Family Sentinel
Scam Watch · the Family Sentinel blog

What's actually landing in inboxes —
and how not to fall for it.

Plain-English intelligence on phishing, malware, ransomware, and the cons aimed at families — written by people who watch real inboxes for a living. No jargon, no fearmongering, no fluff.

August 13, 2026 · 5 min read

That package delivery text you didn't ask for? It's probably a scam.

Americans lost $470 million to text scams in 2024, and the most-reported type is the fake package delivery alert impersonating USPS, FedEx, or UPS. A criminal network has built more than 28,000 lookalike USPS websites to harvest card numbers. Here's what the text is really after, the one sign that always gives it away, and what to do if someone in your family already tapped the link.

SmishingUSPS scamFake deliveryElder fraudWhat to do
Read it →
August 11, 2026 · 14 min read

The payload-less inbox: quishing, SVG smuggling, and the lure with nothing to scan

Email security was built to find the bad thing in a message. The newest attacks win by making sure there isn't one: the QR code is just an image, the attachment is a picture that's secretly a program, the HTML file is empty until your browser fills it in — and the writing is flawless, because a machine wrote it. A technical breakdown of the techniques defeating signature-based filters, and the intent-based defenses that answer them.

QuishingSVG phishingHTML smugglingDeepfake BECThreat intel
Read the full analysis →
August 11, 2026 · 13 min read

Adversary-in-the-Middle: how phishing kits learned to walk straight through your MFA

"Turn on MFA" was good advice for a decade. It is no longer sufficient. A class of phishing kit now steals the live session token — the thing MFA can't protect — and replays it from the attacker's browser, no code, no prompt. How the reverse-proxy attack works, the phishing-as-a-service economy selling it by subscription, and the phishing-resistant defenses that actually stop it.

AiTMMFA bypassToken theftPhishing-as-a-serviceAccount takeover
Read the full analysis →
July 24, 2026 · 4 min read

The phone call that sounds exactly like your grandchild

Scammers can now copy a loved one's voice from a few seconds of audio — a video, a voicemail — and fake a panicked emergency call asking for money. It's the oldest trick with a frightening new twist. Here's exactly how it works, and the simple family plan that stops it cold: a safe word, a hang-up, and a call back.

AI voice cloneGrandparent scamElder fraudWhat to do
Read it →
July 7, 2026 · 8 min read

The 2026 Threat Landscape for Your Personal Inbox

Corporate email gets guarded by security teams and million-dollar tooling. Your personal inbox — where your bank statements, medical bills, and family photos live — gets a spam filter built to stop bulk junk mail. Here's what's actually coming at it this year: the phishing that impersonates your bank pixel-perfectly, the malware riding in "invoice" attachments, and the scams engineered for the people you love.

PhishingMalwareRansomwareScamsAccount takeover
Read the full report →
Why we watch the inbox

Everyone else watches the bank account — after the money's gone.

Americans over 60 lost $7.75 billion to fraud last year — up 59% in a single year, and the average successful scam costs a senior over $33,000. Credit and identity tools sound the alarm after the wire clears. Family Sentinel is the only watch that sits in the inbox, where the con is built and believed, and steps in before the money moves.

Before the money moves

We see the scam email or text first — where there's still time to stop it, not after.

We alert the family, not just the target

The hardest part of a scam is admitting it almost worked — so no one has to confess to be protected.

Read-only & respectful

Nothing installed on the device, no passwords shared, revoke in one click. Oversight that never feels like a leash.

A real person behind it

Every serious threat is verified by a working Security Architect before you're alarmed — and when you call, a person answers.

Start your free month →
Never miss one

Get Scam Watch in your inbox every Sunday.

A short, plain-English briefing on the newest phishing, malware, and impersonation attacks — and how to spot them. Free, and unsubscribe in one click.

We never sell or share your address — ever.