Week 24 Intel: Phishing Dominates as 1,600+ Reports Flood The Library

🔴 The Big Picture

This week marks a significant milestone for YourScam.org — the platform's scam report database surged past 1,600 verified reports, driven largely by JaffaAi's automated intelligence crawlers scanning six major threat feeds twice daily.

The data paints a clear picture: phishing remains the dominant UK threat vector, accounting for 836 reports (51% of all tracked threats). But the composition of these attacks is shifting. We're seeing more sophisticated domain spoofing, more convincing email templates, and a marked increase in SMS-based phishing ("smishing") targeting UK banking customers.

📊 This Week by the Numbers

🎣 Phishing: The 51% Problem

Phishing continues to be the most reported scam category by a significant margin. Of the 836 phishing reports tracked this week:

• URL-based attacks — Malicious URLs harvested from URLhaus and OpenPhish make up the bulk, targeting UK users with credential-harvesting pages mimicking banks, delivery services, and government portals.
• SMS phishing (smishing) — Text messages claiming to be from Royal Mail, HMRC, or major UK banks remain persistent. These typically direct victims to convincing but fraudulent login pages.
• Email campaigns — Increasingly sophisticated emails using legitimate-looking domains and professional formatting to bypass spam filters.

What to do: Never click links in unexpected texts or emails. Go directly to the official website by typing the URL yourself. Forward suspicious emails to report@phishing.gov.uk and texts to 7726.

🏦 Banking & Investment Fraud Rising

Banking fraud (18 reports) and investment scams (16 reports) showed notable presence this week. While the raw numbers are lower than phishing, these categories carry significantly higher financial impact per victim.

Investment scams flagged by the FCA's warning list are particularly concerning — many involve clone firms impersonating legitimate FCA-registered companies. The average loss per investment scam victim in the UK exceeds £10,000.

Red flag: If someone promises guaranteed returns or pressures you to invest quickly, it's almost certainly a scam. Always check the FCA register at fca.org.uk/scamsmart before investing.

🗺️ Severity Distribution

The severity breakdown this week is striking:

• Critical: 444 reports (27%) — Active threats requiring immediate awareness
• High: 1,170 reports (71%) — Significant threats with verified malicious intent
• Medium: 13 reports (1%) — Potential threats under investigation
• Low: 10 reports (1%) — Minor or resolved threats

The overwhelming concentration in critical and high severity (98% combined) reflects the nature of JaffaAi's sources — these are active, confirmed threat feeds rather than speculative reports.

📡 Intelligence Sources

YourScam's data this week was compiled from six automated sources:

• URLhaus — Malicious URL database (largest contributor)
• OpenPhish — Phishing URL detection
• FCA Warning List — Financial Conduct Authority alerts
• NCSC — National Cyber Security Centre advisories
• GetSafeOnline — Consumer protection alerts
• PhishTank — Community-reported phishing (currently experiencing API issues)

🛡️ What You Can Do

Protecting yourself from scams doesn't require technical expertise — just awareness and healthy scepticism:

1. Verify independently — If you receive a message about an account, go directly to the official website. Don't use links from messages.
2. Report everything — Forward suspicious emails to report@phishing.gov.uk, texts to 7726, and file a report on YourScam.org.
3. Check the heatmap — Our UK Threat Heatmap shows where scams are concentrated.
4. Talk about it — Scams thrive on silence. Warn friends and family about current threats.

This weekly intelligence briefing is generated by Viktor, analysing data from the YourScam.org scam report database and JaffaAi intelligence pipeline. Next report: 22 June 2026.