Phishing Explosion: How Scammers Weaponized COVID Stimulus in 2021

During the COVID-19 pandemic, phishing campaigns increased significantly, often impersonating government relief programs and financial institutions.

The Pandemic Phishing Surge As governments distributed economic relief funds, cybercriminals exploited urgency through phishing emails designed to steal credentials or financial information. The Federal Trade Commission (https://www.ftc.gov/) and FBI (https://www.fbi.gov/) both reported increased phishing and impersonation scams during the pandemic, particularly those linked to stimulus payments and unemployment benefits.

What the Data Actually Supports Cybersecurity reporting shows broader trends:

1. Phishing and email-based attacks increased significantly during 2020–2021 according to the Verizon Data Breach Investigations Report (https://www.verizon.com/business/resources/reports/dbir/)
2. Spam made up a large share of global email traffic, but spam is not the same as phishing, which is more targeted and malicious
3. Financial losses from phishing are reported in the hundreds of millions to billions annually across all cybercrime categories (FTC reporting: https://www.ftc.gov/reports)

Click Rates and User Vulnerability Phishing effectiveness varies widely depending on targeting:

1. General phishing campaigns typically have low success rates in broad email distribution
2. Spear phishing campaigns are significantly more effective due to personalization and trust exploitation
3. The Verizon DBIR consistently identifies human interaction as a primary breach vector (https://www.verizon.com/business/resources/reports/dbir/)

Why Phishing Worked During the Pandemic

Phishing effectiveness increased due to real-world conditions:

1. Increased reliance on digital communication during lockdowns
2. Financial urgency around stimulus payments
3. Overloaded IT and government support systems
4. Higher exposure to unfamiliar government-related digital communications The ENISA notes that crisis periods significantly increase susceptibility to phishing due to emotional pressure and reduced verification behavior (https://www.enisa.europa.eu/).

Common Attack Style in 2021 Phishing campaigns often included:

1. Fake government or stimulus payment emails
2. Lookalike domains impersonating official agencies
3. Urgent requests for login verification or banking details
4. Credential-harvesting pages designed to mimic official portals