ZeroFox Intelligence Flash Report - Online Impersonations Likely to Spike in July

In this Flash Report, ZeroFox researchers highlight a likely spike of online impersonations in the month of July.

Standing Intelligence Requirements

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

View the full report here

ZeroFox assesses that impersonation volume is likely to spike in July 2026, consistent with our observed seasonal patterns in the previous reporting period.
Between May 1, 2025, and April 30, 2026, ZeroFox executed 1,412,243 client-requested takedowns across all monitored network categories, which represents a significant volume of disruption activity on behalf of its customer base.
ZeroFox observed a significant peak in impersonation volume in Q3 2025, with July 2025 recording the highest single-month total of 191,078 takedowns. This figure was driven predominantly by social media activity, which accounted for the largest share of our takedown submissions throughout the year.
Following the summer 2025 peak, ZeroFox noted a gradual decline in our overall takedown volume through the fall before a secondary elevation in December 2025. Notably, this was driven by an anomalous spike in peer-to-peer (P2P) and communications activity—a category that otherwise tracked at moderate and relatively stable volumes.