If you’ve noticed an uptick in questionable texts when your schedule gets hectic, you might be onto something. Research from the cybersecurity firm Malwarebytes indicates that scammers are becoming more strategic about timing and methods of contact.
The research gathered global threat data from April 15 to July 14, 2026, examining over 20 different scam categories. The findings reveal that criminals are selecting platforms carefully to maximize the effectiveness of their scams.
When it comes to timing, the data reveals that scam texts in the U.S. surge around noon, hitting a peak that is about 874% higher than at 1 a.m., which was noted as the least active time. Additionally, the volume of scam messages tends to rise throughout the week, with a notable spike on Fridays—people receive around 50% more fraudulent texts than during the start of the week.
This suggests that scammers are keenly aware of not just what they send, but when you’re most likely to see their messages. But it’s not just about timing; the nature of the scam often dictates which platform they choose to reach out to you.
Scammers are choosing the best place to reach you
Different types of scams are more likely to use various platforms. Job scams primarily hit inboxes via email, while romance scams often occur on social media, where initial conversations feel more organic. On the other hand, tech support scams tend to begin with phone calls, putting immediate pressure on the victim.
A fake job offer can easily blend into a cluttered email inbox, while social media messages from strangers may seem innocuous. Meanwhile, a phone call claiming there’s a serious issue with your computer creates urgency and can lead to rash decisions.
The method of contact plays a significant role in deception, especially seen with evolving tech support scams that now start with fake invoices or alarming security notices.
The web remains scammers’ favorite doorway
While scam texts and suspicious direct messages make news headlines, the web still remains the primary way that scammers reach people. Email follows, with SMS coming in as a close third. Malwarebytes blocks approximately 500,000 phishing websites each day, highlighting the vast number of fake pages that cybercriminals are constantly pushing.
Many of these sites impersonate banks, major retailers, tech companies, or government services. A link in an unsolicited text could send you straight to one of these well-crafted, deceptive sites that might initially appear legitimate.
So, when you receive a message alerting you to an issue with your account, it’s wise to avoid the link and instead visit the company’s app or enter the website address directly in your browser.
Scam texts hit their peak around lunchtime
One particularly intriguing point from the data is that scam texts reach their highest volume around noon ET, about 874% more than during the early morning hours. Think about your own routine around lunchtime—perhaps you’re stepping out of a meeting, grabbing a quick bite, or checking your messages in between errands. Your attention may already be divided, making you more likely to react hastily to a scam message that appears just then.
Of course, just because you receive a text at noon doesn’t automatically mean it’s a scam. The information simply highlights when scammers might be most active. Still, it paints a picture of how organized their operations can be.
Fridays bring even more scam texts
Days of the week seem to influence scam text frequency, too. Malwarebytes noted that Sundays showed the lowest scam text activity, while texts picked up as the week progressed, culminating in a Friday spike, where the volume increased by roughly 50% compared to the week’s start. The reason for this escalation isn’t entirely clear, but the data suggests some level of deliberate timing in their strategies.
People might be preoccupied with finishing work or planning for the weekend, creating a sense of urgency that scammers exploit. This has been particularly evident in fake government texts that threaten penalties while pushing recipients towards making payments quickly.
MrBeast is the most impersonated person in the data
Familiarity is a tactic scammers leverages, and Malwarebytes found that Jimmy Donaldson, better known as MrBeast, is the most impersonated person in these scams, with his likeness showing up in about 30% of cases. Following him are figures like Elon Musk and Donald Trump. These scams often involve fake cryptocurrency giveaways or schemes requiring fees before purported payouts. The actual person has no affiliation with these offers.
Scammers capitalize on recognizable names because trust can dull your skepticism. This tactic has grown even more concerning with advancements in AI, which make it easier to generate convincing video and audio content.
Google leads the list of impersonated brands
Scammers employ similar tactics with well-known companies. Malwarebytes reports that Google, Microsoft, Apple, Roblox, and Amazon were the top impersonated brands. Google’s name featured in these scams at least twice as often as Amazon’s, providing criminals a significant opportunity since many use Google regularly. Therefore, a fake security warning from Google may appear ordinary to a daily user, while an Apple customer may rush to address an unverified account issue.
Scams involving Amazon can be particularly timely given the frequency of package deliveries for many people. It’s crucial to treat brand logos as mere decoration until you can independently confirm the message’s legitimacy.
Gaming scams are getting more attention
Scammers are also targeting gaming communities, with Roblox, Steam, Discord, and Minecraft frequently impersonated. Between mid-June and mid-July alone, Roblox scams increased by 15% and Steam by 19%. The risks associated with these scams can be significant, with about half leading to losses exceeding $1,000—a serious concern when younger gamers might easily fall for fake offers in familiar environments.
Messages promising free in-game items or access to exclusive content can quickly lead victims to counterfeit login pages, allowing scammers to hijack their accounts.
How to protect yourself from better-timed scams
While scammers can improve their timing, you can make yourself a tougher target. Start by taking your time and verifying the legitimacy of what you see.
1) Don’t click links or call numbers in unexpected messages
Steer clear of links and phone numbers found in unsolicited communications. Clicking these can lead to phishing sites aimed at stealing your login or payment details. Instead, contact the company through another method.
2) Verify through an official source
Refer to the official company website or app. If a message indicates a payment due, check your actual account before proceeding. You can also reach out to the organization using a trusted number, breaking the scammer’s control over the interaction.
3) Watch out for sponsored search results
Performing a search can be useful, yet stay cautious about what you select. Scammers can use sponsored ads leading to fake pages. Always verify the web address before sharing sensitive information.
4) Keep passwords and verification codes private
Never provide passwords or PINs when contacted unexpectedly. Scammers might try to convince you that they need this information, but giving it away can lead to losing account access.
5) Never send payments under pressure
Be wary of unexpected messages that demand instant payment. Always validate outstanding charges through your actual accounts first.
6) Utilize browser protection against scam sites
Good antivirus software can block phishing sites and alert you to dangerous pages. Ensure your browser is up-to-date to defend against possible cyber threats.
7) Enable spam filtering on your phone
Your device likely includes tools to identify suspicious messages. Activate these filters to provide additional protection against scam texts.
8) Investigate suspicious messages
If something feels off, investigate before responding. Use official contact details to verify claims from unknown sources.
9) Block and report scams
If you identify a scam message, block the sender and report it as spam. This helps protect others from similar campaigns.
Act quickly if you already clicked or shared information
Should you have clicked on a suspicious site, promptly change your password through the legitimate website. Follow this by changing the password across any reused accounts. If you divulged payment information, notify your bank or card issuer without delay.
Review your accounts for unknown activities and consider running a security scan to ensure your device is secure.
Key takeaways
The direction this research is headed in really stands out to me. Scammers appear to be analyzing your habits, and the timing insights suggest they might even know when you’re prone to responsiveness. It makes me reconsider those seemingly random texts that come through when I’m busy. That moment is when I need to pause—the pace should never be dictated by a scammer trying to manipulate you.
Have you noticed an influx of scam texts around lunchtime or towards the end of the week? What messages have nearly caught you off guard? Feel free to share your experiences.
