Online Products & Service Cybersecurity Compliance

Financial Services (Banks, FinTech, Insurance)

Constant target due to direct monetary value and sensitive data access.
Keywords: fake invoices, account alerts, payment requests.

SaaS & Webmail Providers

Attackers spoof login pages and MFA prompts to steal credentials.
Example: fake “Microsoft 365 password reset” or “Google Workspace update.”

Healthcare & Medical Services

High-value patient data, billing scams, and fake insurance updates.
Spoof examples: “Lab result pending” or “Health portal access expired.”

Logistics & Shipping (FedEx, DHL, UPS)

Massive spam volume around fake shipment notifications or invoices.
“Your package couldn’t be delivered” = top bait line.

Corporate / Enterprise HR & Payroll Systems

Spoofed HR portals, tax form phishing, and payroll rerouting.
Popular during tax seasons or HR policy updates.

E-commerce & Retail

Fake order confirmations, refunds, and promo scams.
Targets include Amazon, Shopify, and Flipkart merchants.

Education & Research Institutions

University accounts spoofed for access to internal networks or grants.
Common bait: “Scholarship approval” or “Library account renewal.”

Government & Public Sector

Spoofed correspondence mimicking local or federal offices, tax departments, or courts.
Used to harvest IDs and financial credentials.

Manufacturing & Industrial Supply Chains

Fake vendor invoices and order confirmations.
AI bots now impersonate suppliers using public trade data.

Entertainment, Media & Communications

Spoofed collaboration invites, fake licensing, and press release scams.
Growing trend: AI impersonations of journalists or talent managers.