By the Smili Phone team
A new report has an uncomfortable finding: the scammer is already in your pocket. BioCatch's 2026 Global Scams report says nine out of every ten scam sessions now start on a mobile phone, up five percentage points from last year. Banking scams rose 35% year over year. And the trick is rarely a technical break in. The scammer talks you into moving the money yourself.
How a mobile scam actually unfolds
BioCatch traced a typical scam session across five stages, and the pattern is eerie once you know it. Often a live phone call is running during the banking session: about 30% of reported voice-based social engineering sessions include one. The victim lingers on account overview pages with barely any activity, which analysts read as someone listening to instructions. When adding a new payee, the account number gets typed in bursts of three digits with short pauses, the rhythm of someone taking dictation. By the payment review stage, short repeated taps keep the app from timing out while the victim waits to be told what to do next.
Which scams are growing fastest
Purchase scams are the most common kind, a full third of all scam attempts. Romance scam attempts rose 23%. Employment scams grew the fastest of any type in 2026, with reported victims up 258%. And investment scams are the costliest by far, with an average case value five times the overall average across all scam types.
Why the phone is the perfect tool for it
Artificial intelligence has changed the economics. As Thomas Peacock, BioCatch's Director of Global Fraud Intelligence, put it: AI has lowered the barrier to entry for aspiring scammers, allowing more bad actors to create more convincing scams at a scale never seen before. And here is the part banks keep repeating: scammers do not need to break into an account if they can persuade the customer to move the money for them. The login comes from a device the bank has seen hundreds of times, the face or fingerprint matches, and the payment carries your own approval. Every control passes, because the right person is paying. The only question is whether that person is acting on their own judgment.
Red flags worth memorizing
- An urgent call while you are inside your banking app. That combination is the hallmark of this playbook.
- Instructions to install remote-access software, or to stay on the line while you tap through screens.
- Panic pressure. "Do it now or the money is gone" is not how real banks talk.
- Typing account details someone is dictating to you. If you hear numbers read out digit by digit, stop.
Simple habits that stop most of these
- Hang up and call your bank's official number yourself. A real bank will never mind. This single habit defeats most of the playbook above.
- Never install remote-access apps at a stranger's request, and never hand over codes from text messages. Legitimate support does not ask for either.
- Keep your phone's software updated. Updates close the holes these schemes sometimes lean on. If an update stalls or fails on your phone, bring it by our Escondido shop and we will get it sorted with you.
- Slow down. Scams need speed. Honesty can wait.
No app can protect you from being rushed, but knowing the playbook makes the rush obvious. Share this one with someone who is less tech confident, the people these scams hunt first.
Related: your phone's hidden security mode · fake iPhone Duo pre-order sites spread malware
