In partnership with

Eric’s Request

Before we get to the show, please indulge a quick request!

My book, Spies, Lies, and Cybercrime, is already an Amazon #1 Bestseller in multiple categories. But with your help, it can break into the major bestseller lists — and, more importantly, protect thousands from becoming the next victim of a scam.

1. f you haven’t already, please buy SPIES, LIES, AND CYBERCRIME. If you already have, thank you, and please consider gifting some to friends and colleagues. It makes a perfect holiday gift for anyone you want to protect from cyber scams.

2. Leave a 5-star review on Amazon. Reviews are the secret weapon that triggers Amazon’s algorithm to share the book with thousands of new readers who might not otherwise find it — and might otherwise fall prey to an attack.

3. Please share! Forward this email to your friends and family. Here's an easy-to-post cover graphic, here's a Linkedin post, here's an IG reel and a post.

Thank you for the support. Now back to our regularly scheduled NEWSLETTER!

—Eric

Title Story

Scamtoberfest!

It started with a scrolling thumb.

Late one night, after the kids had gone to bed, Tom sat on the couch, searching for the perfect family Halloween costume. His wife wanted something classic. The kids wanted something cool. And then—there it was.

A Facebook ad for a “Classic Monster Family Costume Set — 70% Off! All Inventory Must Go Before Halloween!” The photos looked professional, the reviews were glowing, and a countdown timer flashed red: Only 3 hours left.

Tom clicked before he even thought about it. Within minutes, he’d ordered matching costumes for himself, his wife, and their three kids, adding “expedited shipping” to make sure everything arrived before the neighborhood block party. It felt like a steal.

Two weeks later, Halloween arrived. The porch was covered in fake cobwebs. The candy bowl was full. But there were no costumes. No shipping updates. No refund. The store’s website had vanished overnight — taking his credit card number, billing address, and a treasure trove of personal data with it.

Tom had just fallen victim to Scamtoberfest — the cybercriminals’ favorite time of year.

From October through December, scammers and spies launch their most profitable campaigns. They know consumers are distracted, emotional, and generous. Halloween kicks off their party, the holidays keep it rolling, and New Year’s seals the deal.

And while the U.S. government might be in shutdown mode, cybercrime never takes a break. Right now, threat actors are plotting new ways to exploit confusion, fear, and festive cheer — because when opportunity knocks, cybercriminals always answer.

Cybersecurity Breach of the Week

The Scamtoberfest Lineup!

Here’s what’s on tap for cybercriminals this season — and how they trick millions every year:

1. AI-Based Imposter Attacks: Scammers use AI to clone the voices of people you trust — your boss, spouse, or even your kids — then call or message in a panic asking for help. You hear their voice, your guard drops, and your money disappears.

2. “Smishing” (Text or Social Media Message Scams): That text saying “Your package is delayed—click here to reschedule delivery”? It’s fake. The link takes you to a site designed to steal login credentials, financial details, or install malware.

3. Fake Online Stores and Phantom Deals Those “70% Off Holiday Mega Sales” on social media? They’re digital mirages. You pay, but nothing ever ships — and the criminals vanish with your payment info before you even realize what happened.

4. Fraudulent Charities and Impostor Donations: A tear-jerking story hits your feed. A disaster relief fund, a child in need, a local family raising money. But the charity name is off by one letter, and your donation goes straight into a scammer’s crypto wallet.

5. Package Delivery and Shipping ScamsDuring the holiday rush, fake FedEx or UPS alerts explode across phones and inboxes. They link to counterfeit carrier pages that look official but exist solely to harvest your personal data or charge “release fees.”

Each of these cons preys on three psychological levers: urgency, emotion, and distraction. They don’t just want your money — they want your trust.

Cybersecurity Tip of the Week

Scamtober Survival Guide

Here’s how to beat the scammers at their own game:

1. Turn on Multifactor Authentication — everywhere. It’s your best defense against stolen credentials.

2. Trust your gut. If it doesn’t feel right, it probably isn’t. Stop before you click.

3. Remember: If it looks too good to be true, it is. The internet doesn’t hand out miracle deals or free luxury gifts.

4. Avoid clicking ad links. Go directly to the retailer’s site to verify deals or deliveries.

5. Use credit cards for online purchases. Credit cards offer fraud protection; debit cards drain your account.

6. Give smart. Donate only through known charities. Verify names through Charity Navigator or BBB Wise Giving.

7. Read Spies, Lies, and Cybercrime. It’s packed with the stories, tactics, and real-world spy tradecraft that can help you stop cybercriminals cold.

The best way to protect yourself from cybercrime is simple: know the criminal playbook — and turn it against them.

That’s exactly what my new book, Spies, Lies, and Cybercrime, was built to do. I

t’s not a dry cybersecurity guide — it’s a true crime thriller that takes you inside the minds of hackers, spies, and con artists. Through gripping real stories, you’ll uncover the psychology behind modern scams and learn counterintelligence techniques straight from the FBI playbook to protect yourself and the people you love.

Appearance of the Week

I join Guy Lambert on Fox 5 in Washington DC to discuss Spies, Lies, and Cybercrime and the rise of cybercrime, what consumers need to be worried about and tips to stay safe from cyberattacks as we approach the holiday season.

AI Trend of the Week

I created these lighthearted and fun videos using HeyGen for the avatar and Parrot AI for the voice. Which president is your favorite?

Special Offer From DeleteMe

Your personal data is for sale to the highest bidder.

Nearly 3 billion records containing sensitive personal information — names, addresses, phone numbers, emails, even relatives — were recently found exposed on the dark web. That’s a buffet for cybercriminals, scammers, and identity thieves.

DeleteMe hunts down and removes your personal data from data brokers who profit off your information — effectively stealing your data back before criminals can use it.

They’ll help remove and recover details like:

• Name

• Current and past addresses

• Age and date of birth

• Phone numbers

• Email addresses

• Relatives’ information

My friends at DeleteMe are offering my newsletter readers an exclusive 20% off a DeleteMe Consumer License.

Protect your privacy. [Click here to reclaim your data.]

The Future of the Content Economy

beehiiv started with newsletters. Now, they’re reimagining the entire content economy.

On November 13, beehiiv’s biggest updates ever are dropping at the Winter Release Event.

For the people shaping the next generation of content, community, and media, this is an event you won’t want to miss.

RSVP for the Winter Release →

Praise for Spies, Lies, and Cybercrime!

ryanphillippe

1M followers

View more on Instagram

"O’Neill deftly attests [that] taking proper precautions can limit, if not halt, the damage wrought by unscrupulous cybercriminals. His masterful book serves as an important guide for individuals and companies committed to avoiding an epic misstep." — Booklist

“One breach can sink a business—or a billion-dollar idea.” —Marc Randolph, Co-Founder and First CEO of Netflix

“A chilling and essential wake-up call that reads like a thriller, but every word is terrifyingly real.” –Brad Thor, #1 New York Times bestselling author of Edge of Honor

“Today’s most dangerous cyberattacks are espionage by another name. It takes a spy hunter to stop a spy, and Eric is one of the best.” —Jack Barsky, former KGB deep-cover operative and author of Deep Undercover

“Required reading for founders and innovators…you don’t want to become a case example for his next book.” —Safi Bahcall, bestselling author of Loonshots: Nurture the Crazy Ideas that Win Wars, Cure Diseases, and Transform Industries

“An astonishingly up-to-date review of the tools and techniques used by criminal hackers…O’Neill will have you on the edge of your seat.” —Marc Goodman, New York Times bestselling author of Future Crimes

“Illuminating, disturbing and important. Don’t miss this.” —Shannon Huffman Polson, author of The Grit Factor: Courage, Resilience and Leadership in the Most Male Dominated Organization in the World and CEO of The Grit Institute

“An essential — and relentlessly fun — read for anyone interested in espionage, counterintelligence, or cyber issues.” –Dr. David Priess, former CIA officer and author of The President’s Book of Secrets

Spies, Lies, and Cybercrime is a must-read that will open your eyes and will change how you think about trust, technology, and the threats we face." --Jenn Donahue, Author: Becoming The Warrior, award-winning Engineer, Keynote Speaker, US Navy Captain (ret), Entrepreneur

Order Spies, Lies, and Cybercrime

I hope you love the book as much as I loved writing it for you! Please leave a review. Great reviews help others find the book.

📚 Get the book: https://ericoneill.net/books/spies_and_lies/

📺 Review the Book: https://www.amazon.com/Spies-Lies-Cybercrime-Cybersecurity-Outsmart/dp/0063398176/

🎤 Book me to speak at your next event: https://www.bigspeak.com/speakers/eric-oneill

Like What You're Reading?

Don’t miss a newsletter! Subscribe to Spies, Lies & Cybercrime for our top espionage, cybercrime and security stories delivered right to your inbox. Always weekly, never intrusive, totally secure.

Let's make sure my emails land straight in your inbox.

Gmail users: Move this email to your primary inbox

On your phone? Hit the 3 dots at top right corner, click "Move to" then "Primary."

On desktop? Close this email then drag and drop this email into the "Primary" tab near the top left of your screen

Apple mail users: Tap on our email address at the top of this email (next to "From:" on mobile) and click “Add to VIPs”

For everyone else: follow these instructions