Hello Typeform team and community,
I want to bring attention to a serious and ongoing problem involving the systematic abuse of Typeform by scammers targeting people in Mexico.
I started fighting this operation on April 21. Since then, I have submitted more than 4,000 reports concerning fraudulent Typeform pages used as landing pages to redirect victims to phishing websites.
These scammers impersonate official Mexican government passport services, targeting people who are trying to apply for, renew, or obtain a Mexican passport.
To be clear, I appreciate that Typeform responds to reports and removes fraudulent forms. However, this is not solving the problem.
The attackers simply create new forms, often using exactly the same text, photographs, page layouts, and templates. Once one form is removed, another appears. This has become an endless cycle.
I have now developed automated tools to identify new fraudulent links and automate the reporting process. This has allowed me to monitor the campaign much more efficiently and revealed that attackers are creating between 10 and 50 new fraudulent Typeform links every single day.
Think about that for a moment: more than 4,000 reports have been submitted, yet the same operation continues every single day.
**My question to Typeform is simple:**
Why is there still no effective proactive solution?
The patterns are extremely repetitive and easy to identify. The same images, texts, templates, and suspicious account activity appear again and again. Surely there must be a way to detect these patterns and prevent repeat offenders from continuously abusing your platform.
I am not asking Typeform to stop legitimate users from creating forms. I am asking you to take meaningful action against people who systematically use your service to facilitate fraud.
I am ready to cooperate with your team, share my detection capabilities, and help develop a more effective approach.
But after thousands of reports and months of continuous activity, simply deleting individual forms is clearly not enough.
How many more reports, and how many more victims, will it take before this problem receives a proper solution?
I genuinely hope someone from the Typeform security or Trust & Safety team will take notice and engage with me.
Let's work together to stop these scammers instead of allowing them to continue exploiting your platform.
