September 2026 Fraud Update: Phishing Trends, Third-party Safety and Latest Releases

We’re back at it again, builders, with our quarterly fraud update for Q3 2026! First up, we’re covering some of the latest phishing trends and diving into one particular type of financial scam. We’ll highlight the unique tactics and techniques shared across these attacks, along with steps you can take to keep from getting scammed. We’ll also shine a light on a recent incident involving a Twilio third-party application and cover best practices for sharing credentials safely with any external tools your organization is planning to support. Finally, we’ll wrap up with recent product releases to help prevent fraud and abuse in your accounts. Let’s dig in. Our fraud teams actively track top trends and offenders in phishing and other forms of fraud week-over-week. While over 80% of phishing in Q3 originating from SendGrid was due to account takeovers (more on this later), the broader attack trends we observed centered on three main areas: - Delivery service spoofing: Fake shipping alerts impersonating major carriers like UPS and FedEx - Invoice fraud: Malicious billing notices designed to extract unauthorized payouts - Targeted Japanese campaigns: Japanese-language messages spoofing household brands like Amazon and Mercari to target businesses in Japan

This is a short preview supplied by the publisher. The charts above are separate ApplyDjinn observations. The complete story, including images and updates, remains with the publisher.