Loading story…
UK fraud losses climbed sharply in the first half of 2026 as criminals increasingly used social media platforms rather than email to find and manipulate victims. Reporting cited a suspected £153 million HMRC tax fraud linked to TikTok, major fraud exposure on Meta platforms highlighted by Lloyds Bank, and record £221.5 million in UK investment scam losses reported by UK Finance, underscoring how platform-specific lures, impersonation, and AI-enabled scaling are reshaping online fraud.
Authorities also linked the trend to cross-border criminal operations targeting UK victims through fake social media accounts. The UK National Crime Agency said fraud suspects were arrested in Nigeria after intelligence sharing tied to an investment scam operation, illustrating how overseas networks used fraudulent Facebook personas and other social channels to run scams against people in the UK while law enforcement pursued international disruption efforts.
Get the infrastructure and lures behind it.
2 events from the most recent confirmed update back to the earliest known activity.
Two Romanian men, aged 22 and 25, were arrested in east London on 2026-04-23 in connection with a suspected £153 million tax fraud scheme that used TikTok ads to obtain VAT and self-assessment credentials. HMRC said it had identified and blocked £153 million in fraudulent repayment claims linked to the scheme.
The UK National Crime Agency said Nigerian authorities arrested suspects linked to fraud targeting UK victims following intelligence sharing between the agencies. The action was highlighted as law enforcement disruption of an investment scam operation using fake Facebook accounts.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
4 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourceindependent.co.uk
Open sourcenationalcrimeagency.gov.uk
Open sourcenationalcrimeagency.gov.uk
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The UK unveiled a national fraud strategy that shifts more responsibility for stopping scams onto telecom providers, technology platforms, and financial firms, backed by a new **Online Crime Centre** with more than **£30 million** to coordinate the National Crime Agency, GCHQ, police, and private-sector partners. The plan focuses on disrupting fraud infrastructure upstream by blocking scam texts, freezing accounts, and removing fraudulent online profiles, while replacing Action Fraud with a new **Report Fraud** system and pursuing a national capability to trace scam calls across networks. The broader UK push builds on earlier action to ban illegitimate **SIM farms**, a tool used to send mass scam texts and create large numbers of verified accounts, with operators already reporting more than **1 billion** suspected scam messages blocked since 2023.
Jun 29, 2026
Nigeria is strengthening its cybersecurity posture as cybercrime becomes more profitable even while reported fraud cases decline. Authorities are preparing a new national cybersecurity framework expected to mandate incident reporting, set minimum cybersecurity investment requirements, and expand public-private collaboration. The push comes as organizations in Nigeria faced an average of **4,361 attempted cyberattacks per week** in June 2026, making the country one of Africa’s most targeted environments and often exposing victims to threat levels roughly double the global average. Financial losses have risen sharply, with digital-payment fraud reaching **₦25.85 billion** in 2025, driven in part by insider-enabled schemes including **SIM swap fraud**, account compromise, and phishing. Nigeria already requires breach notification within 72 hours under its **2023 Data Protection Act**, but enforcement and compliance remain uneven, especially among smaller organizations with limited training and security resources. Officials and industry observers say stronger enforcement, better reporting, and improved defenses against credential theft are critical to reducing cybercriminal profits in the country’s expanding digital economy.
Jul 16, 2026
INTERPOL and industry reporting warn that transnational fraud networks are becoming more sophisticated and more profitable by combining **AI-enabled deception**, crypto abuse, and organized scam-center operations. INTERPOL’s 2026 Global Financial Fraud Threat Assessment says AI-enhanced fraud is **4.5 times** more profitable than traditional methods and links financial fraud to broader criminal ecosystems including cybercrime, human trafficking, and terrorist financing. Researchers and investigators described tools such as **ProKYC** that can forge identity documents, generate deepfaked liveness checks, create selfie-with-ID images, and tailor verification artifacts to defeat KYC controls, while a cybercrime forum vendor separately advertised fraudulently verified accounts on exchanges including `Bitget`, `Bitvavo`, and `Kraken` with European IBAN and SEPA capabilities, underscoring how criminals are abusing rather than breaching financial platforms. Authorities are responding with wider enforcement actions against the infrastructure behind these scams. In India, Goa police arrested seven suspects, questioned 24 others, raided more than 40 locations across 11 states, and identified **313 suspected mule accounts** in an investigation spanning investment scams, sextortion, parcel fraud, fake hotel bookings, and so-called digital arrest schemes. In Cambodia, officials said raids across at least five provinces led to more than **1,000 arrests** tied to cybercrime and online scam compounds, part of a broader regional crackdown on an industry the UN says generates billions of dollars annually and has been linked to trafficked workers and abuse. INTERPOL said fraud-related Notices and Diffusions have risen **54% since 2024**, with support in more than **1,500** transnational fraud cases involving **$1.1 billion** in losses, and it is launching **Operation Shadow Storm** to target scam-centre-linked fraud, cybercrime, and human trafficking.
Aug 12, 2026