Authored By: Fernando Ruiz

McAfee’s Mobile Research Team identified more than 1,900 unique applications associated with the campaign across over 500,000 devices in more than 190 countries. Based on publication patterns, we estimate that the operators were releasing approximately 20 to 25 new applications per day, each leveraging different themes, brands, and impersonation targets. The highest concentrations of affected devices were observed in India, Russia, and the United States.

Most of these apps were published on the official android platform impersonating well-known products such as CapCut, Roblox, Zelle, PayPal, Netflix, Xbox Game Pass, Siri, iMessage, etc. under different developer accounts, they shared a common codebase, repeated the same deceptive behaviors, and contacted the same remote server, which told each app where to send its users. That destination was an advertising funnel and in our testing the ads it served led to third-party subscription-fraud pages billing as much as $49.99 per month

McAfee identified the malicious apps, conducted technical analysis, and reported its findings to Google through responsible disclosure channels. Following McAfee’s report, Google removed all of the identified apps from Google Play. McAfee is a member of the App Defense Alliance, which supports collaboration across the mobile ecosystem to improve user protection. McAfee Mobile Security detects these apps as a Medium-Risk Threat. For more information, and to get fully protected, visit McAfee Mobile Security.

The Global Impact

This fake app campaign reached consumers around the world, with McAfee researchers identifying more than 1,900 unique apps across over 500,000 devices in more than 190 countries.

McAfee’s detection data shows how the campaign appeared across key markets. In the United Kingdom, McAfee recorded 11,862 detections, in Germany (5,016 detections), France (4,288), Australia (1,434), and Japan (944).

Market	Devices protected	Global rank	Share of global	Fake apps seen	Top 3 lures
United Kingdom	10,582	#8 of 207	1.98%	970	Streaming/TV/sports (17%), video editors (13%), games (11%)
Germany	4,465	#16	0.84%	444	Health apps (22%), games (16%), AI tools (13%)
France	3,882	#19	0.72%	450	Streaming/TV/sports (20%), AI tools (17%), adult content (10%)
Australia	1,293	#42	0.24%	306	Video editors (16%), AI tools (16%), adult content (15%)
Japan	843	#55	0.16%	229	Health apps (29%), streaming/TV (18%), AI tools (11%)

These figures represent fake app encounters identified by McAfee, not total infections. It reflects where McAfee detected these apps rather than the overall infection rate in each country.

Different Regions, Different Fake App Lures

While the campaign used the same underlying tactics worldwide, the types of apps detected varied by region. Globally, fake video and photo editors accounted for 19% of detections, followed by streaming, TV, and sports apps (13%).

A closer look at individual markets reveals some notable differences:

• United Kingdom: Streaming, TV, and sports apps led at 17% of detections, followed by video and photo editors at 13%.
• Germany: Fake health apps accounted for 22% of detections, followed by games and game modifications at 16%.
• France: Streaming, TV, and sports apps were the most common at 20%, followed by AI tool clones at 17%.
• Australia: Video and photo editors and AI tool clones were nearly tied, each accounting for approximately 16% of detections.
• Japan: Fake health apps stood out at 29% of detections, followed by streaming, TV, and sports apps at 18%.

These findings highlight how the same fake app campaign can appear in very different forms depending on what consumers are looking for. Whether it’s a health app, an AI assistant, a streaming service, or a popular game, familiar names and recognizable branding can make a fraudulent app appear trustworthy.

The risk isn’t limited to one country or one type of app. It’s the same underlying deception: an app that promises a familiar service but delivers something entirely different.

The Financial Impersonators

We identified fake apps impersonating Zelle, PayPal, Apple Pay, Mir Pay, Binance and several banks. One fake PayPal app had been downloaded 10,000+ times.

Zelle has no standalone consumer app: it lives inside your bank’s app so anyone searching Google Play for “Zelle” is already confused. And Apple Pay has no Android app at all, so users searching for it cannot find a legitimate result. Both are searches with no correct answer, which makes them ideal traffic to intercept.

Figure 1: Firsts result on Google Play of ‘Zelle’ search are Fake Applications

Combine that with an in-app browser whose address bar is hidden and whose destination the operator controls remotely, and the risk profile of a fake banking app is simply not the same as a fake video editor even when both currently do nothing worse than show ads.

From the user’s perspective the current risk is straightforward: they search Google Play for “Zelle”, the first results include fake apps, and installing it delivers not a banking guide but a stream of full-screen ads. Tapping one leads to a page requesting their credit card details for a “free” trial that then bills them monthly.

What Users Actually Got: Gambling Inventory, on an “Everyone” Rating

In multiple cases we observed a gambling-style quiz funnel: “Win Mega Jackpot,” “50,000 COINS DAILY,” “PLAY FOOTBALL QUIZ,” “Play Now.”

Now consider who was looking at those store pages: Among the apps still available for measurement at the time of our analysis, the ones impersonating children’s and teenagers’ brands had been downloaded more than 86,000 times:

Downloads	App title	Package Name
50,000+	Roblox	com.sitaram.robloxgame1
10,000+	Roblox	com.sitaram.robloxgame3
10,000+	Netflix Game Controller	netflixgamecontroller.uzair1
10,000+	Netflix Game Controller: Play	netflixgamecontroller.uzair2
5,000+	Xbox Game Pass: Play Games	xboxgame.abdul2
1,000+	Fall Guys for Mobile	com.react.fallguysgame1

Across the full campaign we identified 37 apps impersonating games and services aimed at young players: Roblox, Minecraft, Fall Guys, Brawl Stars, Clash of Clans, Deltarune, Xbox Game Pass even GTA VI.

Figure 2: Fake Xbox App with over 5,000 installations

Every one of these listings carried an “Everyone” content rating.

So, the chain runs: a child searches Google Play for Roblox, installs an app called Roblox with the Roblox logo, rated suitable for everyone — and is funneled into gambling-style prize inventory that the operator can redirect at will. No exploit, no permission prompt, no warning.

The Searches With No Correct Answer

One application captured this strategy particularly well: Published as “AppStore: App Downloader,” the application used a legacy Appstore icon and presented itself as an Android version of Apple’s official software marketplace.

Figure 3: Fake AppStore on Google Play with over 1K Downloads

A legitimate Apple App Store cannot exist on Android because Apple operates the App Store exclusively for its own platforms, and the iOS applications it distributes are not compatible with Android’s operating system or application format. Any Android app claiming to be Apple’s App Store is therefore impersonating the service rather than providing the official marketplace.

“AppStore: App Downloader” was not an alternative marketplace but an advertising funnel disguised with Apple’s branding, rated for all users, and distributed through Google Play.

There is no App Store, Siri, iMessage, FaceTime nor Apple Pay app for Android. Zelle has no standalone consumer app, it lives inside your bank app. Every one of those is a search people perform on Google Play every day, and every one of them is a search with no legitimate result.

Figure 4: Multiple fake apps that does not officially exist on Android

The user’s own intent is the vulnerability: they want the thing, they cannot have the thing, and something appears that looks exactly like the thing. No security control mediates that moment. It is not a technical failure at all: it is a person trusting a logo, which is precisely what logos are for.

How Are the Ads Displayed?

Each app is a shell. It wears the branding of something people search for — CapCut, Roblox, Zelle, PayPal, Netflix, Huawei Health, Xbox Game Pass, Siri, iMessage — and behind that branding it contains no real product. What it contains is a redirector.

On launch, the app contacts a server controlled by the operator:

`hxxps://rewadevelopments[.]online/data/.json`

The server replies with a small configuration block. One field in that block, `qureka_url`, holds a web address. The app takes that address and opens it in an in-app browser window, a Chrome Custom Tab, configured with the URL bar hidden.

In every case we observed, the address served was a gambling-style quiz site promising daily coin rewards. Users did not get a CapCut tutorial or a Zelle guide. They got an endless funnel of ad and quiz pages, monetized by the operator.

The mechanism matters more than today’s payload. Because the destination is fetched from the server at every launch, the operator can change where these apps send users at any moment, for any single app, without shipping an update and without passing store review again. An app wearing a bank’s logo, opening a browser window with the address bar hidden, pointed wherever the operator chooses, is a capability that can be used for phishing and credential exfiltration.

Figure 5: Ads severed from the website loaded in full screen that funnel to subscription fraud.

The full-screen ads users encounter are not served by the app. Its own ad slots are configured with Google’s public test IDs, which generate no revenue — so the app earns nothing from advertising itself. The ads come from the website the app opens: the destination supplied in the remote JSON configuration. That page’s ad inventory is filled with deceptive offers which, when tapped, lead to credit-card forms tied to subscription-fraud billing.

What Makes These Apps Interesting Is What They Do Not Do

There is no exploit, privilege escalation, rooting attempt, dynamic code loading, obfuscation, encrypted payload, or dropper chain. The applications request no dangerous Android permissions. From the perspective of conventional static analysis, their code presents few of the indicators typically associated with Android malware.

This campaign avoids many of those controls because its primary deception occurs outside the application code. Rather than exploiting a software vulnerability, the operators exploit the user’s trust in an official app store and in recognizable brands.

The post-installation behavior can remain technically simple, as it does here with advertising redirection, because persuading the user to install the application is the most critical stage of the operation.

The affected users did not need to follow a malicious link or sideload an APK from an unofficial forum. They searched an official application store for a product they recognized, and the search results presented an application with the expected name, logo, and visual identity.

How to protect yourself

• Install financial apps only from your bank’s own website or a verified link. If you are searching for an app store for a payment brand, you are in the exact position this campaign targets.
• Be suspicious of “guide,” “tutorial,” “helper” and “tips” apps for products you already use.
• Legitimate services do not need a third party to explain them.
• Check the developer’s name, not just the app name and icon. A real brand’s app is published by that brand.
• If a product doesn’t exist on your platform, no app can provide it. There is no Apple Pay, Siri, or iMessage for Android.
• Ignore install counts as a trust signal. Several of these apps had tens of thousands of downloads.
• Run mobile security software. McAfee Mobile Security detects this family.

Conclusion

Mobile security has genuinely improved. Permissions are narrower, sandboxing is stronger, exploit mitigations are routine, store review catches more than it used to, and AI now finds obfuscated payloads at a scale no human team could match. Every one of those defenses works but none of them was tested here.

Attackers move to one part of the system that cannot be patched: the judgment of the person holding the phone. And they apply pressure exactly where that judgment is weakest — a familiar logo, an official store, a name that matches what you searched for.

These apps are adware or a medium risk threat rather than malware because the fraudulent content is not theirs. The app opens a web page chosen by its operator; that page’s advertising slots are filled by open programmatic ad exchanges, which sell to whichever advertiser bids. The subscription-fraud pages belong to those advertisers.

As threat actors continue to exploit trust rather than software vulnerabilities, McAfee remains committed to protecting users, raising awareness, and collaborating across the industry to ensure that seemingly harmless applications do not evolve into large-scale fraud operations.

 IOC

Prevalent Apps

App title	Package	Play downloads	SHA-256 (primary build)
Roblox	com.sitaram.robloxgame1	50,000+	4f7b36963518e701276c77c1cad88d16fe64e8025c5223141c9af0eeb954ea63
Roblox	com.sitaram.robloxgame3	10,000+	c56d49a2f323ca0333778964fd58a7399aa60c8136a6a178adc1f222747b353f
Netflix Game Controller	netflixgamecontroller.uzair1	10,000+	2bdbd5c78a9d08b69983b965ae466210329b09eb26e5b491acdae9b822c729ab
Netflix Game Controller: Play	netflixgamecontroller.uzair2	10,000+	8cf714e0dab975c12cb5ac16837d7d2748a7f1672a3210a0e8e247dc405f8c68
Xbox Game Pass: Play Games	xboxgame.abdul2	5,000+	37539a20f07bd29e9285e7266ab29015c5467241bea43eee48f77769c42bbc7e
Fall Guys for Mobile	com.react.fallguysgame1	1,000+	d9ae6d844bf9269bee7d1f67f2f3d9e1d932974733068639c7204c2c92c391b1
Capkut – Video Editor	com.flintos.capcut2	50,000+	ba7a00fd597c04b7aa2efb59da853b1fcf34ba3bb63e7fbef2b9d9ef1a497641
Capcut Video Editor 2026	com.capcut.capvideoeditorapp58	10,000+	9b9e08b176d12c5e388b33c3e1fcdf2ba52b94cc6b310b56e3596eb783c26569
Siri Voice Assistant Android	com.shahdi.siri2	10,000+	b015de54db5073758909e5f3eaa90e73d7ff6f923195569d22395808b99a5557
Siri for Android	com.shahdi.siri1	5,000+	9a0881a67a7c35592216e0896e184d1ed960ef5c2280a6dafcfcbc0dcb29c099
Siri for Android	com.keli.siriapp1	1,000+	30a9f7461a0c11061b9349004f3dcd39ec763ec8bf1520ce655653fca67e183e
iMessage for Android	com.keli.imessage3	100+	ac46add9b7bb09779ab0a51924601e649431153c40d95c2ecc995e614ff2b89d
iMessage Android App	com.shahdi.imessage2	100+	83a95ceb22e24d5486f997d3ab7a8fa336cbf52c6489bfd20b285ccb16237f8e
Apple Health for Android	com.godwin.applehealth2	1+	5d2c823acf6e719553688626a113e79842d186de7d3203c011b032eb2f87adca
Huawei Health	huwaei.health1	10,000+	695eca22217b60b6218fbef51bcf660e569f7ce36c1d73a4646494d5489ae352
Casino Plus PH	casinoplus.pindo3	10,000+	3a50fa0ee7be36cbb1052254fbfdc0602abd7f52d69d7dc32d5c9ea6148ed16c
Aviator Game	com.aviator.aviatorgamejamantech2	1,000+	18af2b9a1e9db5f85c789252dbb0048a244e0a181f88b31c0969e6789b9657b8
GTA VI	com.react.gta6game1	N/A	78a098470a7926dc0bd36c625032fd421587aea88200fdbb877dbc655110c5f5

 

Financial Impersonators

App title	Package	Play downloads	SHA-256 (primary build)
PayPal – Fast Payments	com.paypal.wallawalled11	10,000+	601639168ac739e08fd267e86ba7eae440116e5b295fe01c00098bc2d9845405
Zelle® Easy Secure Payments	com.premkumar.zelleapp5	100,000+	8a943f50417c53fd9d8f522fdb69d76c96ca386c2416a43d20f9181350282bd1
Zelle® Faster Payments	com.premkumar.zelleapp2	50,000+	84fac9f350cd9d627392125cd3b06bac62321a2a36954605bd4680383ee86ae2
Zelle® – Faster Payments	com.zelleapp.devnexus2	10,000+	99122b355ba17d6fa55625414f9a48f8755f4a438374ce85c73c751e9f4fe6b6
Zelle® – Online Payments	com.mhd.zelleapp2	N/A	0022360894f15199c5f2fda5b5d8be3d26045d12ad50d80d02a23741601345af
Apple Pay	com.godwin.applepay3	N/A	aa6883d64438a4374a5f44b5180d8ff12ca3d0c9423946df092420291007fdaf

The post Android/RewaFake: Uncovering a Large-Scale Fake Apps Adware Campaign on Google Play appeared first on McAfee Blog.

There is a small tax many of us pay in our everyday interactions without even realizing it.

A package notification arrives, and we stop to check whether we actually ordered something. A recruiter reaches out about a job, but before replying, we research the person and the company. A bank alert appears, and instead of tapping the link, we open the banking app ourselves.

These are sensible habits. But McAfee’s latest research suggests the effort behind them is increasing the average American’s every day mental load.

Nearly three-quarters of Americans (74%) say they feel the need to double-check most things online before trusting them. Sixty-two percent say figuring out what is real takes more mental energy than it did a year ago.

That growing burden is one reason McAfee is introducing a new brand and product experience built around a broader idea of what protection should do. Good security shouldn’t demand more of people’s attention. It should help give some of it back.

That’s why the new McAfee experience is designed to do more than protect individual devices. It helps protect the things people rely on every day, their personal information, connections, devices, and accounts, all while making it clearer what’s safe, what needs attention, and what McAfee can handle for them.

Get quick alerts and easily update protections in McAfee’s app

That matters at a moment when attention is already stretched thin. AI is everywhere, and it has made it easier to produce convincing content at an enormous scale, adding to an already crowded attention economy. Increasingly, ordinary moments come with an extra question: Is this real?

And those questions have consequences. Our research found that 82% of Americans have changed how they behave online because of scams. Some have stopped buying from unfamiliar retailers. Others have ignored communications that turned out to be legitimate. Eighteen percent say scam concerns have even caused them to avoid responding to a job opportunity.

“I’ve accused my doctor’s office of being an AI,” says McAfee Threat Researcher Charles McFarland, recounting a time when even he thought something legitimate was fraudulent. “I had to apologize.”

Financial losses remain a serious part of the picture. Nearly one-third of Americans (31%) reported losing money to a scam in the past year. But measuring scams only in dollars misses something important. Scams are also making trust more expensive.

This report examines that growing cost: the attention Americans are spending figuring out what to trust, how the scam experience differs across all 50 states, and what protection should look like when staying safe increasingly competes for the same limited time and attention as everything else we do online.

Key Findings

McAfee’s research combines a nationally representative survey of 5,000 U.S. adults, with 100 respondents in every state, and McAfee Labs analysis of text-based scam activity across the U.S.

Together, the findings show how scams are affecting not only Americans’ wallets, but also their attention, trust and behavior online.

Scams are placing a growing burden on Americans’ attention. Nearly three-quarters (74%) say they feel the need to double-check most things online before trusting them, while 62% say figuring out what is real takes more mental energy than it did a year ago. (Survey)

That uncertainty is changing legitimate online behavior. Eighty-two percent say scam concerns have changed something they do online. Forty-four percent have avoided buying from an unfamiliar retailer, 37% have ignored a legitimate call, text or email, 34% have avoided a new app, website or service, 33% have avoided a legitimate link and 25% have abandoned an online purchase. (Survey)

Scams can make real opportunities harder to trust. Twenty-seven percent encountered a fake recruiter or job opportunity in the past year. At the same time, 18% say scam concerns have caused them to avoid responding to a job opportunity. (Survey)

Financial losses are widespread, and getting money back can be difficult. Nearly one-third of Americans (31%) report losing money to a scam in the past year. Among those who lost money, 53% recovered none. In Wyoming, Kansas, Louisiana, California and New Mexico, more than 70% of victims who lost money recovered nothing. (Survey)

Investment and cryptocurrency scams dominate text-based scam activity. McAfee Labs found them to be the leading scam-text category by volume in 47 of 50 states from May through July 2026. Maine, North Dakota and Michigan were the exceptions. In Maine and North Dakota, toll and traffic scams ranked first. Meanwhile, in North Dakota, loan and investment scams ranked first. (McAfee Labs)

The volume and intensity of scam texts varies considerably by state. Alabama averaged 5.14 scam texts per device, the highest in McAfee’s analysis. In North Dakota, scams represented 2.8% of analyzed text traffic, the highest concentration nationally. In Hawaii, devices receiving at least one scam text averaged 8.45 scam messages during the three-month analysis period. (McAfee Labs)

Some states experience especially high exposure or financial consequences. Ninety-five percent of Nevada respondents encountered at least one type of scam in the past year. In Ohio, 41% reported losing money to a scam. Thirty percent of New Jersey respondents say they encounter four or more scam attempts on a typical day. North Carolina stood out in the other direction: 42% of victims who lost money said they recovered all of it. (Survey)

Many scam texts are designed to begin a conversation rather than complete the scam immediately. Joining or clicking through to a WhatsApp group was the most common requested action in the scam texts McAfee analyzed, driven largely by investment and cryptocurrency schemes. The initial message may be only the first step in a longer attempt to build trust before asking for money. (McAfee Labs)

Displays the number of scams seen per unique device

The New Scam Landscape

Scams no longer occupy some separate, obviously suspicious corner of the internet. Increasingly, they imitate the ordinary business of being online.

In its analysis of U.S. text-based scams from May through July 2026, McAfee Labs identified 49 leading scam topics across 23 broader categories. They touched nearly every part of daily life: package deliveries and bank accounts, job offers and investments, shopping and subscriptions, health and utilities, relationships and family emergencies.

Example of one of the many types of delivery text scams consumers face

The full list spans Cloud Storage & Payment; Package & Delivery; Banking & Financial; Toll & Traffic Violation; Tax & IRS; Legal Threat & Law Enforcement; Government Impersonation; Tech Support & Security; Prize & Lottery; Romance & Relationship; Employment & Job Offer; Subscription & Service; Account Verification & Account Alerts; Investment & Cryptocurrency; Charity & Donation; Utility & Bill Payment; Health & Pharmacy; Family & Friend Emergency; Retail & Shopping; Loan & Debt Relief; Buying Property & Real Estate; Context-Free Links & Phone Numbers; and Other.

That breadth matters. The more scams resemble the normal messages people receive every day, the more ordinary life requires verification.

One category nevertheless dominated. Investment and cryptocurrency scams were the largest text-scam category by volume in 47 of 50 states. Only Maine, North Dakota and Michigan broke the pattern, with toll and traffic violation scams as well as loan and investments ranking first.

The prevalence of investment scams is important because many are not trying to steal money with a single text. They are trying to start a relationship.

The most common action requested in the scam texts analyzed by McAfee was clicking or joining a WhatsApp group, driven heavily by investment and cryptocurrency schemes. A message might promote an investing community or offer access to financial advice.

Example of a scam text attempting to move users to WhatsApp

Moving the recipient into a group or private conversation gives the scammer more time to establish credibility before money enters the picture. Plus, for many of us, social apps feel more personal and we more easily let our guard down when we move a conversation to these messaging platforms.

That helps explain why an unsolicited text that looks relatively harmless can still be the beginning of a much longer scam.

Other prominent scams rely on a different tactic: urgency. Fake account alerts can suggest that something needs immediate attention. Toll and traffic scams warn of an unpaid charge or violation. McAfee Labs also saw scammers impersonating T-Mobile with fake reward offers among the largest individual scam topics.

Example of scammers exploiting trusted brands like T-Mobile to dupe customers

The stories change, but the underlying objective is often the same. Scammers want people to act before they have time to question what they are seeing. And there is a lot to question.

Across the United States

McAfee’s analysis found meaningful differences in the amount of scam traffic reaching consumers around the country during the three month analysis period. Alabama recorded an average of 5.14 scam texts per device, the highest in the analysis. Georgia followed at 4.67, with Mississippi close behind at 4.64.

North Dakota stood out in a different way. There, scams represented 2.8% of all text traffic McAfee analyzed, the highest concentration in the country. Hawaii showed another pattern: among devices that received at least one scam text, the average was 8.45 scam messages during the three-month period. That was about 15% higher than Alabama, which ranked second at 7.35 scam texts per exposed device.

Rank	State	Scams per device	State	Scams per device scammed
1	Alabama	5.14	Hawaii	8.45
2	Georgia	4.67	Alabama	7.35
3	Mississippi	4.64	Ohio	7.29
4	Nevada	4.54	Florida	7.29
5	Tennessee	4.50	North Dakota	7.28

A third measure shows how concentrated scam traffic was within people’s overall text messages. North Dakota had the highest concentration in the country, with scams accounting for 2.8% of all text traffic McAfee analyzed.

These measures capture different dimensions of the same problem. The all-device average shows how many scam texts reached devices across a state overall. The exposed-device average shows how persistent scam activity was for devices that received at least one scam. And the share of total text traffic shows how prominent scam messages were within the broader messaging environment.

This shows each states top scam category by volume if Investments & Cryptocurrency scams are ignored. Notice these colors don’t necessarily match the colors from the previous graph.

For consumers, those distinctions may be invisible. What they experience is repetition: another message asking for attention and another decision about whether it deserves it.

AI raises the stakes further. It can make convincing scam content cheaper and faster to produce, while people are simultaneously encountering more AI-generated material in everyday online life. The result is an environment where the old advice to simply “look for something suspicious” becomes harder to apply reliably. Sometimes the suspicious thing looks perfectly ordinary.

That is why the next phase of consumer protection cannot depend on people becoming infinitely better at scrutinizing everything themselves.

America’s Scam Reality

McAfee’s consumer research shows what happens when that scam environment meets everyday life.

Most Americans are encountering scams regularly. Eighty-eight percent say they experienced at least one type of scam in the past year, and one in five say they typically encounter four or more scam attempts in a single day.

Yet frequency tells only part of the story. The more consequential finding may be what people are doing in response.

Eighty-two percent say scam concerns have changed their online behavior. Forty-four percent have avoided an unfamiliar retailer. Thirty-seven percent have ignored a legitimate call, text or email because they suspected a scam. Thirty-three percent have avoided clicking a legitimate message or link.

These are not examples of people falling for scams. They are examples of people trying not to.

Job scams make that tradeoff particularly tangible. Twenty-seven percent of Americans say they encountered a fake recruiter or job opportunity in the past year. Eighteen percent say concerns about scams have caused them to avoid responding to a job opportunity.

The financial consequences remain substantial when a scam does succeed. Nearly one-third of Americans (31%) report losing money to a scam in the past year. Among those victims, 53% recovered none of what they lost.

From our McAfee Labs Research: This shows approximate location of all the scams received

But a national average can obscure how differently people experience the problem.

Our full 50-state scam breakdown examines the data state by state, combining McAfee’s consumer survey with Labs telemetry to show where scam exposure is highest, where financial recovery is hardest, how concerns affect behavior, and which types of text scams McAfee is seeing across the country.

Across those differences, one finding remains remarkably consistent: Americans are adapting. They are checking more carefully and approaching unfamiliar interactions with greater caution, or even avoiding them altogether.

Those behaviors can help keep people safe. But that puts the mental load on back onto the everyday user. There is a limit to how much vigilance we should expect people to supply on their own.

The better question is how technology can take on more of that work for them. And that is the thinking behind McAfee’s new brand and product experience, beginning its rollout in the U.S. today.

How McAfee is Changing to Meet the Moment

McAfee’s new consumer experience is designed to make protection simpler to understand and easier to act on, while helping people navigate the moments where scams and other threats increasingly create uncertainty.

We’ll let you know if something seems suspicious and could put you at risk.

The experience is built to spot risks earlier, guide people clearly, and act when protection can be handled automatically. That means flagging suspicious messages, links, sites, exposed data, or unsafe connections; explaining what matters in plain language; and helping people take the right next step without requiring them to become security experts.

McAfee can alert you when your information appears in a data breach, help identify suspicious messages and links, protect your connection on risky Wi-Fi, monitor for exposed personal information, and help keep your devices and accounts safer.

Just as importantly, we’ve worked to make those protections understandable.

Instead of expecting people to know cybersecurity terminology or hunt through settings, the experience is designed to surface what matters and help people understand what to do next.

Because good protection shouldn’t create another job for you.

The refreshed McAfee experience makes it easier to see what needs your attention and how you’re protected.

What We’re Unveiling

That idea, making protection do more of the work, is built into the new McAfee experience we’re unveiling today.

We’ve brought protection for personal information, connections, and devices into one connected experience across PC, Mac, mobile, and tablet. Instead of asking people to piece together what’s protected or search for what needs attention, McAfee makes it easier to see both in one place.

The experience is also more personal. McAfee can alert you when your information or devices may be at risk and provide guided actions, that explain what needs your attention in plain language. The goal is not to give people more security information. It’s to help them understand what matters to them and what they can do about it.

And over time, the experience is designed to become more personal and relevant to each person, proactively identifying risks, alerting in the moment, and guiding when action is needed for the protections that matter most based on their digital life.

We’ve also made improvements to privacy tools like Online Account Cleanup, which now helps people prioritize higher-risk accounts, and Personal Data Cleanup, which makes it easier to see the personal information being found and removed on their behalf.

Taken together, these changes reflect where we believe consumer safety needs to go: less hunting through settings, less deciphering security alerts, and less relying on people to spot every threat themselves.

More protection that understands what matters, explains what needs attention, and works proactively in the background.

Here to give you peace of mind and lighten the mental load of life online.

Conclusion

The findings in this report suggest that the impact of scams extends beyond exposure and financial loss.

Every scam adds another small decision to an already crowded digital day: Is this message real? Is this link safe? Is this person who they say they are? As those decisions multiply, staying safe online becomes not just a security challenge, but a growing mental burden.

As people encounter more attempts to imitate legitimate messages, businesses and opportunities, the effort required to establish trust becomes a consequence in its own right.

That makes reducing the burden of verification an increasingly important part of consumer protection. People should not have to devote more of their limited attention to staying safe simply because scams are becoming harder to distinguish from everyday life online. That’s where McAfee comes in.

The post Your State’s Scam Reality: What New Research Reveals Across All 50 States appeared first on McAfee Blog.