The days of obvious scam emails filled with spelling mistakes and suspicious links are quickly becoming a thing of the past.
Today’s cybercriminals are getting smarter – and more importantly, they are getting better at blending into the digital experiences Australians already trust.
From fake shopping websites and too-good-to-be-true betting promotions to messages that appear to come from family members, the latest cyber threat data reveals that scams are no longer happening on the fringes of the internet. They are hiding in plain sight.
According to the latest Gen H1 2026 Threat Report, scams remain Australia’s most prevalent cyber threat, increasing by 32 per cent in the first half of the year. The biggest surge? Gambling scams, which skyrocketed by an alarming 927 per cent, making them the fastest-growing scam category in Australia.
The research shows scammers are increasingly replicating familiar online experiences – creating fake betting platforms, advertisements and bonus offers that closely resemble the promotions people regularly encounter online.
But gambling scams are just one part of a much bigger shift.
The New Era of “Trust-Based” Scams
The biggest takeaway from Gen’s latest research is that cybercriminals are no longer relying solely on technical tricks. Instead, they are targeting something far more powerful: trust.
“The most effective attacks in the first half of 2026 didn’t look like attacks,” said Vita Santrucek, Chief Technology & Development Officer at Gen.
“They arrived through booking platforms, family message threads, software update channels and AI agent workflows – all places people already trust.”
And that is what makes modern scams so difficult to spot.
A fake hotel booking message might reference a real reservation. A WhatsApp scam might appear to come from someone you know. A fake online store might look almost identical to a legitimate retailer.
The danger is not that people are careless. It’s that scammers are becoming experts at creating moments that feel completely normal.
Shopping, Social Media and the Rise of Fake Everything
For anyone who loves online shopping, the latest figures are particularly concerning.
Gen blocked 114.2 million e-shop scam attacks globally, highlighting the growing threat of fake online stores designed to capture payment details and personal information.
The rise of fake shopping experiences is especially relevant as consumers increasingly discover products through social media ads. A beautifully designed website, influencer-style promotion or limited-time offer can create a false sense of credibility within seconds.
Before entering payment details, experts recommend checking website URLs carefully, looking for independent reviews and avoiding offers that create unnecessary urgency.
When Family Messages Aren’t Always Family
One of the most unsettling trends identified in the report is the rise of impersonation scams.
Gen recorded a more than 454 per cent increase in family impersonation scams, with criminals using tactics designed to mimic real relationships and emotional connections.
These scams often rely on urgency – a “family member” claiming they have lost their phone, need money quickly or require immediate help.
The message might look familiar. The tone might feel right. But behind the screen could be someone attempting to exploit the trust built within those relationships.
AI Is Creating New Opportunities … and New Risks
As artificial intelligence becomes part of everyday digital life, it is also creating a new security challenge.
AI assistants and agents are becoming increasingly capable, with the ability to browse websites, access files, connect with services and complete tasks on behalf of users.
However, Gen’s research highlights that these permissions could become a new target for cybercriminals, who are looking for ways to manipulate AI systems into taking harmful actions.
Early telemetry from Gen’s AI security platform found high-risk behaviours including attempts to run dangerous commands, access credential files and create persistent remote access.
The lesson? AI may be becoming smarter, but digital safety habits need to evolve alongside it.
How to Stay Safer Online in 2026
While cyber threats are becoming more sophisticated, a few simple habits can significantly reduce risk:
Pause before clicking: Scammers often create urgency to encourage quick decisions.
Check the source: Whether it is a shopping website, message or email, verify where it has come from.
Use strong security tools: Identity protection, scam detection and privacy monitoring can help identify threats earlier.
Be cautious with personal information: Your email address, passwords and financial details are valuable targets.
Remember that trust can be manipulated: Even familiar platforms and conversations can be used as entry points.
The biggest cyber security lesson for 2026 is simple: scams no longer look like scams.
They look like the things we do every day — shopping, messaging, booking holidays and using technology to make life easier.
And as our digital lives become more connected, protecting them starts with recognising that trust itself has become the new attack surface.
