Hacking Humans: Despicable Donation Request Scamming
Hosted by N2K Networks
Release Date: January 30, 2025

Introduction

In the latest episode of Hacking Humans, hosted by Dave Buettner, Joe Kerrigan, and Maria Vermazes, the team delves into the intricate world of cyber deception, focusing on donation request scams that exploit empathy and generosity. This episode provides a comprehensive exploration of various scam techniques, their real-world implications, and the psychological manipulation employed by cybercriminals.

AI-Generated Scams: The "Grace" Leather Goods Fraud

Timestamp: 01:17 - 11:38

The episode opens with a discussion on a sophisticated scam reported by Ampix Cyber, wherein scammers use artificial intelligence to create fake personas selling counterfeit goods online. The focus is on "Grace," a fictitious leather artisan supposedly retiring after 34 years of craftsmanship.

• Joe Kerrigan introduces the scam:
  "Grace is hanging up her tool belt. She's worked her career and it's time to retire. But before she does, she's putting everything on sale." ([02:03])

• Maria Vermazes questions the authenticity:
  "Are the goods real?" ([01:59])

• The hosts analyze the deceitful tactics, noting the realistic portrayal of Grace through images and videos, making it difficult for unsuspecting buyers to detect the fraud.

• Dave Buettner observes:
  "She looks like an older woman you'd enjoy having a conversation with. No red flags about Grace herself, but of course, Grace is not real." ([02:42])

The scam involves enticing offers like up to 80% off genuine leather bags, which upon purchase, deliver low-quality, plastic-based products labeled as "PU Leather." Attempts to return these products are thwarted by misleading processes that mimic legitimate platforms like PayPal, as highlighted by customer complaints and poor Better Business Bureau ratings.

Romance Scams and Tragic Outcomes

Timestamp: 11:38 - 23:30

Transitioning from product-based scams, the hosts discuss the devastating impact of romance scams, citing recent legal actions and tragic personal stories.

• Maria Vermazes shares a CBS News story about the sentencing of six individuals involved in a romance scam, including Jennifer Gosia, a former US Post Office employee and Iraq veteran. While two Nigerian nationals received substantial prison terms (10 and 20 years respectively), Jennifer was sentenced to three years of probation due to her limited involvement and coercion by her ex-boyfriend.
  "The judge did note that the woman who only got six months was not really all that involved and may have also been coerced into it." ([13:03])

• The tragedy of Laura Kowal from Galena, Illinois, is recounted. Kowal, a retired healthcare executive, was scammed through Match.com, resulting in her loss of $2 million and her subsequent disappearance. While authorities classify her death as a suicide, discrepancies like the presence of a burner phone suggest possible foul play or further victimization.
  "Her last text message to one of her friends was all is fine... but in her car, they found the packaging for a cell phone, a burner phone that she didn't have in her possession, which is kind of strange." ([14:22])

The discussion emphasizes the manipulative cycle where victims, after losing significant funds, are coerced into becoming money mules, perpetuating the scam network.

• Joe Kerrigan reflects:
  "These guys are all based out of, I think it says West Africa, but they're probably out of Nigeria and another one says here Ghana... the Nigerian government is actually pretty cooperative with the United States in extraditing these guys." ([17:13])

The hosts advocate for increased awareness and research into effective support systems for victims to prevent further exploitation.

Restaurant Reservation Auction Scams

Timestamp: 23:30 - 35:28

Shifting focus, the episode explores how online reservation systems for popular restaurants are being exploited through black market auctions and botnets.

• Dave Buettner describes his personal frustration:
  "Going up to a restaurant that looks completely empty with a group of four plus people and being told actually we're completely booked, even though there's nobody in the restaurant." ([25:03])

• Data Dome's research reveals that bots are mass-registering reservations during events like New York City's Restaurant Week, scalping tables for exorbitant prices (e.g., $500 per reservation), disrupting both consumers and restaurant operations.
  "These online reservation systems... are completely vulnerable to botnets, basically snatching up huge amounts of reservations at a time before a real person could and then scalping them." ([27:03])

• Maria Vermazes proposes a potential solution:
  "If a restaurant said, okay, you're gonna make a reservation with us, the average per person bill here is say $50. Your reservation is going to cost you $25 per person." ([32:10])

The hosts discuss the sustainability of such practices and the ethical dilemmas faced by restaurants in balancing exclusivity with accessibility. They also touch upon the broader implications, including possible denial-of-service attacks against competitors through reservation manipulation.

• Dave Buettner lamentingly states:
  "It's all something that should be free. It should be free to make a reservation." ([33:50])

The segment concludes with thoughts on how restaurants and reservation platforms might innovate to mitigate these scams without alienating genuine customers.

Scams from Reddit's r/scams: Despicable Donation Requests

Timestamp: 35:28 - 41:52

The episode features an engaging skit mimicking scam interactions found on Reddit’s r/scams, illustrating the deceptive strategies used in donation requests.

• Joe Kerrigan and Dave Buettner role-play a scammer and a victim engaged in a fraudulent donation request that initially appears credible but quickly shifts into a classic gift card scam.

  Example Dialogue:

  • Joe (as Scammer):
    "Hello, I came across your campaign ad on GoGetFunding.com about needing donations for your cause... May the good Lord be with you through this hard time." ([36:19])

  • Dave (as Victim):
    "I see. Yes, please proceed. What should I do?" ([39:30])

  • Joe (as Scammer):
    "To complete the biometric signature security settings, you can activate your account to receive the donation. You are required to go to the nearest store to get an Apple iTunes gift card of €50." ([39:47])

This simulated exchange underscores the manipulative tactics scammers use to exploit goodwill, culminating in the demand for gift card purchases as a means to "release" funds. The hosts highlight the emotional manipulation and the deceptive façade that makes such scams particularly pernicious.

• Maria Vermazes critiques the scam:
  "Taking advantage of someone in need, stringing them along by saying you're going to help them... despicable." ([41:21])

Conclusion and Takeaways

The Hacking Humans team wraps up the episode by emphasizing the importance of vigilance and education in combating various forms of cyber scams. They encourage listeners to stay informed, verify the legitimacy of online interactions, and support victims in recovering from these malicious exploits.

Notable Quotes

• Joe Kerrigan on AI-generated scams:
  "Grace does not exist. No. And in this image, she's wearing what you would expect a leather worker to wear." ([02:13])

• Maria Vermazes on romance scams:
  "Once you've been victimized by these guys, they continue to victimize people by coercing them and then having them become the legs here in the United States for getting the money and moving it around." ([17:36])

• Dave Buettner on reservation scams:
  "It's all something that should be free. It should be free to make a reservation." ([33:50])

Final Thoughts

This episode of Hacking Humans provides a sobering look into the evolving tactics of cyber scammers, from AI-generated personas to sophisticated romance and reservation scams. By dissecting real-world examples and engaging in thoughtful discussion, the hosts equip listeners with the knowledge to recognize and resist these deceptive practices.

For more insights and detailed analyses, visit hackinghumans2k.com.