I told my parents that I will never ask for money, doesn't matter the situation, even with live video, it's trivial to generate live audio and video nowadays.
I hope they got the message.
I told my parents that I will never ask for money, doesn't matter the situation, even with live video, it's trivial to generate live audio and video nowadays.
I hope they got the message.
Fortunately for me, my parents wouldn't be able to get the live video working.
i agreed key phrases. id recommend it. something unrelated to the family and totally arbitrary, agreedupon only verbally. (or write it down for them if they are old and memory is an issue. you can remind them to read your note out loud.. easy).
this way, you do not footgun yourself in the event you'd ever need to ask something. Money isnt the only thing they can ask, and no one (i think) has a glass orb to tell their future and know for certain such a call would never happen. its easy to think it wont happen to you, i think that is most peoples' sentiment until it does. (having a need for help from family that is)
Key phrases make sense to put in place, but another easy safeguard is:
"Before you send anything to anyone, ever, call them back. Doesn't matter if it's me, the bank, a lawyer, whatever... tell them 'hang on I have another call coming in, let me just call you back in a few minutes, okay?'"
I overheard a cab driver being scammed by someone claiming to be HMRC (UK version of the IRS), and when he asked to call them back they managed to convince him to call them back on Viber, and he was about to when I intervened and pointed out to him that 1) what I'd overheard was blatantly a scam, 2) if he was unsure, to go to their official website and find their number...
If you're going to get people to call you back, it has the problem of ensuring that they call you back on your real number - giving reasons why they have to call you back on some other number is way too easy ("I've lost my phone", "my phone is at home", and so on)
Also, make sure to use official website, not just Google search, or any chat agent question, the SEO are sometimes poisoned with scam phone numbers.
I consider myself always to be wary of scams and my trust-level is zero when they call me, but I recently almost got myself hooked on an airline support call. I google searched the support number and trusted the AI summary on top and called it, they asked me my reservation number and I happily provided. With the reservation number they have public access to the entire reservation details, they knew my name, my flight, my co-passenger details everything. I called to do a reservation for my pet which is normally not done online. their problem, they got greedy and asked me more than pet travel, iirc they said there was a problem with one of my flights, it wasn't paid and I had to repay on the call. If they just followed along instead of going by the script I would have paid the pet travel amount.
"They say they're going to cut a finger off every time you hang up."
"I guess we'll start calling you Pinky"
Not a thorough safeguard, if scammers have half a brain cell they can provision a VOIP number for such a request. They’re nothing if not accommodating.
You're supposed to call them back on a number you know is really that person/company. This ensures the person you're talking to is actually from your bank and not just calling from a random number and saying "I'm from your bank," or even spoofing a real number of your bank or a family member, because when you call back it will go to the real person and not the impostor.
This is a very useful precaution for banks, and for or calls that come from a family member's real phone number.
But scammers will just open with "I'm in trouble and my phone died" or "I'm in jail calling from a pay phone" and calling back won't do anything to help with that.
Yes, that's my point. There will be a "reason" why the callback needs to be another number.
Also, given at least in America, our cell phone providers STILL haven't fully blocked caller ID spoofing (last I checked, they just add some tiny icon in the rare case that the CID is trustable, and I'd bet 99.9% of people don't even know that exists!) they can spoof the initial call as your number and many targets will probably mistakenly think the CID match is good enough to just skip it, especially in this "very urgent situation" with you being held at knifepoint by the corrupt third-world cops or whatever.
You call them back on the actual number - e.g. the official number of the bank, or the contact number of your friend, or the phone of your kid, etc, that you know or can find independently.
Not any old random number they give you.
“But, Ben, you didn’t ask me for money when you called last night at 2AM. You asked for $4,000 in Fortnite gift cards to be released from Mexican prison. Thankfully 7-11 had them and was open!”
The best things to stop these AI voice schemes, is to agree on a family password. The cloned AI voice will not known it.
That's a great idea. What do you use as your family password?
Nice try, but our password is the same as the password to my HN account, and for security HN automatically censors your password if you type it in a comment. See: *******
For any Hacker News users not aware of this security policy, it’s documented at https://news.ycombinator.com/item?id=38502985
Yes, the bash.org IRC archive archive is hilarious:
https://web.archive.org/web/20230620135556/http://bash.org/?...
Joke's on you, now I know your password is 7 chars, but more importantly, I also know your password is not 7 stars.
hunter2 my hunter2!
*********
Oh yeah! Neat.
This thread just gave me a pang of nostalgia. I think the first time I saw this interaction was in an AOL chat room, or maybe an early MUD. I miss the good old silly internet…
Nice try.
Hey "nice try" is my family password too!
I recently did the same, and I, too, hope they got the message. We agreed that there is nothing that needs to be acted upon immediately, and that anything questionable would be discussed with the whole family first.
They might not believe it - for good reason.