The $40K fake invoice scam we were too smart to fall for

Scams come with the territory when you own a business. Last week, we got one here at the Komando HQ that even I haven’t spotted before. Let’s just say I was equal parts impressed and annoyed. That’s why if you own a business or do anything with money at a company, you need to know this.

‘Fwd: Past due Inv 324476’

That was the subject line. What followed was an email chain between me (using my private company email address) and someone named “Paul Delcroix.” According to his email, we were overdue for paying his invoice, and he wanted that money, like, now.

Reading the email chain, it really looked like “Paul” and I were doing business together. In one email, I told him we needed to have a follow-up call. In another, I asked “Paul” to email our finance director, Amber, because she’d send over the money.

As it turns out, “Paul” had created the entire thread and used that to trick Amber into thinking I’d already approved the invoice.

Now, this scammer knew a lot about us, like my personal email address, Amber’s role at the company and Amber’s email address. They even knew our company’s industry; “Paul” was attempting to charge us for using his “Ethics in Broadcasting” legal materials and representatives.

Luckily, Amber is smart

She’s too smart to just pay an unexpected invoice, even if there seems to be evidence I OK’d it. She forwarded me the email and asked if the bill for $39,540 was legit.

Spot the signs

This is a tricky scam, but it’s far from perfect.

  • The bill was for a large, unexpected expense. When we’re planning to spend a lot of money, Amber is almost always part of that conversation. If she’s not, I inform her later since she’s the one who pays the bills day to day.
  • The emails from “Kim” sounded nothing like me. Scammers can find your contact info, photos and other details online, but most of them are really bad at sounding like you. One note started with, “We will prioritize the processing of this invoice today.” I’d never say it that way.
  • There was an urgent tone. This is a big part of most scams. Would-be thieves try to convince you you’re behind on payments or you’ve done something wrong and you need to fix it ASAP.
  • The invoice and emails are a mess. A closer look shows all kinds of strange formatting. The invoice looks bogus for sure.

One simple rule of thumb

Continue reading

A slew of Trump fakes are coming – How to spot them

Folks, before you even think about writing me a note saying, “You wrote this ‘cause you hate Trump” or “You wrote this ‘cause you love Trump,” don’t waste your time. I’m not talking politics today, and I’m not taking sides. I’m protecting you from falling for deepfakes and the absolute barrage of junk you can expect on social media in the coming days, weeks and months.

Continue reading

Deepfake 'endorsements'

Don’t believe everything you see on the internet. It’s easier than ever to fake famous faces.

Say no: If your bank asks you to set up your voice profile attached to your account, decline. You can bet hackers are trolling the internet to get clips of folks talking to make their own deepfake copies. A fingerprint or a solid password are safer login methods.

Laptop catches fire on plane

00:00
–:–

Open/download audio

It started smoking inside a passenger’s bag. Plus, the RiteAid hack, and AT&T data breach. We also talk to Elliston Berry and Anna McAdams, a mother-daughter team fighting deepfake revenge porn.

A U.S. senator was deepfake duped: Senate Foreign Relations Committee Chairman Ben Cardin, D-Md., had a Zoom call with a scammer posing as Ukraine’s former foreign minister. The deepfake looked and sounded just like the real guy, and the scammer pressed for Cardin’s opinions on sensitive foreign policy and the upcoming election. Cardin got suspicious and the call ended. It’s still unclear who was behind it.

53% of businesses

Have been targeted by a financial deepfake scam. Even worse, 43% fell for it. These scams use bogus images, videos or audio recordings to convince people to buy gift cards, wire money or otherwise spend. If you get a random financial request at work, reach out to the person directly to confirm.

Voice-cloning scams are terrifying - Know what to look for

Not long ago, a woman named Robin was sleeping beside her husband, Steve. They live in Brooklyn with their two young kids. No, this isn’t the setup for a joke. It’s the setup for a nightmare scam that’s happening everywhere right now.

Continue reading

1 in 10 executives

Say their company has faced a deepfake attack. This year, one worker joined a deepfake video call with his “teammates” that was so convincing, he wired $25 million to the scammers. Companies going through IPOs, mergers or reorgs are most at risk.

Repeat after me: Elon isn’t hawking crypto on YouTube: The AI deepfake Elon livestream ran for five hours, attracting over 30,000 concurrent viewers. It told folks to deposit ethereum, dogecoin or bitcoin on a site promising to double their money. Poof! It all went into someone else’s wallet.

Google's AI answers are a joke

00:00
–:–

Open/download audio

The only way to truly delete iPhone pics, deepfake law written with help from ChatGPT, and a warning if your Samsung phone breaks.

😱 The truth is out: Earlier this year, Raffaela Spone was accused of creating a deepfake video of her daughter’s cheerleading competitor vaping. The community turned on Spone, complete with death threats. Fast-forward — the video turned out to be real and the investigation was botched. Yeah, Spone’s suing for $20 million.

This guy will get you to sleep, seriously

00:00
–:–

Open/download audio

Can’t seem to get to bed? Benjamin Boster reads dry Wikipedia articles to help people catch some Z’s on his ‘I Can’t Sleep’ podcast. Bad sleepers say he’s changed their lives. Plus, woman duped by Keanu Reeves deepfake, U.S. military used fake Cisco routers, and new Apple iPads. 

Taylor Swift’s new album, “The Tortured Poets Department,” was leaked to Google Drive two days early. Swifties were quick to call it an AI deepfake (paywall link). Surprise, the leak was real. Swifties did get a consolation prize: 15 additional songs. Share this with your favorite Swiftie.

Deepfake p*rn survivor fights back

00:00
–:–

Open/download audio

In 2020, Breeze Liu found a nude video of herself — recorded without her knowledge — on P*rnhub. That video then spiraled into hundreds of deepfakes created of her. Seeking help to take them down, she found little to none. Now, she’s taking matters into her own hands.

😳 ED deepfake: Scammers used clips from a woman’s online videos to create a deepfake clone promoting erectile dysfunction pills. Now it’s plastered all over the internet. Even worse? There are no federal laws against deepfakes, so this poor woman can’t do much about it. Talk about a nightmare that lasts more than four hours.

4,000 celebrity victims of deepfake pornography

That’s just so far — and it’s only according to one investigation. The real number is much higher, I’m sure.

This mystery song has the internet obsessed

00:00
–:–

Open/download audio

Do you know where it’s from? No one does, and online sleuths are on the hunt. Plus, AI-generated deepfake food pics are popping up on DoorDash and GrubHub, people are selling selfies with Stanley Cups, and more!

Deepfake detector: Think the photo you found online is AI-generated? Find out for sure with free tools like AI or Not and Maybe’s AI Art Detector. Drag and drop, upload, or paste an image URL into the search bar, and they’ll tell you if it’s legit.

Taylor Swift's deepfake fiasco

00:00
–:–

Open/download audio

Found a deepfake of yourself online? Here’s your game plan if it happens to you.