ONE BILLION SCAM MESSAGES. SOMEONE’S BEEN BUSY.

Remember when scam emails were so badly written you could spot them from a kilometre away? Those days are disappearing rather quickly.

“Dear esteemed customer, your banking account has been selected for urgent verification of funds.”

Ja, okay, my guy.

For years, scammers seemed determined to make their messages as suspicious as humanly possible. Terrible spelling. Random capital letters. A Nigerian prince who desperately needed your bank account to move several million dollars.

Almost nostalgic, really.

Unfortunately, the criminals have been upgrading their systems.

And unlike some of us, they apparently don’t have a problem keeping up with technology.

One billion. With a B.

On 14 October 2026, Microsoft announced that it had helped disrupt infrastructure associated with YAM Store and related phishing kits.

According to Microsoft’s investigation, the operation had enabled more than one billion malicious email and SMS messages targeting over 75,000 organisations since January.

A BILLION.

That’s not some oke sitting at home sending fake parcel-delivery messages between games of FIFA.

That’s an entire criminal ecosystem.

We’re talking ready-made phishing templates, impersonation kits and infrastructure that make it easier for criminals to launch scam campaigns without necessarily knowing how to build the technology themselves.

Basically, phishing has become a service industry.

Except the customer service is terrible, and the product is stealing your money.

Why the scams are getting harder to spot

There was a time when spotting a fraudulent message was relatively straightforward.

Now, scammers impersonate delivery companies, banks, government services, online stores and account providers.

And they’re using increasingly convincing designs and messages.

Imagine this:

You’ve ordered something online. You’re expecting delivery tomorrow.

Your phone buzzes.

“Your parcel could not be delivered. Please pay R12.50 to reschedule.”

You’ve been waiting for that package. R12.50 doesn’t sound unreasonable. You click.

The website looks familiar. It has the right colours, logo and layout.

You enter your card details.

Congratulations. You’ve just paid far more than R12.50.

The problem isn’t that you’re careless. It’s that the scam was designed to arrive at exactly the moment you might believe it.

Three things that should make you suspicious

1. Unexpected requests for payment

A delivery company suddenly needs a small fee. Your bank wants you to verify a transaction. Your streaming service says your subscription has expired.

Don’t use the link in the message. Open the official app or type the company’s website address yourself.

2. Someone wants your OTP

A legitimate-looking website or caller asks you to share a one-time PIN.

That should set off alarm bells. An OTP can be the final step an attacker needs to authorise a transaction or access an account.

3. Someone is creating artificial urgency

“Your account will be suspended in 10 minutes.”

“Your parcel will be returned immediately.”

“Verify now or lose access.”

Scammers love a deadline because deadlines make people panic.

And panicking people don’t always think clearly.

What if you’ve already clicked?

First, clicking a suspicious link doesn’t automatically mean your device is infected.

What matters is what happened afterwards.

If you entered banking details, contact your bank immediately using an official channel.

If you entered a password, change it through the legitimate website and review your account’s security settings.

If you downloaded an unfamiliar application, don’t simply assume deleting its icon solves everything. Get the device checked.

And if you’re unsure what’s happened, speak to someone who can help you work through it.

The bottom line

Microsoft disrupting one major phishing operation is good news.

But the broader scam industry hasn’t disappeared.

The biggest change is that criminals no longer need to be particularly technically skilled to run convincing campaigns.

They can buy the tools.

Which means our best defence is to be a little more suspicious of unexpected requests, a little slower to click, and a lot more careful with our banking details.

And please, if someone messages you about a R50,000 prize you never entered, maybe don’t start shopping for a new TV just yet.

Need a second opinion on a suspicious message or worried your device might have been compromised?

PC Warehouse in Randburg can help with device diagnostics and security checks.

Because we’d much rather help you check a dodgy message than help you deal with what happened after you clicked it.