Hacker News new | ask | show | jobs
by abirch 17 days ago
A few years back, I would talk with scammers for a while to waste their time. Now I don't.

LPT: Please have a codeword or phrase that you use with your loved ones so even if the scammers use your voice, they won't know the phrase.

3 comments

> LPT: Please have a codeword or phrase that you use with your loved ones

They keep refusing ideas like these on the grounds of them being “not stupid” and “able to see through such attempts immediately, 100% of the time” and “do you think we’re stupid?”

They might actually be a bit stupid, but maybe they'll do it if you tell them it's because you are worried that you would fall for a scammer impersonating them. That at least would let them keep their stupid pride.
The article makes a point of explaining how the world-renowned expert on identifying deepfake scams can no longer pass his own tests.

If an expert can't distinguish, it has absolutely nothing to do with being "stupid" or not. So send them that, maybe.

If they are still stubborn about it, then thank them for contributing to the future funding of Scam the World With AI.

Identifying the voice as fake is not the main defense against these scams, though. The main defence is recognising the situation and taking a step back to double-check. Primarily the scammers are trying to stop you from engaging your critical thinking by putting you under pressure and a very useful skill in life is recognising those situations and pushing back on them.
Or maybe Deckard was a replicant the whole time.
You don’t even need this. You just ask “what did we do last Tuesday”. A scammer will hang up, even if the actual answer is “I haven’t seen you in two years”.
I'm getting a lot of calls recently and don't give them more than a Hello and whatever music, radio show or Tour de France broadcast I'm listening to. Sometimes they hang in there for half a minute.
Sometimes if I’m suspicious about the number now, I just answer and say nothing. A human will get confused after 5 seconds and say “Hello?Hello??” But the very shitty bots that usually call, just wait patiently for a long time for your hello, and don’t seem at all fazed by it.
You get actual humans calling you from unknown numbers? Lucky! I only ever get "Chase" from "Home Security Solutions" or whatever.
Yeah, recently I've had quite a few legitimate ones, mostly having to do with home renovations or other transactions.

I like most am deeply unsatisfied with the archaic system though of a basically unchangeable 10-digit number granting permission for anyone to fill up my phone with messages and interrupt me with calls, and hate that I have to ever answer calls from a number I don't know.

I really would like a mutual opt-in system, where you have to pre-establish consent before it's even possible to message or call you, but it seems impossible to get there from here. We can't even get the stupid cell phone companies to strongly enforce that caller ID isn't spoofed!

How do you meet people if it's pre-established consent. Eventually someone needs to say 'hi' without the consent of the other person. In all things.
Sure, I'd answer with an example of it done well. When "Instant Messaging" was a huge deal circa 2000, if you got a message from a new person on most platforms, you'd get a chat invitation. You could accept and allow them, or dismiss them and never hear from them again. (Of course this had a vulnerability if you could generate new accounts too easily, so spam activity varied depending on how easy it was to have bots sign up).

Phone calls and SMS should be like that, which, they almost could be today just with the phone OS keeping track of who you've previously "accepted."[1]

Except.

The identifiers (phone numbers) are nearly infinite, and nearly free, so the scammers just use a "new to you" number every time they call you, allowing each one to generate a new 'invitation.'

And of course to make it worse, the "numbers" are actually truly free since they can spoof any number they want all day long and to this day, most of those calls will go through and not even show a big red flag.

That last part is entirely reprehensible that our carriers haven't solved it by now, but apparently they don't want to.

[1] and also there's that sticky problem that some arbitrary company like say, a health insurance company or the state government, has 1000 departments who might call you, and they couldn't give you a full list if they wanted to.

In person or online.

How often have you met people over the phone in the past decade?

I will say that blocking all unrecognized numbers, though, is an unworkable idea. Any parent or caregiver knows that they need to be able to occasionally receive calls from a number they've never heard of before.

The article mentions this strategy, and points out that when confronted with an emotional emergency situation, the victims simply might not remember to use the protocol.

Not a bad idea, but not a brick wall.