The Council of Anti-Phishing Japan (CAPJ) announced its phishing report status for September 2026 on October 19. A total of 94,661 reports were received, marking an increase of 12,323 cases, or approximately 15.0%, from the previous month. The council also confirmed the presence of fake emails that included the recipient's name in the body.
Approximately 33.2% of the reports impersonated Amazon, while those mimicking Apple accounted for about 11.1%. The top five brands, which also included Saison Card, American Express, and the National Tax Agency, collectively made up approximately 65.3% of all reported cases.
Furthermore, amidst a series of public announcements regarding information leaks, the council noted that personalized phishing emails containing recipients' names have been confirmed, though their direct link to specific data breach incidents remains unclear. Emails designed to trick users into installing malicious apps by impersonating app updates or application procedures are also rapidly increasing.
The council urges users to verify information through official apps or other legitimate sources whenever they are prompted to log in via email or SMS.
