Consequence Lab
Saved demonstration
Reading the record
Nothing is shown until the record has been checked
A few of them are enough to sound like someone you trust.
The message is built here. The reply stays here. Both disappear when you leave. About 90 seconds.
Nothing of yours was used.
The message, sender, and organization were written for this experience. There was no live sender, working link, request for money, or request for credentials. Real scams borrow real names: Google is the most impersonated brand and MrBeast the most impersonated person in scams Malwarebytes tracks.
The displayed details were reconstructed for this experience.
The reply was supplied by this experience and never left the page.
Stop, verify another way, and tell someone. The full steps are on the closing screen.
Two in three people say scams can be hard to distinguish from legitimate content. There was no obvious warning here to miss.
Malwarebytes · Tap, Swipe, Scam · 2025 survey of 1,300 adults
The breach names and data categories came from a synthetic test identity. The source verifies which categories were exposed; it never returns the exposed values themselves.
The person, the address, the sender, and the organization in this reconstruction were written for this experience. The breach source does not return exposed values. The page uses invented values only to make the transformation visible.
The reply was written in advance. Selecting it places the words in the on-screen composer. Pressing send starts the reveal. No message leaves this page, and the reply is not stored.
The message was written in advance. The sending organization is fictional. There is no live sender, working business, link, request for money, request for credentials, or working impersonation.
The survey finding above comes from Malwarebytes’ 2025 Tap, Swipe, Scam research. The online study surveyed 1,300 adults aged 18 and older across the United States, United Kingdom, Austria, Germany, and Switzerland from March 11 through March 24, 2025. Results were weighted. The finding is self-reported and should not be read as the incidence rate of this exact message. The platform, timing, impersonation, and Scam Guard figures come from Malwarebytes threat research collected between April 15 and July 14, 2026.
The midday golden-hour figure, the Friday figure, the impersonation rankings, and the 1-in-5 $1,000 risk figure come from the Malwarebytes Scam Trends 2026 report, published September 2, 2026.
“I felt so stupid to fall for such a stupid trick.”
“Because I was so ashamed, I didn’t file a report.”
Anonymized responses from the same survey. Only 17 percent of people who experience a mobile scam report it. If a real message already got an answer from you, telling someone is the step that breaks the pattern.
To weld the message to the present, this page may also read the browser and system name, plus the local time and timezone. Everything shown stayed in this page’s memory. Nothing was stored, and no fingerprint was taken: no screen, hardware, graphics, or font inventory was ever read.
This page did not send or store the simulated reply.