The FBI has issued a chilling warning to Gmail, Outlook, and all US email users: cyber crooks are ramping up holiday scams that infiltrate your inbox and drain your bank accounts.
Holiday Hacks Surge as Cybercriminals Target Email Users
The FBI spotlighted four major scams flooding inboxes this season:
- Non-delivery scams – Buyers pay but never get their goods.
- Non-payment scams – Sellers send products but never get paid.
- Auction fraud – What you order isn’t what shows up.
- Gift card fraud – Scammers demand payment on prepaid cards, nearly impossible to trace.
In 2024 alone, Americans lost a staggering $785 million from non-payment and non-delivery scams. Credit card fraud added another $199 million in losses, with complaints spiking sharply during the post-holiday period, thanks to risky online shopping sprees.
Account Takeover Scams Skyrocket
The FBI also warned about a steep rise in Account Takeover (ATO) scams. Since January 2025, more than 5,100 complaints have been filed with losses topping $262 million.
Here’s how it works: scammers pretend to be bank reps or customer service agents and bombard victims with fake calls, texts, or emails claiming account problems. Victims get pressured into handing over login details, including multi-factor authentication codes – handing over the keys to their accounts.
Scam sites fool even savvy surfers by mimicking real banking or payroll portals, sometimes boosted by fake search engine ads popping up on top.
One Click Could Cost You Thousands – FBI’s Top Safety Tips
“Phishing scams and similar crimes get you to click on links and give up personal information like your name, password, and bank account number,” the FBI urged.
“Be especially wary if a company asks you to update your password or account information. Look up the company’s phone number on your own and call the company.”
Victims are advised to:
- Contact their bank immediately to request fraud reversal and a Hold Harmless or Indemnity Letter.
- Report the fraud to the FBI’s Internet Crime Complaint Center (IC3) pronto.
- Reset all passwords and credentials exposed in the scam, including on other sites where the same login might be used.
The FBI warns the initial click can install malware that quickly wipes you out financially, often routing money through cryptocurrency wallets to cover the crooks’ tracks.
Stay alert. An innocent click can cost you everything.
FBI warns: Cybercrooks are jacking bank accounts this holiday season by sneaking scams into your inbox.
