What were the major end user scams in web 1 and web 2?

I recall ad fraud (click farms etc) and maybe some early ecommerce buy but not receive goods but nothing at the scale (even adjusted for web 1 adoption in the 90s) at crypto frequency/scale. Identity/credit theft maybe?