Threat Intelligence Directory
Fraud

Fake Charity / Disaster Relief Fraud

Attack Trigger

Genuine compassion following a high-profile disaster, tragedy, or news event

What Attackers Want

$25–$500 per victim, scaled across thousands of donations

How This Attack Works

Fraudulent charity campaigns are launched within hours of major disasters, tragedies, or viral news events. Scammers register lookalike domain names, create convincing donation pages, and solicit funds that go entirely to criminals. Some impersonate legitimate charities like the Red Cross or Salvation Army to exploit their trusted reputation.

Red Flags to Watch For

  • Charity name is a slight variation of a well-known organization
  • Donation link does not go to the official charity domain
  • No EIN, charity registration number, or verifiable 990 filing provided
  • Payment requested via wire transfer, Zelle, or cryptocurrency rather than a card
  • Website was registered within the past few days — check WHOIS records
  • No physical address, phone number, or verifiable staff listed

Known Malicious Domains

These domains have been associated with this attack. Never click links going to these addresses.

  • disaster-relief-donate.comMALICIOUS
  • emergency-charity-fund.netMALICIOUS
  • hurricane-relief-now.comMALICIOUS
  • veterans-support-fund.netMALICIOUS

Glance automatically blocks emails from domains on this list. Domain list is not exhaustive — attackers register new domains continuously.

How Glance Stops This

  • Domain similarity analysis catches lookalike sender addresses at millisecond speed
  • SPF / DKIM / DMARC validation flags authentication failures before you ever see the email
  • VirusTotal + Google Safe Browsing checks every link in real time
  • Urgency language detection scores the email higher for manual review
  • Known malicious domain blocklist updated continuously from live scan data

Don't wait to get hit.

Glance scans every incoming email against 12 detection layers — including the exact tactics described above — before it reaches your inbox.

Protect My Inbox — Free