Scammers know the best time to text you

Malwarebytes Study Reveals Scammers Are Timing Their Attacks to Your Busy Hours

A cybersecurity firm has released new data showing that fraudsters are increasingly sophisticated about when and where they contact potential victims. The research, conducted by Malwarebytes between mid‑April and mid‑July 2026, analyzed more than 20 different scam types and traced their activity across email, social media, phone calls, SMS and the web.

When the Phone Rings: Noon Is the Hotspot

The study found that U.S. users received the highest volume of scam texts around 12:00 p.m. Eastern time. At that hour, messages surged by nearly 9 fold compared with the quietest time of day at 1:00 a.m. The number of fraudulent texts also climbed steadily as the week progressed, peaking on Friday with roughly a 50 percent increase over Monday levels.

“This pattern suggests scammers are deliberately timing campaigns to hit people when they are most likely to be distracted,” the researchers said. “A lunchtime text is more likely to be skimmed, and an urgent‑looking message that arrives at the end of the workweek can push victims toward impulsive action.”

Platform‑Specific Tactics

Different scams favor different channels:

• Job‑search fraud is almost always delivered via email. A recruiter posing as a legitimate company can hide in a busy inbox, making it easy to bypass spam filters.
• Romance scams rely on social media, where the social context can make a fake romance feel more natural.
• Tech‑support scams often begin with a phone call, immediately placing pressure on the victim to take action before a “system failure” can occur.

Across all categories, the web remains the primary vector for fraud, followed by email and then SMS. Malwarebytes reported that the company’s software blocks around 500,000 phishing sites each day, many of which imitate banks, major retailers, technology firms, and government agencies.

Familiar Faces and Logos

The report also highlighted the use of well‑known personalities and brands to boost credibility. The most frequently impersonated individual was YouTube star Jimmy Donaldson, also known as MrBeast, whose likeness appeared in about 30 percent of the impersonation scams examined. Elon Musk and Donald Trump followed, often as part of schemes that promise cryptocurrency rewards or require an upfront fee.

When it comes to corporate branding, the five most commonly spoofed companies were Google, Microsoft, Apple, Roblox, and Amazon. Google, in particular, appeared at least twice as often as Amazon. The use of familiar logos can give scammers a leg up; a “Google account warning” is more likely to be viewed as legitimate than an unknown message.

Gaming communities are also a hot spot. Roblox, Steam, Discord and Minecraft were among the most impersonated platforms. From mid‑June to mid‑July, Roblox‑based scams rose 15 percent and Steam‑based scams up 19 percent. Roughly half of the gaming scams could result in losses of $1,000 or more, a risk especially high for younger players who may trust in‑game offers.

Why Timing Matters

Scammers are no longer sending random messages. The data indicate a strategic approach: send a text when you are most likely to glance at it, or a call when you are most likely to answer. By aligning with your routine—lunch breaks, the rush to finish work, or the excitement of a Friday—their chances of success rise.

The study’s findings are a reminder that, while the timing of an alert can’t be avoided, the response can. When a message demands immediate payment, threatens a penalty, or asks for sensitive data, experts advise verifying the claim through official channels: check the company’s website, use its mobile app, or contact known customer‑service numbers before taking any action.

Protecting Yourself

Malwarebytes continues to block malicious sites and monitor scam activity worldwide. Users can add spam filters on phones, enable built‑in call‑blocking features, and keep browsers and antivirus tools updated. If a scammer’s message appears legitimate, the safest step is to pause, research, and only act once the legitimacy is confirmed.

The firm’s research underscores that the fight against fraud is as much about timing and context as it is about technology. By staying aware of when scammers reach out, consumers can reduce their risk of falling victim to these increasingly sophisticated attacks.