Latest
The $1.99 Customs Fee Is the Cheapest Way to Steal Your Whole Card
Nobody files a police report over two bucks. That's the entire business model.
Archive
read receipts
Every piece we have published — grounded and permanent. Newest first.
The Scam With No Payload: Why 'Hi, are you free?' Is the Whole Trick
The email your filter can't catch is the one that says almost nothing at all.
Thieves Skipped Your Credit Card and Went Straight for Your Airline Miles
The balance you check twice a year is the one criminals check every day — and cashing it out rarely trips a single alarm.
How to Read a Company's DMARC Verdict in Ten Seconds (And Why Half of Them Chicken Out)
The line that tells you whether a brand fights email spoofers or just shrugs is public, one command away, and easier to read than a nutrition label.
The Email Header That Sends Your Reply Straight to a Thief
Business email compromise rarely bothers faking the sender. It just changes one field your inbox politely hides from you.
The Padlock Everyone Brags About Is Hanging on an Open Door
Your bank has DMARC. So does your airline. It's doing roughly nothing, and the setting that proves it is one word long.
Your Antivirus Never Stood a Chance Against a Blank Email
The scam that drained $2.9 billion from American businesses last year didn't carry a single virus. It carried a subject line and a favor.
Your Email's Last Name Is a Lie Spammers Already Saw Through
Adding +shop to your Gmail feels clever. A regex deletes it in milliseconds. Here's what actually gives you a kill switch.
Your AI Just Read an Email That Was Written to Lie to It
The 'summarize this thread' button is the friendliest-looking attack surface in your inbox.
The Cancel Button Is Hidden on Purpose, and the FTC Has the Receipts
Your gym, your streaming app, and that meditation subscription you forgot about all share one design goal: make leaving harder than joining.
The 1x1 Pixel That Knows You Opened This at 7:14 a.m.
Half the newsletters in your inbox phone home the second you glance at them. Here's the invisible dot doing it, and the one toggle that blinds it.
The Phishing Email That Came From DocuSign's Own Servers
Your security software gave it a green checkmark. That was the whole point.