惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

酷 壳 – CoolShell
酷 壳 – CoolShell
H
Hacker News: Front Page
P
Palo Alto Networks Blog
T
ThreatConnect
Apple Machine Learning Research
Apple Machine Learning Research
博客园_首页
T
True Tiger Recordings
P
Privacy & Cybersecurity Law Blog
B
Blog
IT之家
IT之家
Last Week in AI
Last Week in AI
F
Full Disclosure
Hacker News: Ask HN
Hacker News: Ask HN
C
Comments on: Blog
Microsoft Azure Blog
Microsoft Azure Blog
C
Cybersecurity and Infrastructure Security Agency CISA
Microsoft Security Blog
Microsoft Security Blog
博客园 - 【当耐特】
N
News and Events Feed by Topic
NISL@THU
NISL@THU
腾讯CDC
雷峰网
雷峰网
Security Latest
Security Latest
李成银的技术随笔
M
Microsoft Research Blog - Microsoft Research
L
LangChain Blog
L
Lohrmann on Cybersecurity
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
C
Check Point Blog
Y
Y Combinator Blog
Recent Announcements
Recent Announcements
博客园 - Franky
N
News | PayPal Newsroom
V
V2EX
A
About on SuperTechFans
The Register - Security
The Register - Security
月光博客
月光博客
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Google Online Security Blog
Google Online Security Blog
MyScale Blog
MyScale Blog
Cisco Talos Blog
Cisco Talos Blog
Vercel News
Vercel News
WordPress大学
WordPress大学
C
Cyber Attacks, Cyber Crime and Cyber Security
The Hacker News
The Hacker News
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
爱范儿
爱范儿
A
Arctic Wolf
L
LINUX DO - 最新话题
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More

Malwarebytes

Fake malware-signing service Fox Tempest dismantled by Microsoft Firefox 151 packs big privacy upgrades into a small update Biometrics, diagnoses, and bank details exposed in major healthcare breach Facebook scam promises cheap Aldi meat boxes, steals payment info instead YouTube wants your face to fight deepfakes Microsoft is changing Edge’s plaintext password behavior A week in security (May 11 – May 17) AI is distorting the Holocaust (Lock and Code S07E10) Attackers replaced JDownloader installer downloads with malware Meta’s confusing new approach to chat privacy Why Malwarebytes blocks some Yahoo Mail redirects Deepfake sextortion forces schools to remove student photos from websites Texas sued Netflix over claims it secretly collected and sold users’ data May 2026 Patch Tuesday: no zero-days but plenty to fix Fake Claude search results lure Mac users into ClickFix attack 1 in 8 employees have sold company logins or know someone who has Stolen Canvas data was “returned” after hacker agreement, Instructure says Yarbo responds to robot flaws that could mow down their owners A week in security (May 4 – May 10) Microsoft says Edge’s plaintext password behavior is “by design” ShinyHunters escalates Canvas attacks with school login defacements Massive AI investment scam network spans 15,500 domains If a fake moustache can fool age checks, is the Online Safety Act working? Google Chrome’s silent 4GB AI download problem Attackers adopt JavaScript runtime Bun to spread NWHStealer Millions of students’ personal data stolen in major education breach Update WhatsApp now: Two new flaws could expose you to malicious files Cyberattacks are raising your prices (Lock and Code S07E09) Thousands of Facebook accounts stolen by phishing emails sent through Google The 2026 World Cup scam economy is already running before the first whistle A week in security (April 27 – May 3) 3 easy-to-miss cybersecurity risks for small businesses Actively exploited cPanel bug exposes millions of websites to takeover More PayPal emails hijacked to deliver tech support scams Hackers stole hundreds of thousands of Roblox accounts: Here’s what to do Researchers built a chatbot that only knows the world before 1931 Microsoft won’t patch PhantomRPC: Feature or bug? Scam-checking just got a lot easier: Malwarebytes is now in Claude Fake CAPTCHA scam turns a quick click into a costly phone bill Chinese engineer stole US military and NASA software for years A week in security (April 20 – April 26) Medical data of 500,000 UK volunteers listed for sale on Alibaba How cyberattacks on companies affect everyone Apple fixes iOS bug that kept deleted notifications, including chat previews Roblox clamps down on chats and age checks as legal pressure builds Malicious trading website drops malware that hands your browser to attackers Researcher claims Claude Desktop installs “spyware” on macOS Fake Google Antigravity downloads are stealing accounts in minutes Real Apple notifications are being used to drive tech support scams Android 17 ends all-or-nothing access to your contacts Big Tech can stop scams. They just don’t (Lock and Code S07E08) Mythos: An AI tool too powerful for public release A week in security (April 13 – April 19) This old-school scam is still working “Your shipment has arrived” email hides remote access software Browser Guard gets even better with Access Control “iCloud storage is full” scam is back, and now it wants your payment details A fake Slack download is giving attackers a hidden desktop on your machine Booking.com breach gives scammers what they need to target guests AI clickbait can turn your notifications into a scam feed Fake YouTube copyright notices can steal your Google login From fake Proton VPN sites to gaming mods, this Windows infostealer is everywhere April Patch Tuesday fixes two zero-days, including one under active attack Credit Resources Vault: Why this credit email set off our scam alarms Omnistealer uses the blockchain to steal everything it can ChatGPT under scrutiny as Florida investigates campus shooting Simply opening a PDF could trigger this Adobe Reader zero-day A week in security (April 6 – April 12) Fake Claude site installs malware that gives attackers access to your computer ClickFix finds a new way to infect Macs Scammers pose as Amazon support to steal your account NSFW app leak exposes 70,000 prompts linked to individual users 30,000 private Facebook images allegedly downloaded by Meta employee This fake Windows support website delivers password-stealing malware Your extensions leak clues about you, so we made sure Browser Guard doesn’t Russian hacking group targets home and small office routers to spy on users Traffic violation scams swap links for QR codes to steal your card details Support platform breach exposes Hims & Hers customer data A week in security (March 30 – April 5) Killer robots are here. Now what? (Lock and Code S07E07) That dream job offer from Coca-Cola or Ferrari? It’s a trap for your passwords Blocking children from social media is a badly executed good idea Apple expands “DarkSword” patches to iOS 18.7.7 Malwarebytes Privacy VPN receives full third-party audit Wikipedia’s AI agent row likely just the beginning of the bot-ocalypse WhatsApp on Windows users targeted in new campaign, warns Microsoft Why we’re still not doing April Fools’ Day
Timeshare owners warned to watch out for cartel-linked scams
2026-04-08 · via Malwarebytes

If you own a timeshare and have been searching for a way out, you need to know who may be targeting you.

In February, the US Treasury Department announced sanctions against a timeshare fraud network linked to a major Mexican drug cartel, the Jalisco New Generation Cartel (CJNG).

These aren’t your typical scammers. They’re more organized, more convincing, and in some cases more dangerous than the smooth-talking salesperson who sold you the timeshare in the first place.

Back in 2024, the FBI issued a warning that criminals were already stealing millions from timeshare owners across America, but recent action shows how organized and large-scale these operations have become.

A global problem, not just a US one

Americans represent only about one-third of the world’s timeshare owners. With more than 7 million owners globally, roughly 2.1 million are in the US. The rest are spread across the globe, making this a truly international problem.

Europe has a large share of the market, with the UK alone accounting for nearly 500,000 timeshare-owning households. Germany, France, Spain, and Italy also have significant owner populations. Mexico and Canada contribute substantial numbers to North American ownership, while the Asia-Pacific region—particularly Japan, China, Thailand, and Australia—represents approximately 21% of the global market and is experiencing rapid expansion.

A major UK case shows how widespread and organized these scams can be. In October 2025, 14 people were convicted in connection with the “Sell My Timeshare” operation, a sophisticated fraud that targeted more than 3,500 victims (mostly elderly people), and stole a staggering £28 million (about $35 million USD).

Victims received professional-looking marketing materials and calls from people claiming they could help sell their timeshare. The scammers even used celebrity endorsements in their advertisements to appear legitimate. Like thousands of others, one retiree, Des, paid upfront fees that were supposed to facilitate the sale. The sale never happened and Des lost £14,000 (approximately $18,000 USD).

Where organized crime comes in

In September 2025, federal prosecutors indicted Julio Montero Pinzon, described as a senior CJNG figure, on charges including wire fraud and money laundering tied to alleged timeshare scams targeting Americans.

The US Treasury Department has also said CJNG-linked actors took control of certain timeshare fraud schemes in Puerto Vallarta around 2012, later imposing sanctions on multiple companies and individuals connected to these schemes.

The Justice Department said in its indictment:

“For more than a decade, Julio Montero Pinzon, a senior CJNG cartel leader, allegedly defrauded timeshare owners out of millions of dollars to benefit himself and CJNG.”

The numbers are staggering. These operations have defrauded victims, often elderly Americans, out of millions of dollars. And unlike drug trafficking, timeshare fraud carries far less law enforcement scrutiny while generating steady revenue that helps finance cartel operations.

Think about it from a criminal’s perspective: There are millions of timeshare owners worldwide, with more than one third in the US alone. Many are retirees on fixed incomes watching their maintenance fees climb year after year. They’re desperate to escape contracts they can’t afford and properties they can’t sell.

The secondary market for timeshares is essentially dead. Properties that sold for $20,000 or $30,000 are now worth almost nothing. Some owners literally can’t give them away. Meanwhile, recurring annual maintenance fees of $1,000 to $3,000+ keep coming, creating a perfect storm of financial and emotional desperation. This is exactly what scammers exploit.

The phone rings. The caller sounds professional and has good news: They’ve found a buyer for your timeshare. After years of trying to sell, someone finally wants it, and they’re willing to pay a decent price. Hooray! What a relief…finally! 

There’s just one small catch. You need to cover the “closing costs” or ” transfer taxes” upfront, usually between $2,000 and $5,000.

It seems to be a reasonable deal to offload a headache costing you money every year. So you wire the payment. The closing date approaches, then gets postponed. Calls go unreturned. The website disappears.

Your money is gone. There was no buyer. And you still own the timeshare.

Spot the warning signs and protect yourself

According to guidance from the FBI and US Treasury, here’s how these scams typically show up and what to do when they do:

  • Unsolicited contact. If someone calls you out of the blue claiming to have a buyer, it’s almost certainly a scam. Real buyers don’t cold-call owners with offers. Don’t engage. Look up any company independently if you’re curious—but assume it’s a scam until proven otherwise.
  • Upfront payment demands. If you’re asked to pay “closing costs” or “transfer fees” before a sale, that’s a major red flag. Don’t send money. Legitimate fees come out of the final sale, not upfront.
  • Pressure tactics. “The buyer is looking at other properties” or “This offer expires today” are designed to rush you. Slow down. Step away, talk to family or a trusted advisor, and don’t make decisions under pressure.
  • Requests for wire transfers to Mexico. Or indeed, anywhere. Once money is wired internationally, it’s virtually impossible to recover. Refuse wire transfers. If payment methods feel restrictive or urgent, walk away.
  • Too-good-to-be-true offers. If someone offers you significantly more than market value for a property you’ve been unable to sell, ask yourself why. Verify everything independently. Check the company through trusted sources like the Better Business Bureau or your state Attorney General.

Stick with licensed real estate agents who handle timeshare resales, starting with the Licensed Timeshare Resale Brokers Association.  

How they found you

You might be wondering: How did they even know I own a timeshare?

The answer reveals an uncomfortable truth about your data. Recall my article about your digital footprint and data brokers? Timeshare ownership is often a matter of public record. Data breaches at timeshare companies have exposed customer information. Previous victim lists are bought and sold among criminals or obtained “legally” from data brokers. If you’ve been targeted once, your information is likely available to others for little-to-no cost.

Your social media presence doesn’t help. That vacation photo you posted from your timeshare resort provides information that scammers can use to make their pitch more convincing.

Authorities have also noted that some CJNG-linked operations maintain sophisticated call centers, with trained staff using detailed scripts and databases of potential victims. These aren’t random calls, but organized operations with significant resources.

What to do if you’ve fallen victim

If you’ve already fallen victim, act immediately:

  • Stop all communication with the scammers
  • Contact your bank to see if the transfer can be stopped (unlikely, but worth trying)
  • File a police report to create an official record
  • In the US, report it to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov
  • Place a fraud alert on your credit reports
  • Consider identity protection if you don’t already have it

Please also be alert for “recovery” scams, where someone contacts you claiming they can get your money back for an upfront fee. This is another scam targeting the same victims.

The connection between some timeshare fraud operations and organized crime groups is not speculation. US authorities, including the Treasury Department, have documented links between certain schemes and the Jalisco New Generation Cartel (CJNG), including sanctions against a network tied to timeshare fraud. Investigators say these operations can generate significant illicit revenue alongside other criminal activities.

The US government is taking action. The Treasury Department has imposed sanctions on multiple individuals and companies, and federal prosecutors have secured indictments against alleged cartel-linked figures. But enforcement alone won’t solve the problem. You still need to protect yourself.

Remember: If someone contacts you unsolicited about your timeshare, claims to have a buyer, and asks for upfront payment, it’s a scam.

Share this information with friends and family who own timeshares, especially older relatives. Awareness can help prevent serious financial loss. Stay skeptical, verify everything, and if an offer sounds too good to be true, it usually is.


Something feel off? Check it before you click.  

Malwarebytes Scam Guard helps you analyze suspicious links, texts, and screenshots instantly.  

Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android.  

Try it free → 

About the author

Leader with 20+ years building and scaling web engineering platforms across cybersecurity and fintech. Samford University. 4x Adoptive Dad. 2x Author. Connect at https://www.linkedin.com/in/mattburgess/