Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters  — Microsoft's security team is warning about a phishing campaign, first spotted in early February 2026, that borrows a trick from the AI world and repurposes it for old-school spam filtering evasion. The original technique, called ASCII smuggling, uses invisible Unicode "tag" characters (special characters that don't render or show up visually to a human reading the text) to hide content inside normal-looking messages. It first became known as a way to sneak hidden instructions to AI models, since a person looking at the text would see nothing unusual while an AI system processing the same text could pick up the concealed content. What Microsoft found is a twist on that idea. Rather than hiding instructions for an AI, these attackers are using the same invisible characters to break up suspicious words, things like "funding", so that automated email filters can't recognize them as a whole word and flag the message as spam or phishing. Since the invisible characters don't display, the email still looks completely normal to the person reading it, but the "word" behind the scenes is now fragmented and unreadable to filters scanning for known phishing or financial-fraud keywords. Microsoft's broader point is that this shows evasion techniques developed for tricking AI systems are migrating into ordinary phishing and spam campaigns, not just AI-specific attacks, and defenders should expect that crossover to continue. Sources: Microsoft Security Blog: "ASCII Smuggling" crosses over from AI prompt injection to phishing evasion

Scam Victims Seek Help Only to get Victimized Again  — An AP/FRONTLINE investigation finds that online scams in the U.S. have reached record levels, but victims often receive little help from law enforcement, banks, or government agencies, and almost never recover their stolen money. Victims can face additional financial burdens such as fees and taxes after being scammed. Worst of all, victims looking for help sometimes find themselves the victims of new scams!

Phishing scams disguised as party invitations target email accounts  — ATLANTA, Ga. (Atlanta News First) - As weddings, end-of-summer and fall holiday gatherings fill calendars, federal investigators are warning that scammers are disguising phishing attempts as online invitations, messages that can look polished, name a familiar host and even appear to arrive from a friend’s real email address. The Federal Trade Commission (FTC) has issued a consumer alert about unexpected messages impersonating well-known invitation platforms such as Evite and Paperless Post. The messages prompt recipients to enter an email address and password to view event details, or ask for a phone number and a one-time code to RSVP. The FTC said that is not how legitimate invitations work.

FBI warns that clicking one link can give scammers full access to your email  — A new scam that starts with a legitimate login can give malicious cyber actors access to your email even after you’ve changed your password. According to a warning issued Tuesday by the FBI, the scam is known as “OAuth consent phishing” and is targeting people across the country. OAuth is an often used and legitimate permission screen used by services like Google and Microsoft. The feature gives apps the ability to access a user’s data without the user providing sign-in credentials or a password.

4 devious email scams hitting inboxes right now, and how to spot them  — For the last decade, email scams have run rampant on the internet. And corporate IT departments have handed out the exact same advice like clockwork: Look for bad grammar, hover over links, and turn on two-factor authentication. But those recommendations have fallen behind the times. Thanks to AI and clever architectural work-arounds, today’s email scams don’t look like scams. They don’t contain spelling errors. And in many cases, they don’t even care if you have 2FA enabled.

Traitors Star Loses Life Savings to a Scam  — Sam Little, a former contestant on the BBC show Traitors, lost his £40,000 life savings in an cryptocurrency scam that he calls "gut-wrenching". It all began with a few fake text messages.

FTC warns about email scam masking as party invitations  — The Federal Trade Commission is warning partygoers everywhere about a new phishing scam involving event invitations. In a May 26 blog post, the FTC sounded the alarm on "You’re invited" texts and emails that are actually phishing scams. "Scammers send unexpected messages that look like they're from well-known invitation platforms like Evite or Paperless Post," the FTC post says. The invitation may then ask users to share login credentials, according to the warning.

A Featured Phool Gets His Revenge Scam of elderly man goes so well, con artists strike again. But this time the Phool is ready for them.  — Two scammers stole $25,000 from a senior in Ventura County. But once they find their mark, scammers love to try again -- so they reached out a second time, but this time the victim was ready -- with the police. The scammers now face jail time and our Featured Phool got his money back. The moral of the story: shame is a scammer's weapon. They count on their victims to feel so much shame that they don't get help. This victim went to the police and successfully landed his scammers in jail.

What The Tech: Young People Engage with Scams Even More Than Seniors  — Seniors may be losing the most money, but it's actually young people who are engaging with scams the most. Shopping scams, employment scams, and romance scams are at the top of the list for scam attempts hooking young victims.

San Francisco Retiree Loses $500K Live Savings in Fake Romance  — A San Francisco man lost his life savings in a fake romance with "a woman" he met on Facebook. The woman convinced him to invest with her in crypto so they could afford to start a new life together. Family and friends tried to stop him, but he was too infatuated to listen. In the end, all of the money disappeared.