Ask HN: How to protect old parents from evolving AI based scams?

[badrunaway]

With AI advancement and deepfake/voice cloning becoming so realistic and cheap - We can't really train our non-tech parents to be wary of every threat actor in this evolving space. How is everyone solving this for their retired parents? Are there companies which do insurance/protection services against such scams - because AFAIK banks don't help in such cases where someone made you lets say give a OTP/password and got your money transferred out.

[talldayo]

> in such cases where someone made you lets say give a OTP/password and got your money transferred out.

An easy prevention against this is to remind everyone to never, ever disclose personal details over the phone. Especially when someone else, even a loved one, solicits you for them. This was a problem pre-AI, it will get worse post-AI, but the general mistake is still avoidable. Teach people what to avoid and they will avoid it accordingly.

[badrunaway]

Recently someone I know got a call where they mimicked their child's voice using AI and asked them to send immediate money otherwise child will be in danger. This has got me into thinking - my parents would also do the same for me/ and everyone's would-- add deepfake into it -- how the fuck we are support to assume people won't give emotional response? forget about personal details, people who care about you can might directly do a transfer.

[k310]

Suggest that they trust nobody. Ordinary folks don’t have the expertise to track down phishing emails, and most certainly, malicious links anywhere. Ask a techie? I offer that for family and friends.

As for voice fakes, these are wicked. Some have suggested using a secret codeword with relatives who might be faked for ransom demands etc.

I don’t even want to click on the “personalized” URL that my auto service provider sends, as that might encourage the salespeople. But they hide the tracking URL.

If it takes hovering over every URL for a hardened techie like me, pity the average person.

Thinking about a home proxy box to sanitize things. ISP’s won’t do it because they are in on the scams (IMO) and outside and AV services cost to do a nontrivial job.

Have been thinking about this for some time. Has to be dead-simple, bulletproof and zero-maintenance. Not much to ask?

[JohnFen]

Why are you considering your parents as some sort of special case? Your question is equally appropriate regarding anyone of any age.

In any case, I would advise everyone (including your parents) to have a safe word/phrase such that everyone knows that if that word or phrase is not used in a important communication, then it isn't really from them.

Beyond that, the usual safety rules apply: never click on links, never talk to businesses if they call you (look up their number and call them back if it seems important), etc.

[badrunaway]

So, my reasoning is little stupid but it goes like this. I am in my 30s. Let's say if I lose all my money in a scam also - I have time to earn it back and still make it back. Whereas our elders (parents are 60+) who have savings and rely on their savings and can't really earn now - and also have lot of medical bills to pay with their age ==== for them it's like one-shot ending right? That's why I considered them as special case.

[orbat]

Shit, how do I protect myself from evolving AI-based scams? I'm middle-aged and not in the IT industry anymore, and scams like the Booking.com (I think it was?) one where the scammers were able to send valid emails almost got me already.

[badrunaway]

That's also a fear I have. But having grown up on internet it helps in adjusting to these changes fast. Secondly, I got a degree in CS and been a developer for a decade so yeah I know a video can be a deepfake instinctively. It's harder to scam us than a generation who retired already when deepfake/deepvoicecloning arrived and may be never had a CS exposure.