Scammers are increasingly exploiting victims' panic to steal cryptocurrency and sensitive personal data, according to a new report from cybersecurity firm Malwarebytes. The report highlights a surge in sophisticated phishing attacks that create a false sense of urgency, prompting victims to act quickly without verifying the legitimacy of the request.
How the Scam Works
Malwarebytes researchers identified a wave of attacks targeting cryptocurrency investors. Victims receive an email or text message claiming that their crypto wallet has been compromised or that a large transaction is pending. The message instructs them to click a link to verify their identity or cancel the transaction. The link leads to a fake website that mimics a legitimate crypto exchange, where victims are asked to enter their private keys or seed phrases. Once entered, scammers drain the wallet instantly.
“Panic is the fraudster’s best friend,” said Mark Stockley, a cybersecurity expert at Malwarebytes. “When people are scared, they stop thinking critically. They just react, and that’s exactly what the scammers are counting on.”
Growing Threat to Personal Data
The report also warns that these scams are not limited to cryptocurrency. In some cases, victims are tricked into downloading remote access software, giving scammers full control of their computers. This allows fraudsters to steal passwords, banking details, and other personal information stored on the device. Malwarebytes reported a 40% increase in such attacks in the first quarter of 2026 compared to the previous quarter.
“We’re seeing a shift from simple phishing to multi-stage attacks that combine social engineering with malware,” Stockley added. “The goal is not just to steal crypto but to harvest as much data as possible for future fraud.”
Impact on Victims
The financial losses can be devastating. One victim, a 45-year-old Melbourne resident who asked to remain anonymous, lost $12,000 in Bitcoin after receiving a fake alert from what appeared to be his exchange. “I panicked when I saw the message saying my account was being drained,” he said. “I clicked the link and entered my details without thinking. By the time I realized it was a scam, my wallet was empty.”
The Australian Competition and Consumer Commission (ACCC) reported that cryptocurrency scams cost Australians $221 million in 2025, a 64% increase from the previous year. The agency expects the trend to continue as scammers refine their tactics.
How to Protect Yourself
Experts advise taking a moment to pause and verify any urgent communication. Never click on links in unsolicited messages; instead, navigate directly to the official website of your crypto exchange or bank. Enable two-factor authentication on all accounts and use a hardware wallet for storing large amounts of cryptocurrency. If you suspect you’ve been scammed, contact your financial institution immediately and report the incident to the ACCC’s Scamwatch.
