolen credit cards—it’s a growing digital threat that can start with something as simple as opening an email, clicking a link, or sharing information online. Criminals can use your personal data to open accounts, make purchases, or commit fraud in your name, and may also use your information to commit crimes beyond financial fraud, often leaving victims unaware until serious financial or legal damage occurs.

The Bid Picture Featuring Memcyco's Gideon Hazam

This episode unpacks the accelerating threat of phishing, account takeover (ATO), and digital impersonation in the age of AI. Gideon Hazam, Co-Founder at Memcyco, explains why brand impersonation is still treated as “lower urgency” by many organizations, how that blind spot enables real-world fraud, and what preemptive, real-time defense looks like when attackers operate at machine speed.

When Seeing Isn't Believing: AI Images, Breaking News and the New Misinformation Playbook

In the early hours following reports of a U.S. military operation involving Venezuela, social media feeds were flooded with dramatic images and videos that appeared to show the capture of Venezuelan president Nicolás Maduro. Within minutes, AI-generated photos of Maduro being escorted by U.S. law enforcement, scenes of missiles striking Caracas, and crowds celebrating in the streets racked up millions of views across various social media channels. The problem?

Account Takeover Prevention for Credit Unions: What Actually Works in 2026

Account takeover prevention for credit unions has reached an inflection point. One concept underpins most modern failures: the timing gap, the period between a member engaging with a scam or impersonation interaction and the moment a security or fraud team becomes aware of risk. During this gap, access is often treated as legitimate even though compromise has already occurred.