---
title: "Fraud"
description: "1 posts about Fraud, summarised, each linking to the original."
---

# Fraud
> 1 posts about Fraud, summarised, each linking to the original.

## Articles

### [September 2026 Fraud Update: Phishing Trends, Third-party Safety and Latest Releases](https://yomu.fyi/post/september-2026-fraud-update-phishing-trends-third-party-safety-and-lat.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Dan Nieters, Rohit Agarwal, Alena Eissman
- Published: Oct 8, 2026
- Type: Announcement

Twilio’s Q3 2026 fraud update covers phishing trends, third-party safety, and new releases. Over 80% of phishing originating from SendGrid was due to account takeovers, with attacks centered on delivery service spoofing, invoice fraud, and targeted Japanese campaigns impersonating brands like Amazon and Mercari. Attackers used fabricated forwarded threads, typosquatted domains like tvvilio\[.\]org, familiar names, AI-generated email templates, and associated phone calls, sometimes spoofing Twilio’s help line. To secure third-party integrations, Twilio recommends scoping access strictly, practicing credential hygiene, and reviewing audit integrations regularly, and now recommends OAuth 2.0 Client Credentials over auth tokens or API keys for scoped short-lived tokens. New releases include IP ACL with Dry Run mode, which logs blocked requests without enforcement to prevent accidental lockouts before real enforcement.