Observed Signal · Mar 5, 2026 · Security Advisory · Source: techcrunch · Impact: 2/5 · Sentiment: Negative
Beware: Scammers Impersonate TechCrunch to Steal Data!
TechCrunch warns that an increasing number of scammers are impersonating its reporters, editors and events staff to contact companies and extract sensitive business information. Fraudsters craft convincing media inquiries, sometimes using email address formats that mimic TechCrunch conventions and conducting phone interviews to dig for proprietary details. Former Yahoo colleagues say the activity aligns with a persistent threat actor that has used TechCrunch impersonation for account takeover and data theft, targeting cryptocurrency, cloud and other tech firms. TechCrunch published verification guidance — check its staff page and alternate contact methods — and a list of recently observed spoofed domains.
Industry-facing fraud advisory about impersonation and data-theft risks affects media trust and corporate verification processes, but is not a platform policy change or technical release.
Track Yahoo Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- Scammers are impersonating TechCrunch reporters, editors and event leads to contact companies.
- Fraudsters use convincing email templates, some mimicking TechCrunch address conventions, and phone interviews to extract sensitive information.
- Former Yahoo colleagues linked similar impersonation attempts to a persistent threat actor that has used the tactic for account takeover and data theft targeting crypto, cloud and other tech companies.
- TechCrunch published verification guidance and a list of recently observed impersonating domains (multiple spoofed domains provided).
Connected Companies & Entities
3 Entities mappedRelated Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Wise calling you? Check if it’s real in seconds
Impersonation scams are getting more common — and more convincing¹². Scammers may call you directly pretending to be our fraud team, and urge you to move...
Scammers Abuse Internal Microsoft Account to Send Spam
Scammers have been exploiting a loophole to send spam emails appearing to come from an internal Microsoft notification address (msonlineservicesteam@microsoftonline.com) that is normally used for legitimate account alerts like two-factor authentication. Attackers apparently create new Microsoft accounts and use that access to send emails with subject lines and links that mimic official alerts, directing recipients to scam websites. The Spamhaus Project confirmed the abuse and said the activity dates back several months; it has notified Microsoft. TechCrunch contacted Microsoft, which acknowledged the inquiry but has not confirmed whether the issue is resolved. The report notes similar incidents at other companies, and places this episode in a broader pattern of threat actors abusing trusted notification systems to phish users.
Brand Impersonation Is Hard to Detect and Stop
This a16z analysis uses Doppel’s Threat Graph (Apr 2025–Mar 2026) to quantify brand impersonation across the internet. Brands self-discover only a small share of confirmed fakes (≈9% before continuous monitoring), while most impersonation campaigns operate across multiple surfaces (80.6% of affected brands saw fakes on two or more surfaces). Takedown requests result in content or hosting removal in ~97% of cases that respond, but domain recurrence is rapid: ~60% of taken-down domains host a new confirmed fake within 24 hours and ~70% within 90 days. A relatively small number of professional operator groups drive a large share of the volume (the busiest tenth accounts for nearly half). The article argues that an effective defense requires always-on, multi-surface monitoring, rapid action, and mapping of operator infrastructure rather than one-off artifact takedowns.
Receive all future signals for Yahoo & competitors in your briefing
Never miss material M&A deals, leadership changes, account wins, or product rollouts. Polaris7 monitors 20,000+ primary sources 24/7, delivering verified telemetry directly into your executive briefing.