Microsoft Tops Phishing Scams: Are You Next?

In the third quarter of 2026, Microsoft emerged as the most impersonated brand in phishing attempts, capturing a striking 33% of all such scams. This represents a substantial jump from the 23% seen in the previous quarter, indicating a significant shift in attacker focus. Scammers are evolving their tactics, moving beyond traditional password theft to exploit trust in AI and developer tools, and compelling victims to run malicious commands or install remote access software.

Apple and Google followed Microsoft, tied for second place with 8% of phishing attempts each. This concentration on Microsoft's name highlights where attackers directed their efforts during the period, rather than indicating user vulnerability. Routine messages, like password resets or delivery notifications, continue to be the most successful lures due to people's tendency to act quickly on familiar alerts.

Consumers reported impostor scams more frequently than any other fraud type in 2023. The Federal Trade Commission's figures underscore that posing as a trusted entity is a widespread tactic. This trend is amplified as companies' names become more valuable disguises when more people rely on their services daily for essential functions like email, file storage, and online purchases.