Close Menu
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Facebook X (Twitter) LinkedIn
Facebook X (Twitter) LinkedIn
Information Security BuzzInformation Security Buzz
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Subscribe
Information Security BuzzInformation Security Buzz
Home - Phishing - From Sweethearts to Swindlers: Valentine’s Day Fraud Surges
Phishing Attacks BEC Latest News News & Analysis

From Sweethearts to Swindlers: Valentine’s Day Fraud Surges

Kirsten DoyleBy Kirsten DoyleFebruary 14, 2025Updated:February 14, 20256 Mins Read
Share LinkedIn Twitter Facebook Copy Link Email
Valentine’s Day
Share
Facebook Twitter LinkedIn Email Copy Link
Quick AI Summary
ChatGPTClaudeGeminiGrokPerplexityDeepSeekCopilot

As people celebrate Valentine’s Day today, malicious actors are jumping on the love bandwagon in an opportunity to exploit heightened emotions and consumer spending with a wave of scam emails. 

According to the latest findings from Bitdefender Antispam Lab, a whopping 50% of all Valentine’s Day-themed spam emails between 13 January 13 and 7  February this year, were classified as scams—a steep rise from 25% in 2024. Similarly, new data from KnowBe4 revealed a 34.8% spike in Valentine’s Day-related phishing attacks compared to February 2024.  

Love Is in the Air—and So Are Phishing Scams

Bitdefender’s research highlights a growing trend of fraudulent Valentine’s Day emails, with scam-related messages peaking on 21 January and 2 February.  

According to Bitdefender, the United States came out tops as the primary source of Valentine’s Day spam, accounting for more than half (58%) of detected cases, followed by Indonesia (9%), India (5%), and the UK (5%). Spam emails also primarily targeted US inboxes, with 49% of messages landing in American accounts, followed by Germany (14%) and Ireland (11%). 

Cupid’s Arrow or a Clickbait Trap?

KnowBe4’s Threat Research team observed a significant increase in phishing attacks leveraging brand impersonation to trick victims into clicking malicious links or downloading harmful attachments. The most common methods identified include: 

  • Fake Dating Websites and Platforms – Scams promoting fraudulent dating services to steal user information, enroll victims in costly subscriptions, or engage in romance scams. 
  • Booking.com Phishing Emails – Fraudsters leveraging fake Booking.com emails to steal login credentials amid an increase in romantic getaways. 
  • Brand Impersonation Scams – Among the top five brands impersonated in Valentine’s-themed phishing campaigns are Hilton Hotels, Marriott Bonvoy, and Amazon. 
  • Malicious Links as Primary Attack Vectors – 82.6% of Valentine’s-related phishing emails contained malicious links, followed by attachments (11.2%), social engineering (4.8%), and malware (1.5%). 

Roses Are Red, Scams Are Too

According to Bitdefender Antispam Lab, scammers employ a range of tactics to manipulate unsuspecting recipients. One of the most common methods is the survey-based lure, where recipients are promised exclusive Valentine’s Day gifts in exchange for answering a few simple questions.  

But there’s no free lunch. These surveys are designed to harvest names, addresses, and payment details, often asking for a small “processing fee” or credit card details for “verification,” which results in financial fraud. 

Another observed tactic involves localized scam templates, which are customized for different regions to make them appear more authentic. Fraudsters often impersonate well-known brands to build credibility and deceive victims into providing sensitive information. 

Some of the most widespread Valentine’s Day scams identified by Bitdefender this year include: 

  • Fake Cadbury Chocolate Giveaways – Fraudulent emails promising a free Cadbury Ultimate Selection. 
  • Costco Valentine’s Day Basket Scam – A bogus contest offering a curated selection of treats. 
  • Valentine’s Flower Basket Scam – Victims are told they have won a premium flower basket but must pay shipping fees to claim it. 
  • La Vie Est Belle Perfume Scam – A campaign falsely informing recipients they have been selected for a free bottle of Lancôme’s La Vie Est Belle Eau de Parfum. 
  • Rituals Valentine’s Package Scam – A fake prize scheme requiring victims to enter personal details and pay for shipping. 

Love, Lies, and Manipulation

Romance scams are getting more aggressive and harder to spot, says Chloé Messdaghi, Founder of  SustainCyber.  Scammers are weaponizing AI to create fake profiles, deepfake videos, and run chatbot-driven conversations that feel real—they know how to tap into emotions fast. 

“We can’t keep placing the burden solely on individuals to ‘watch for red flags’ when those flags are increasingly invisible. Platforms need to step up with stronger fraud detection and identity verification, and financial institutions should be doing more to catch suspicious transaction patterns before people lose everything. This is a collective problem that requires a collective response—tech, finance, and policy all need to work together to protect people from being manipulated and financially gutted.” 

From “Soulmate” to “Scam Artist” in 60 Seconds

“Romance scams are at an all-time high, leading to significant financial losses for many individuals,” says Lucy Finlay, Director, Secure Behaviour and Analytics at ThinkCyber Security  According to the National Fraud Intelligence Bureau (NFIB), there were  8,792 reported cases of romance fraud last year, resulting in total losses exceeding £94.7 million. On average, each victim lost £10,774.

“Scammers use various deceptive techniques, with emotional manipulation being one of the most common. These threat actors take advantage of cognitive biases, which are natural tendencies in the way we all interpret information and make decisions,” Finlay explains.  

Glitz, Glam, and Grand Larceny

“For instance, many people subconsciously associate wealth and glamour with trustworthiness and good character due to a cognitive bias called the ‘halo effect.’ This can lead victims to assume that attractive or well-dressed individuals are inherently good,” Finlay says.  

The notorious ‘Tinder Swindler’ is a prime example, as he posed as a wealthy, jet-setting diamond mogul, to charm women online before scamming them out of millions of dollars. Similarly, MTV’s hit show Catfish highlights how people can form deep emotional connections with individuals who misrepresent their real identity online, often maintaining these deceptions for years, Finlay adds. 

Finlay offers some tips to avoid falling victim to Valentine’s Day scammers: 

  • Always trust your gut. When something doesn’t feel right or feels too good to be true, unfortunately it often is. 
  • Avoid sharing personal or sensitive information when interacting with individuals you don’t know very well online. 
  • Always remain cautious about requests from strangers online, particularly in the context of money. Further advice can be found on  actionfraud.police.uk.  
  • If something feels off, make sure to report any suspicious activity. In doing so, this can help prevent others from falling into the same trap. 
  • Be wary if they avoid meeting in person. Frequent excuses, such as work obligations or financial troubles, are common red flags in romance scams. 
  • Watch out for travel-related money requests. Scammers often claim they need funds to visit you but always encounter last-minute issues preventing them from traveling. 
Kirsten Doyle
Kirsten Doyle
Information Security Buzz News Editor

Kirsten Doyle has been in the technology journalism and editing space for nearly 24 years, during which time she has developed a great love for all aspects of technology, as well as words themselves. Her experience spans B2B tech, with a lot of focus on cybersecurity, cloud, enterprise, digital transformation, and data centre. Her specialties are in news, thought leadership, features, white papers, and PR writing, and she is an experienced editor for both print and online publications.

  • Kirsten Doyle
    Palo Alto warns of active exploitation of GlobalProtect authentication bypass flaw
  • Kirsten Doyle
    CrowdStrike, Google, and Shadowserver Foundation disrupt Glassworm botnet
  • Kirsten Doyle
    Threat Actors Deploy Tiflux RMM for Persistent Remote Access
  • Kirsten Doyle
    Major US telecom providers debut C2 ISAC to counter AI-driven threats

The opinions expressed in this post belong to the individual contributors and do not necessarily reflect the views of Information Security Buzz.

Share. Facebook Twitter LinkedIn Email Copy Link

Related Posts

New Phishing Kit Starkiller Defeats Multi-Factor Authentication

February 23, 20264 Mins Read

ReliaQuest Uncovers Social Media Phishing Campaign Built on Trusted Tools

January 22, 20266 Mins Read

What Happens after a Phishing Email Lands in Your Inbox?

January 5, 20266 Mins Read
ISB-Bora-Side-Bar

No se ha podido establecer conexión. Error 429

 
ISB-Bora-Side-Bar
Black ISB Logo

Information Security Buzz is an independent resource that provides the experts’ comments, analysis, and opinion on the latest Cybersecurity news and topics

X (Twitter) LinkedIn Facebook RSS

Working With Us

  • About Us
  • Advertise With Us
  • Contact Us

Write For Us

  • How To Contribute

The Pages

  • Privacy Policy
  • Cookie Policy
  • AI Policy
  • Terms & Conditions
  • Copyright Notice

Information Security Buzz and all its contents are copyright © 2014-2025. All rights reserved. All third-party trademarks are recognized.

Type above and press Enter to search. Press Esc to cancel.

Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}