Election-themed phishing scams are arriving by text message, email and phone call, according to Malwarebytes reporting cited by KnowBe4. They impersonate voter services to steal money, personal information or credentials.
The messages adapt familiar election themes: registering to vote, joining an absentee voter list, completing a survey, donating to a campaign or resolving an alleged registration problem. Some offer help; others threaten that a recipient could lose the chance to vote or must pay a fine. The defining response should be the same: do not let an incoming message control where you go next.
Two scams dressed as voter services
Malwarebytes observed a campaign targeting Minnesota users that offered to add recipients to an absentee voter list. The fraudulent link led to a website requesting personal information that could then be used for additional scams.
Minnesota does have a permanent absentee voter list, so the message borrowed the language of a real voting service. That mix of accurate information and a false destination makes the scam more convincing. A message can describe a genuine procedure, reproduce official language and still send recipients to a site controlled by a criminal.
Other messages reverse the pitch. Instead of offering convenience, they claim that the recipient is not registered, that personal details are incomplete or that a registration is about to be cancelled. The accompanying link promises to resolve the problem.
This approach exploits unfamiliarity with election administration. Because people do not routinely register, check records or handle election-duty notices, they may find it difficult to distinguish a legitimate request from a fabricated one. The warning creates pressure at the moment when recipients are least likely to verify it independently.
Calls, emails and donation requests
Election scams are not limited to SMS. KnowBe4 also identifies email and phone calls as delivery channels. Some use a more threatening approach, warning recipients that they must pay a fine or click a link to report for election duty.
Donations provide another route. Check Point Exposure Management observed scam activity involving political action committees and donations during its monitoring period between July and early October 2026, according to KTNV. Its experts noted that fraudsters can exploit an unfamiliar process without manufacturing an obvious emergency.
Donation messages can look plausible because campaigns and political action committees legitimately solicit funds. The relevant question is whether the request came through a verifiable organization, not whether political solicitations are unusual. Recipients should find the candidate’s or committee’s official website independently. Check Point also noted that official campaigns and political action committees are required to register with the Federal Election Commission, offering an additional way to check legitimacy.
Smaller, lesser-known races may face greater exposure because they receive less publicity. Major campaigns may also have staff watching for impersonation and working to shut it down more quickly. Fraudsters gain an advantage where recognition and scrutiny are lower.
Our analysis: official-looking information is not official contact
The common trick is borrowed credibility. These scams do not require an obviously broken link or fake domain. They can use real election terminology, genuine registration procedures and warnings that sound consistent with official communications.
That changes how recipients should evaluate a message. Accurate wording only proves that the scammer knows how the process can work. It does not prove that the sender or destination is legitimate.
For election-related claims, voters win by breaking the message’s control over the next step. If a text says a registration is incomplete, visit the relevant election authority’s official website directly instead of using the supplied link. If a message asks for a donation, locate the campaign or committee’s official site independently and check Federal Election Commission registration where appropriate. If it threatens a fine or election-duty obligation, confirm the claim through an independently obtained official contact.
This distinction matters for both individual targets and organizations reviewing suspicious messages. The core risk is unauthorized collection of information or payment, impersonation of legitimate election services and the use of misleading links. The topic alone does not make a campaign communication malicious; the destination, request and claimed authority still require verification.
Comparing the main scam patterns
| Message pattern | What the scammer seeks | Safer response |
|---|---|---|
| Offer to add the recipient to an absentee voter list | Personal information that can support further scams | Open the election authority’s official website directly |
| Warning that registration is missing, incomplete or cancelled | Personal information or credentials through a fraudulent link | Ignore the supplied link and check registration through the official authority |
| Demand for a fine or election-duty reporting | Payment or interaction with a fraudulent site | Independently confirm whether the obligation exists |
| Donation request tied to a campaign or political action committee | Money under the guise of a legitimate contribution | Find the official website independently and verify Federal Election Commission registration |
What to watch next
Election scams are moving among several themes: registration help, absentee voting, donations, fines and election duty. Each uses a different pretext, but the defensive pattern stays consistent. A message may be authentic in subject matter while remaining fraudulent in origin.
The main losers are recipients who let an inbound message determine the destination and provide information or money without verification. Fraudsters benefit from that handoff because a copied official procedure and a credible-looking warning can turn routine uncertainty into compliance.
Voters should watch for requests that combine political context with a consequential action. Those are the messages most likely to demand an immediate decision. Reporting also matters: KTNV says suspected election fraud can be shared with the FBI, helping authorities track campaigns and warn others.
The most reliable safeguard is structural rather than cosmetic. Do not rely on branding, language or even a convincing government-style design. Reach the service through the official election authority, and reach campaigns or committees through independently verified sites.
Key takeaways
- Use official election authority websites instead of links supplied in suspicious messages.
- Treat requests for fines, donations or personal information as verification prompts.
- Report suspected election phishing and fraud through official channels, including the FBI when appropriate.
Frequently asked questions
How can I tell whether an election registration text is a scam?
Do not rely on the message’s wording, appearance or link. Go directly to the relevant election authority’s official website and check the recipient’s status there.
Are messages offering absentee voter registration always fraudulent?
No. Minnesota has a permanent absentee voter list, but Malwarebytes found a fraudulent message imitating that service. Verify any offer through the official election authority rather than the incoming link.
What should I do about a claimed election fine?
Do not pay or report through the supplied link. Independently contact the election authority to confirm whether a fine or election-duty obligation exists.
Where can suspected election scams be reported?
KTNV reports that suspected scams can be shared with the FBI. They can also be reported through available official election authority channels.