Episodes

  • Cybersleuth Scotty Exposes Massive Tech Support Scams and Smishing Attacks

    Cybersleuth Scotty Exposes Massive Tech Support Scams and Smishing Attacks
    Jul 3 2025
    My name’s Scotty—friendly neighborhood cyber sleuth—and I’ve got your back in the war against scams, creeps, and keyboard villains. Trust me, it’s been a wild week in the scamverse.

    Let’s talk about the big headline: a man named Vikram Desai was arrested in San Jose on Monday after running a massive tech support fraud ring that stole more than $14 million from victims across the U.S. His crew impersonated Microsoft and Norton support, convincing people their devices were "infected" and then charging them thousands to "fix" fake problems. Classic rat-in-a-suitcase scam.

    Now here's the twist—he was caught thanks to a sting involving gift cards and remote desktop recordings. The FBI, working with Apple and Visa fraud units, noticed a pattern: multiple elderly victims buying massive amounts of app store credits after receiving pop-ups on their screens. One woman even screen-shared her desktop with what she thought was a technician—turns out it was a cyber-sockpuppet rerouting her bank funds in real time. Wilde.

    Meanwhile, over in London, authorities nabbed Luka Baric, the 24-year-old behind the Telegram-based scam market called "SpoofCity." This guy sold fake identity kits, phishing templates, and even paywalled call spoofing tools that made your number appear like your bank’s. Wanna hear the kicker? He got caught not via hacking but because he tried to buy a Rolex... with crypto... off a stolen ID while livestreaming himself unboxing the watch. Smooth criminal? Nope, just dumb.

    Now for something fresh—if you’ve received texts saying your FedEx package is stalled or your Netflix account is suspended, don’t click that link. This is part of the fast-growing "smishing" wave. In fact, the FCC issued an alert just yesterday warning that shipping and streaming scams have spiked over 300% in just a month, largely due to AI-generated texts that look eerily authentic.

    So, what can you do? First—never, ever trust urgency. Scammers thrive on making you panic. Second—if someone asks for payment via gift cards, crypto, or money transfer apps like Zelle “to avoid suspension,” that’s your red flag buffet. And don’t get comfy just because it’s a big brand name—scammers are impersonating Netflix, the IRS, Chase Bank, you name it.

    Finally, always verify with a second source. If you get a weird email from Amazon or a text from your "bank," go directly to the official app or website. Never trust a link sent out of the blue.

    Alright, cybernauts—that’s your scam scan for the week. Update your passwords, patch your devices, and keep your wits sharper than a phishing hook. I’m Scotty, reminding you: out there, it’s not paranoia if they’re really trying to get your login. Stay safe and stay encrypted.
    Show More Show Less
    3 mins
  • Beware Crypto Scams, Bank Phishing, and AI Voice Tricks: Your Ultimate Cybersecurity Roundup

    Beware Crypto Scams, Bank Phishing, and AI Voice Tricks: Your Ultimate Cybersecurity Roundup
    Jun 28 2025
    Hey hey! It’s your cyber-savvy cousin Scotty here, sliding into your brainwaves with a hot-off-the-wire update on the latest internet scams. And trust me, it’s been a spicy week in Scamland.

    Let’s start with the big one — just days ago, the FBI finally nabbed Frederick "Freddie" Mansfield, aka the Crypto Phantom, right outside Phoenix, Arizona. This dude was running a crypto investment scam so slick, he had retirees, influencers, and even a retired MLB pitcher dumping Bitcoin into his fake "BlipFund." He promised 40% monthly returns using a secret trading algorithm — classic red flag, right? Turns out, his secret algorithm was really just spending your money on Lambos, rent in Sedona, and some very questionable NFTs of koalas doing yoga. Over $89 million vanished before the authorities caught up with him. Don’t trust anyone guaranteeing huge returns in crypto, folks. If it sounds like a gold mine with zero risk, it’s probably a digital graveyard.

    Next stop, Chase Bank users — if you’ve gotten a “fraud alert” text in the past 72 hours, listen up. There’s a phishing wave going around right now, pretending to be Chase’s security team. The message says your account is locked and includes a link that looks real — until you click it and it asks for your login, SSN, and ATM PIN. I talked to my source at the Cybercrime Division in New York, and they said it’s part of a ring operating out of Lagos and Bucharest. So remember: banks will never ask for that kind of info over a link. If you get a weird message, go to the app or call the bank. Don’t play Tap the Link with your life savings.

    Now here’s a weird one — AI voice scams are hitting the suburbs. Just this Tuesday, a woman outside Sacramento got a call from someone using her daughter’s voice, saying she'd been kidnapped. Spoiler: she was at summer camp, roasting marshmallows. Scammers used social media clips to deepfake her daughter’s voice. Fast thinking mom contacted police, and the FBI is now tracing the spoofing servers. Rule of thumb: always confirm with a second call, use safe words with family, and don’t panic buy their lies.

    Also, if you're on Facebook Marketplace — extra caution. There’s a surge in Zelle scams where fake buyers trick sellers into “Zelle business account upgrades.” Pay attention: no such upgrade exists. If someone says you need to refund them for an “auto-converted business fee,” back away slowly and report it.

    Scotty’s final tip? Turn on two-factor authentication, use password managers, and for the love of bandwidth — stop reusing your dog’s name with an exclamation mark for every login. C’mon, we’re better than “Buster!123”.

    That’s your Scam Sync-up for June 28, 2025. Stay smart, stay skeptical, and as always — if your phone rings and it smells like panic, it’s probably not opportunity. It’s a scammer.

    Catch ya in the next breach!
    Show More Show Less
    3 mins
  • Cybercrime Crackdown: Scam Busting Tips for the Digital Age

    Cybercrime Crackdown: Scam Busting Tips for the Digital Age
    Jun 26 2025
    Hey hey, Scotty here—your favorite cyber sleuth and certified buster of bogus bytes. Let’s get straight to it: scams are popping off this week like popcorn in a microwave, and some recent headlines are straight outta a hacker-themed soap opera.

    First up—chances are you've laughed at a prince-from-Nigeria email at least once in your life, right? Well, fast-forward to now and welcome to the evolved version. Last Friday, authorities in Canada finally nabbed the guys behind a global business email compromise scheme, led by none other than Seun Adediran, a 34-year-old dual citizen of Nigeria and the UK. These jokers were running sophisticated phishing campaigns, intercepting legit business emails and rerouting wire transfers to their own accounts. Estimated damages? Over $20 million in just two years. That’s not Netflix money—that’s international villain money.

    Meanwhile, over in the States, the beloved state of Ohio just busted a crew using deepfake tech to impersonate business executives via video calls. Yeah, AI-powered scams are very much real and getting creepier. These fraudsters used generative AI to clone voices and faces for convincing Zoom calls—and convinced finance teams to transfer six-figure sums. Rule of thumb: if your CFO suddenly sounds like they’re reading cue cards on fast-forward, hang up and call them directly.

    This week’s PSA: AI + scams = your bank account crying.

    Now, let’s talk about the TikTok “investment guru” trend, which is less a trend and more an elaborate carnival mirror of lies. A guy named Devin Schroeder from Arizona just got arrested for allegedly running a Ponzi crypto scheme he'd branded as a “blockchain wealth strategy.” Spoiler: it was just him spending investor money on Lambos, not Litecoin. Authorities say he duped followers into handing over nearly $4 million. If you’re getting finance tips from someone who records in a pool float with a ring light—reconsider.

    And the bombshell from earlier this morning: the FBI issued a warning about scam apps targeting seniors using QR codes on legitimate health websites. It's called QPhish—no, that’s not a band—where users scan a code to “download their vaccine passport” and instead end up installing a spyware-laced app. Wild stuff, right?

    So here’s the game plan to dodge these digital bullets: never trust QR codes unless they’re on something you physically initiated—like a bank’s sign-in page or a trusted retailer. Check and double-check URLs. And call humans. Seriously. The phone still works.

    And scammers love urgency. “Act now!” “Limited time!” It's not a discount, it's a danger flag. Trust but verify, folks. And if your tech-savvy niece says, “That looks sus”—listen to her.

    In this age of AI clones, slick TikTok snake oilers, and QR code chaos, keep your head on a swivel. And remember: when in doubt… ask Scotty. I’ll always be out here to keep you a step ahead of the con game.

    Stay sharp, stay safe, stay scam-proof. Scotty out.
    Show More Show Less
    3 mins
  • Beware the Latest Internet Scams: Crypto Traps, Deepfake Fraud, and Sneaky QR Codes

    Beware the Latest Internet Scams: Crypto Traps, Deepfake Fraud, and Sneaky QR Codes
    Jun 24 2025
    Alright folks, it's Scotty here—your friendly scam-sleuth, cyber hawk, and digital disaster whisperer. I’ve got the scoop on the latest internet scams swirling around like malware in a junk folder, and believe me, this week has been noisier than a data center on Black Friday.

    So, let’s jump in. Big news first: just days ago, the FBI confirmed the takedown of a massive crypto scam ring based out of Miami. This was Operation Crypto Trap, not to be confused with your cousin's Instagram crypto "guru." These guys were using fake apps that mirrored real exchanges—names like Kraken and Coinbase—to trick users out of millions. Victims downloaded what they thought were legit apps, entered their private keys, and boom—wallets drained faster than your phone’s battery at 3%.

    The mastermind? A guy named Javier Ruiz-Santos, and let me tell you—this fella was a class-A cyber snake. He even hired voice actors to impersonate support staff. He was arrested last Wednesday, and the feds say over $30 million worth of crypto was recovered. Moral of the story? Always, always verify app sources and URLs. If your crypto app is asking for your seed phrase out the gate, you better ask it for ID.

    Now over in Europe, INTERPOL took down an AI voice scam operation run out of Bucharest. This one’s wild. Using deepfake audio magic, scammers cloned CEO voices to request wire transfers from unsuspecting employees. One French tech company wired €680,000 thinking their CEO was stuck in Tokyo needing "urgent liquidity"—which sounds legit until you realize nobody says "urgent liquidity" unless they’re in finance or full of it. The AI-generated calls were creepy good. So, if your boss’s voice suddenly sounds too slick—or calls from an unknown number demanding money—slow your roll and verify on a known line.

    Closer to home, there’s a PayPal scam that's picking up steam. People are getting emails supposedly from PayPal, saying there's suspicious activity on their account and providing a "secure" link. Spoiler alert: it's anything but. That link leads you to a lookalike site that grabs your credentials faster than a bored hacker on a slow Tuesday. Remember, legit companies won’t ask for billing info via email. If in doubt, go to the site directly, not through a link.

    Oh, and I’ve gotta mention the latest social engineering trick: QR code scams, or as I call them—Sneaky Pixels. Bad actors are slapping fake QR codes on parking meters, restaurant tables, even gas pumps. You scan to pay or view a menu, and instead you’re feeding malware into your device like it’s brunch. Bottom line: if a QR code looks sketchy or misplaced, don’t scan it. Ask for a verified payment method.

    So that’s the scoop. In 2025, scams are smarter, slicker, and more cinematic than ever. Stay paranoid in the right ways, double-check everything, and remember—the internet never sleeps, and neither do the scammers. Scotty out.
    Show More Show Less
    3 mins
  • Beware the Carnival of Cons: Unmasking the Latest Internet Scams

    Beware the Carnival of Cons: Unmasking the Latest Internet Scams
    Jun 22 2025
    Hey, it's Scotty—your friendly neighborhood cyber sleuth, spinning you the latest in digital deception from the wild world of internet scams. Buckle up, because the past few days have been a carnival of cons, and I've got the freshest tech trickery hot off the press.

    So let’s start in sunny Florida—because of course it's Florida—where just this week, a man named Thomas Breeden was arrested for running a massive romance scam ring. We're talking over $2.5 million swindled from victims across the U.S. through phony online relationships. This guy and his crew used fake military identities, love-bombed their targets on apps like Facebook Dating and Instagram, and then pulled the classic, “I need money to get off deployment” routine. And people fell for it—hard. The key takeaway? Never send money to someone you haven’t video chatted with, especially if they say they’re in the military overseas. Real love doesn’t ask for Apple gift cards.

    Now, pivot to the West Coast—San Francisco to be precise—where the FBI nabbed a duo tricking people with deepfake voice scams. Yes, that's right, AI is now making scams sound like your actual cousin Jimmy. These scammers snagged voicemail samples off social media, then cloned voices and made urgent calls to folks pretending to be family in trouble. One mom wired $10,000 thinking her daughter was in legal hot water. Spoiler alert: Daughter was at a yoga retreat.

    And speaking of AI, let’s talk about the Netflix doc that dropped three days ago—“Face Value: The Deepfake Conspiracy.” If you haven’t watched it, set aside 90 minutes tonight. It breaks down how scammers are using generative AI for fake job interviews, crypto cons, and even ID fraud. One victim literally did a Zoom interview with what looked and sounded like a real recruiter. Turned out? Full-on AI puppet. Moral of the story: if video quality is wonky, lips don't sync, or your gut says “nah,” hit pause. Call the actual company and verify.

    Meanwhile, tech support scams are making a bold comeback, especially targeting seniors. Over the weekend, Microsoft warned that fake pop-ups claiming your system is infected are spreading again—some even directly calling your number. These pages look legit, logos and all, and ask for remote access. Don’t fall for it. Microsoft, Apple, or anyone reputable is never going to cold-call you or demand you install anything unrequested. If your computer’s screaming at you to call a 1-800 number, it’s not help—it’s a red flag waving in neon.

    Now if you’re thinking, “Scotty, there’s no safe space left on the internet!”—breathe. There is. It’s called awareness. Freeze before you click, double-check sender addresses, use MFA everywhere, and for the love of data, don’t believe everything you see or hear—especially if it’s too dazzling to be legit.

    That’s all from me for now. Stay sharp, stay skeptical, and as always—if someone says they’re a Nigerian astronaut stuck in space and just need gas money to get home, politely block and move on. Scotty out.
    Show More Show Less
    3 mins
  • Unmasking Digital Deception: A Scam-Busting Guide for the Modern Age

    Unmasking Digital Deception: A Scam-Busting Guide for the Modern Age
    Jun 20 2025
    Hey folks, Scotty here—your friendly neighborhood fraud-fighter and all-around scam-sleuth. Let’s skip the pleasantries and talk about what’s lighting up the digital underworld this week.

    So grab your coffee and brace yourself—because we’re diving into the deep end of the phishing pool.

    First up, let's talk about the Netflix smishing scam that's swept across inboxes and phones like a bad sequel. Just earlier this week, folks from New York to Nevada got hit with texts claiming their Netflix account had been suspended and urging them to “click here to update billing info.” Sounds familiar, right? Well, it’s fake. The site looks exactly like Netflix—but don’t fall for it. The giveaway? The URL was something like “netflx-user-verify.com.” Real subtle, guys.

    Now, speaking of not-so-subtle, let’s talk about the big bust that just went down in Lagos. Yep, Nigerian authorities, working hand-in-hand with Interpol, nabbed a crew allegedly responsible for a multi-million dollar Business Email Compromise ring. The alleged ringleader? A guy who called himself “Captain,” no less. This crew targeted small to mid-sized U.S. firms, spoofing invoices and redirecting funds to their own accounts faster than you can say “wire fraud.” This arrest is a huge win, but let’s not kid ourselves—scammers never sleep.

    And while we’re global, there’s been a massive rise in AI voice clone scams in Canada and the UK. Picture this: you get a call from your daughter saying she’s in jail and needs bail money. It’s her voice. Her inflection. Her panic. Except… it’s not her. It’s deepfake audio, and it's wicked convincing. The Canadian Anti-Fraud Centre says complaints about AI-enhanced scams have tripled since May. Pro tip: set up a family “safety word.” Yes, it feels silly—but so does losing five grand to a robot with your niece’s voice.

    Over on Reddit and X (formerly Twitter), folks are also talking about the Amazon job scam. You get tagged on social where someone claims there's a “work-from-home opportunity with Amazon.” Spoiler: it's not Amazon. After a few “training tasks,” they ask you to pay a fee to unlock your earnings. If a job makes you pay up front—it’s not a job, it’s a scam.

    Last but not least for today, crypto scams are going vintage—phone calls. I kid you not. Scammers are calling people saying they’re from Coinbase fraud prevention. They somehow reference your actual transactions or wallet IDs, making it sound legit. Then they ask you to “verify” your recovery phrase. Don’t ever do that. Real crypto platforms will never ask for your seed phrase over the phone. That’s like giving your house keys to a stranger in a ski mask.

    So, what can you do? Three quick things. One: slow down. If something feels urgent, it probably isn’t. Two: verify everything through another channel. And three: when in doubt, ask Scotty.

    Stay sharp out there. Scammers evolve, but so do we. Catch you on the encrypted side.
    Show More Show Less
    3 mins
  • Scam Alert: Evolving Cyber Threats Demand Vigilance in 2025

    Scam Alert: Evolving Cyber Threats Demand Vigilance in 2025
    Jun 18 2025
    Hey there, it's your cyber-sleuth Scotty, tuning in with your vital download on the scam scene as of June 18, 2025—and let me just say, if you’ve got a digital pulse, you better be alert, because scammers are evolving like malware on a mission.

    Let’s jump in. Headlining this week: the bust of the “Prime Access” ring. A group of fraudsters out of Miami were arrested on Monday for running a subscription scam disguised as a fake Amazon Prime renewal. Yeah, it was that slick—robo-calls and emails telling users their Prime memberships were ending, then walking them through a screen-share under the guise of "updating payment info." Instead, they walked away with full bank access. The Department of Justice nabbed four suspects, including the ringleader, Julian Vega, who ironically bragged online about “running cloud businesses.” The only thing getting cloudy now is his future.

    And in Europe, the UK’s National Crime Agency just took down a cybercrime marketplace called LabRat. This site offered plug-and-play scam kits—including phishing templates, fake banking login pages, and SMS spoofing tools. Basically a buffet for wannabe criminals. Arrests spanned across London, Birmingham, and even a cozy cabana in Ibiza. Authorities believe LabRat kits were used in over 20,000 identity theft cases globally just in the last six months!

    Now, you’ve probably seen the latest Instagram “shadow fund” messages, right? The ones promising 5x returns through some mystery crypto scheme if you just “DM to invest”? That’s a scam revival from 2022—it’s back, hotter than ever, now layered with deepfake videos featuring AI voices mimicking influencers like MrBeast and Kevin O'Leary. That’s right—your favorite finance faces backing fake tokens. These AI-generated promos are nearly flawless. But listen close: if someone you’ve never met wants you to invest quickly, that’s not a startup opportunity. That’s a red flag with a referral code.

    And speaking of AI, let’s talk voice clone phishing. Just this past Friday, a woman in Seattle wired $26,000 after getting a “call” from her supposedly kidnapped niece—except it wasn’t her niece. It was a generative AI-simulated voice copied from ten seconds of TikTok audio. Terrifying, right? The trick: urgency plus family equals panic, and panic kills rational thinking. Always verify with a second trusted source before reacting to a situation like that.

    So, here’s your Scotty-approved firewall checklist: Never click email links that urge you to “confirm personal info”—real entities don’t ask that way. Ignore calls claiming to be from the IRS or Amazon demanding urgent action. And if you hear a loved one in trouble, hang up and call them directly. Old school works.

    Scams are crafty, evolving, and way too fast. But lucky for you, I’m faster. Stay safe, stay savvy, and remember—Scotty’s watching the wire so you don’t have to short-circuit.
    Show More Show Less
    3 mins