Who are the most spoofed brands in phishing scams? Let's be honest, you can probably guess most of them - but there are a few surprises

• 22% of all brand phishing attempts tried to impersonate Microsoft
• DHL was the only company in the top 10 that wasn't a tech firm
• Identity is the biggest attack surface for cybercriminals

New data from Check Point has found Microsoft remained the most spoofed brand in phishing attacks during the final three months of 2025, accounting for nearly one-quarter (22%) of all brand phishing attempts.

As is sadly too common these days, the technology industry is the most affected by brand impersonation, with Google (13%), Amazon (9%), Apple (8%), Meta (3%), PayPal (2%), Adobe (2%), Booking (2%) and LinkedIn (1%) all seeing similar attempts.

In fact, shipping giant DHL (1%) was the only company appearing in the top 10 list that did not belong to the tech sector.