515 | Cyber Security Update: Social Engineering & Pig Butchering
36:34 Share

Hello and welcome to Choose F5. Today in the show, we're actually going to do an update on securing your financial life. So Tom, who is a former FBI special agent and now works in cryptocurrency investigations for Binance, was last on in episode 397. And this was a real wonderful overview of really securing your financial life. It's the 80-20 analysis of, hey, what are the handful of things I can do to secure my financial life

Now, is this going to get you in the top 1%? Maybe, maybe not. It's going to get you close, but these are things you absolutely have to do now as part of our quote unquote in-house expert program that we've always thought of. I want Tom to come back on and just give us some updates from time to time on things that he's seen in the larger cybersecurity world, things that we should be doing today because this is constantly evolving, right?

the bad guys, if you will, they are constantly trying to come up with new ways to hack us and attack us. And having someone like Tom who lives and breathes this is really just such a bonus for our community. So with that, welcome to Choose.Fi.

Tom, thanks for coming back on the show. I really appreciate it. No, thank you, Brad. I really appreciate you having me back on. I told you this before we started recording, but I don't have a book to sell. I don't have a website to direct people to. I am here because I am part of this community. I have benefited personally. My life has changed drastically for the better because of you.

because of you, because of JL, Jonathan, all the people that have been in the community, been interviewed. It's been a tremendous upgrade in my life. And so I want to give back in any way I can. And I want to talk about today what's called

pig butchering or other types of scams that are really, really prevalent and really exploding and victimizing so many people. Okay, so that's quite a term, pig butchering. I've heard it in passing, and I got to be honest, I don't even know what that means precisely. So let's dive in. I'm just going to let you run with this. Just give us the overview. Sure.

Sure. Yeah. So pig butchering, it's obviously not a great term or an affectionate term when you start talking about like scamming people. But that's what it's just been called. So the sort of etymology of that term is when you fatten a pig up for slaughter, and then you kill them. And that's

That's a horrible way to say it.

And that's the slaughtering or the butchering part of it. It's just kind of a horrible way of just saying, getting people to trust the scammer and then scamming them of their money. So that's really all you need to know. It's an investment scam. That's the main one I want to talk about today because that's what I mainly investigate every single day of my life and where I see so many people lose everything.

all of their retirement funds. So it does target elderly people. It's called elder fraud, but not just elderly people. The demographic of 18 to 49 is also a huge part of this. So you have people that either have a lot of money invested and they are a target because maybe they're not as savvy or...

not able to discern what's a scam and what's not. But you also have people who are looking maybe on the younger side or just looking for that get rich quick type of option. And they see, oh, I can make a ton of returns over here. You know, oh, they're promising me 50% returns as opposed to what is this 8% VTI stuff, right? And people say, you know, in

In the crypto community, especially, they're like, I want 100x. That's all I want. 100x or nothing. And when you have that sort of mindset, usually from a younger crowd, you're setting yourself up to be victimized. Yeah, and I know from being

loosely a part of that kind of crypto world in the 2021, 2022, I had just such an interest in what was going on. And I mean, get rich quick is probably an understatement to describe what these people, and most of them are, like you said, kids really, what they anticipate. And it's just, it is so frustrating

far adrift from reality. And I do fear that they are just exceedingly susceptible to scams generally, but also just mismatch expectations with, hey, what is an actual investment versus, like you said, I mean, 100X or people are expecting 100 plus percent return in six months as if that's a normal thing, right? Like by no means is that normal. I think my back of the envelope heuristic is like, if something is earning 100%,

guaranteed, quote unquote, like 10% or more in a year, you got to your spidey sense needs to come up of like, okay, there might be more risk here than I otherwise anticipate. So total sidebar, but I Tom, I think that's important just for people to have like their own back of the envelope, it might be higher for some people 10 1214%. But goodness, if anybody's trying to say you're going to get a guaranteed return of more than 14% on something,

I mean, you got to be really wary of that. I fully agree. And this is not to say that investing in crypto is bad. I invest in crypto, so I don't want that to come off. But it's risk, right? That's what it comes down to, risk versus reward. It's what your personal risk tolerance is. But that's not the point of this episode. The point of this episode is to talk about how these scams work, their impact, and how to protect yourself. And what

What I see every single day is people falling victim to this. And the figures that I've actually read are that... I know this is not a US-centered only podcast, but for Americans specifically, it's 57,000 Americans are being scammed every day, whether that's investment scam...

fake job scams, tech support fraud, where you get that message that you have a virus or call us. All of these kind of fall under the umbrella of scams. But the one I really want to harp on today, like I said, is the pig butchering side of things. That's what I see growing the most. It's exploding. It's becoming...

a $3 trillion industry. For anybody who wants to just grasp that figure, there are scam compounds that are doing $50 billion a year.

That's crazy. So Tom, okay. How, I mean, this is massive, clearly. How does this type of scam start? What should someone be on the lookout for at the outset of this? I don't know if you'd call this like under the umbrella of social engineering or whatnot, but like, like you said, they're in essence trying to like befriend you or get in touch with you in some way. Like what are the initial touch points?

Yeah, that's a great point. So how this actually normally starts is usually a random text message. I don't know if Brad, if you've ever received one of those, I get them all the time. I don't know if it's because the scammers are specifically targeting me for battling against them. But, you know, I get this random like, hey, Cindy, when are we going to go play tennis? You know, some random text. That's an entry point to a conversation. What they want is for you to respond and say, yeah.

My name's not Cindy, it's Tom, you know, or something. Any kind of response is all they're looking for because what they're going to then follow up with is saying, oh, I'm so sorry, I must have gotten mixed up. How are you today? And you say, oh, I'm fine. How are you? Rather than, you know, you make a wrong phone call to the wrong number and you say, I'm sorry, wrong number.

End of conversation, end of relationship. That's not the goal here. What they're trying to do is get an in in the door. And then they say, oh, I'm Susie and I'm 38 years old. How are you today? What's your name and how old are you? And then they start this relationship.

They start asking you personal questions. They say, hey, and then it gets into maybe the romantic side of things where they'll be like, oh, I hope you have sweet dreams, honey. You know, every single night they will be peppering you with affection and looking to just develop some sort of relationship with you. That's one way. Other ways are dating app.

you're already receptive to being reached out to on a dating app. So that's a great way for them to reach out to you. LinkedIn, social, all kinds of different social media entries. My mother-in-law is a real estate agent. One in that they try to use is real estate leads. They will say, I am interested in buying this house. They're not interested in buying the house. What they're interested in is building a relationship with that realtor.

Okay.

in some capacity to start building a conversation and building a relationship. Another really common one is if you have liked, say, a certain actor on social media, well, they see your profile as liking, I don't know, George Clooney, right? So George Clooney, they will then make a fake George Clooney profile and then

specifically message you. I've received these myself from people on Twitter and other things. They make a similar profile and then reach out to you directly saying, hey, thanks for being a fan or whatever. Again, it's just an in. And I've seen multiple cases of people falling victim to thinking that's the actual person. They get excited. They build the relationship. And then they actually send

money. To bring this down to a very personal level, I have people in my own neighborhood, many, many people who have reached out to me who have relatives who have fallen victim to these scams. That's why not only do I do it professionally, but even personally, I see these scams on a regular basis and it just tears me up inside to see someone lose everything they have, whether it's something that they've worked for at a young age or all of their retirement savings.

Very common is to hear a story about they lost $700,000. That's not a small figure that I deal with every single day. That is a very common figure. And I've had people take out second mortgages, home equity lines of credits, do all kinds of stuff to generate more funds to send to these scammers. And that's where my mind directly goes to this ChooseFI community because we are an investing community.

And we are a community that has generally funds to invest. So I worry about this community specifically, not because they are not savvy.

but because it can happen to anybody. I've fallen victim to these scams before. Like I do this every single day. So in what sense have you fallen victim to it? I'm assuming you haven't like sent money to anybody, but like how far into it did you get? No, I didn't mean specifically this type of scam, but like just recently, literally just recently, I had someone in our local community page post about, hey, I'm getting my air ducts cleaned.

If we get a bunch of people together, we can get a group rate. And I was like, oh, that's been on my to-do list forever. I'll do that. Count me in. Well, little did I know, because I don't know every scam out there, that's a scam. People will join local Facebook groups or anything like that who are not part of that community forever.

to generate business for their company, and then they will get in the door and it's a bait and switch is what they do. They get in the door at a cheap rate, and then they'll say, hey, you've got this problem, you've got mold, you've got this. Then they'll charge you way higher than what is actually the cost to remediate that issue. That's just one scam that I didn't even know about that I fell victim to recently. I had someone come and do that. So just to say that anybody...

can be a victim. Don't ever think I am so savvy and I am so good at this. I literally investigate scams every single day of my life and I have fallen victim to that scam that I wasn't aware of. So that's why I want to bring this conversation to the Chooseify community. I was talking about that one, like George Clooney example. I had a family in my neighborhood reach out to me because their relative

literally is going through a divorce because they think that they're in a relationship with this actor. And unfortunately, they're very good at what they do. They're very good. These victims should not feel ashamed. If you fall victim to this, that's the other thing is like, we hear this number of 57,000 Americans a day or so many billions of dollars. That's what we know about. That's what's been reported. Most people are not going to be

public about falling victim to a scam. It is a shameful thing to think like, oh, I fell victim to this. But you shouldn't. These people that are doing these scams are very good. They're using tools like AI. Jeremy Schneider, I think his name is, that runs the Personal Finance Club.

Yes. He's the guy who puts out those amazing infographs. Yeah, he's so good. And he's coming on the podcast very, very soon. Depending on when this goes live, it'll be within a week or two, probably. Oh, nice. Yeah, I follow him on Instagram. And he just put out a thing, I think yesterday, about how someone took his voice because he's all the time, just like you, Brad, your voice is out there. Now there are AI tools where I could take your voice, Brad,

and make it say whatever I want. I could say, Brad said, you know what? That whole VTSAX thing, that's not what we're doing anymore. Things have changed. Now you need to go all in on BradCoin. BradCoin's the future. And literally, it'll be your voice saying it. And that's what Jeremy Schneider posted. Someone had taken his voice...

and said, hey, we're gonna do this whole other investing thing. So they're very good. That's what I don't want people to feel is ashamed if you fall victim to this. The key though is to talk about it, talk about how it starts. Like I said, they get that in, they develop that relationship, and then they also try to isolate you. The example I used of the relative in my community who's literally filing a divorce because she thinks that this relationship she's built up with this quote unquote actor is real.

So she's going through a divorce right now. She's already sent five figures to this scammer.

And I assume she plans to send a lot more once she has access to more funds. And that's where the family didn't even know until they started asking more and more questions. They try to isolate the victim so that they don't talk to their family about it. Because as soon as you talk, like if my dad eventually told me, hey, by the way, I've been talking, you know, I'd be like, whoa, whoa, whoa, whoa, whoa. That's a scam. Usually people not in the tunnel of that relationship understand

Right. Right. Like Jennifer Aniston is not like texting your dad. Let's be clear. But like you said, when you talk about it, I'm picturing it almost like a spell is broken. Exactly. Like there's some odd spell they have over you. But as soon as it gets aired out a little bit, it's very obvious to everyone involved that this is not real. Exactly.

Exactly. And they have very... This is not a whimsical thing they're doing. They're scripted. Every action and every conversation, it literally says, day one script, talk about this. Day two script, talk about this. Day three script, talk about this.

Talk about this. Then it gets handed off to another scammer up the chain. Once you start talking about actually investing, okay, then the scammer will say, hey, go to this website and you can invest. And they make it seem like you're investing your funds on your own into a platform that is legitimate. They are not.

taking your money. It's just you're investing. And then you'll put in, say, $50,000 and you'll see that money grow on the screen. It's not actually growing. The money is gone. But what you see is the money is growing

That's how this snowballs into $700,000 of losses. And then the final thing to be aware of is when you go to take it out, they will say, oh, there's a whatever, $10,000 processing fee. What they're doing is they're just saying like, okay, the person clearly is probably going to stop sending us money soon. Let's grasp at the last straw and

and try to get them to send one more time. And people will do that. They'll be like, oh, if I just send them one more chunk of money, then I'll be able to get my whole thing, a million dollars that it's grown to. And that's just their last ditch effort to scam you. And then they're gone. Wow. Okay. Yeah, that's wild. All right. I think we've done an amazing job of setting this up, giving an understanding of what it is, the potential ramifications, but I guess action steps now.

What do you do? I mean, I think the obvious thing that comes to my mind is anytime you get an unsolicited text or I don't phone call, I don't know if they even do that, but let's assume text or emails. I mean, I engage with 0% of those things. I just assume they are all spam and

if by some freak chance it's not spam and I blocked it or whatever, so be it. Maybe they can get in touch with me another way, but I just, anything I see another thing like these USPS, I'm always getting links, like the post office sending you this and here's a link. Like I get those a couple of times a week at this point, just delete immediately. But that's kind of like a broad stroke, but realistically Tom, like how would you advise, like what do people do? What are the actual action steps here?

No, you're going down the right road. So I personally also get all those like, hey, you have a delayed delivery. Click here to track your package. And if you're not expecting a package, then your antenna goes way up and you delete it.

But what if there's a very important package that you're waiting on? That's when it works. Yeah. Because it's the sense of urgency and just not being totally aware at the moment. That's when it gets you. So go back to your question about action steps. The action steps are even if you engage with somebody and say, sorry, wrong number, or...

oh, you click a link or something, we're going to make mistakes. None of us are going to be perfect. You do your best to not do those things. But the ultimate end point of knowing when to stop is the key of this person that you just met online to not invest based on their advice, do not send money, even to what appears to be a legitimate opportunity.

they will send you lookalike domains that are spoofed in some way. Just never take advice from someone you met online about sending money or investing at all in terms of like, here's a link, here's a relationship I'm building up and I'm trying to, you know, I get it. I say all of this when Brad may just be someone online that you're listening to and we're sharing advice. But that's different because what they're directing you to is saying like, go to Vanguard, Financier,

Fidelity, Schwab, do it on your own. Brad is never, if you ever receive a link from Brad, do not click it because Brad did not send you that link. Brad will never send you a link personally to invest in anything. Buy yourself, you know, Google Vanguard, find the actual website for these companies, invest in legitimate platforms and legitimate platforms could be cryptocurrency. Again, Coinbase, Binance if you're not in the US,

Yes, there are legitimate platforms to invest in cryptocurrency if you want to do that. I do invest in cryptocurrency. So again, I don't want this to be about crypto bad. It's about scammer bad.

And the key is using only reputable companies and not sending money to people online that have just sent you a link or an unsolicited text message or anything like that. So that's the real big takeaway. But not only that, you may be fine now that you listen to this episode.

But now I'm challenging you guys, you know, they're always say like takeaways from a from a choose if I episode actionable steps, right? Not only do this for yourself, but more importantly, talk to your friends and family, especially maybe your parents or grandparents or anything like that. Like I, I'd say this all the time. And I actually realized to myself that I had not talked specifically to my dad about this.

this until literally three days ago. And I called my dad. I was like, you know what? I know I've talked generally about this, but we need to sit down and have a conversation about you not...

clicking links or not sending money and I gave him the whole spiel right yeah do that I go get my haircut at great clips I start talking to the lady about pig butchering because I'm like I need to tell everyone about this I'm looking to protect everyone so that's what I'm challenging everyone in this community to do to not only listen to this episode and be aware of the problem but

but then to also spread awareness and talk to people, bring it up because you never know, someone could already be a victim. Like I said, 57,000 Americans every single day. I've had multiple families in my community reach out to me and that's only the ones that I'm aware of.

There are unknown victims out there right now that don't even know they're victims. And if you start having this conversation and saying, yeah, they build up this relationship, they send you to a website to invest, or they get you to go to another common one is they will get people to go to a Bitcoin ATM. They'll say, hey, you're...

20 minutes away from a 7-Eleven with a Bitcoin ATM in it. All I need you to do is go down to that Bitcoin ATM, deposit some funds, and then send it here for whatever reason that they've conjured up, whether it's tech support fraud. They say, oh, you've got a warrant out for your arrest. So this is what cracks me up. They'll say, you've got a Bitcoin. Yeah. They say, you've got a warrant out for your arrest.

But if you send us some amount in Bitcoin, we're not going to come arrest you. As a former FBI agent, I will say in every one of my plans that I wrote up to go out and arrest somebody, never is there a caveat that if that person sends me some Bitcoin, you know what? We're going to throw the case out. Yeah.

You're off the hook. Yeah. Oh my God. Yeah. And let's be clear, obviously you work for a crypto company. You've mentioned crypto a bunch of times, but for anybody writing this off saying like, oh, I'm not involved in the crypto world. This doesn't apply to me. That is not the takeaway from this at all. 0%. Crypto on some levels make scams a little bit easier. There's the untraceability aspect of it, or potentially that it's easier. Once somebody's gone, it's gone. There's no like big brother watching over. So I think

It makes the fraud a little bit easier from my kind of outside perspective. But Tom is not saying like, this is only valuable for people in the crypto world. Clearly not the case. It's the exact opposite. Like he said at the outset, this is for people, many people who are an older demographic, maybe more susceptible to it. But like he also said, 18 to 49, I think was the age range. And frankly, I actually just texted my daughter while we were recording this because she had remarked

time. And I didn't even tell you this a couple of months ago that she got on the same day, two identical text messages from two totally different numbers. You talk about scripts, right? Yeah. This was so fascinating. It was two totally different area codes, like seemingly having nothing to do with each other. And she just texted to me. It was quote, I feel like cooking steak.

Do you want to come over for dinner tonight? And she got one in the morning from like whatever X area code. And then seven hours later from a totally different number, totally different area code. And I mean, I guess that was page one of this script of, Hey, let's socially engineer this person on the other line. They didn't know that it was a 12 year old kid in this case, but I mean, she, luckily I've, I've tried to drill this into her head that like, no,

never engage with people on online, never click anything. My kids are like, at this point in time, you would be so maybe I'm a little overboard, frankly, but like they click on nothing. I have like drilled into their head. I'm like one bad click can mean the end of a whole lot of money potentially, or somebody hacking in, et cetera, et cetera. So like,

My kids are maybe now a little too scared, but I guess that's not so bad, but of clicking anything. So I would advise anyone listening to this, just please exercise extreme caution. There is no reason to ever click on anything.

anything anything from anybody that you don't i mean i would even argue from anybody like but certainly from people you don't know never click on anything if you get an email that even if it looks legit and there's just a simple way like i got a ups tracking number the other day i was like there's a 98 chance this is the legitimate person but they just gave me a tracking number i literally copied it went over to ups.com pasted it in and saw okay this actually was legit but

I'll be damned if I'm going to click on a link for no reason whatsoever. There's no benefit other than just a little bit of ease. But the downside is so disproportionate, Tom. So that's how I think about it. So I don't know if maybe I'm a little overboard, but I think I'm pretty buttoned up on this. Yeah, no, the lesson there is exactly what you do is take whatever information, if you're getting an email or a text or anything...

Let's say, for example, you got an email saying, oh, your bank account's in jeopardy in some way. Okay, great. Delete email, log into my app or the website the way I always do and verify that. I always tell the story of a judge when I was swearing out a warrant. After I was done swearing out the warrant, he said, hey, by the way, my wife got an email saying that we spent $80 on the Apple store, but we didn't. And

And I said, okay, well, let's do this. He called his wife right then and there. I said, go into your Apple account. Is there some sort of purchase? She said, no. I said, okay, then

then you're probably fine. Let's just go one step further. Let's look at the email address that they sent it from. Oh, yeah, it came from applemicrosoft.com. Well, that's a clue. Applemicrosoft.com is not a real place, right? So it's one of those things where just go to the source. And to get back to the point you brought up earlier, most of the victims I deal with

are not in the crypto community. They are not crypto investors. These are people who have just been enticed to do so or have been told, hey, this is where we need you to send the money. It just happens to be in Bitcoin or something like that. They are not crypto people.

most of the victims. There's a bank, I think, out of Kansas where the CEO or whatever the term is for the head bank guy lost $50 million. The whole bank imploded because he was sending and investing money this way. He was not a crypto guy. That is not the message here. The message here is that anybody can

can be a victim. And I do want to bring up one more action step. If you are a victim of this, because I don't want to just be like, oh, just don't be a victim, because there are so many victims. So if you know a victim, or if you are a victim of this, contact the police immediately. Contact your local police. Local detectives are getting better and better at this. It's still new to a lot of detectives. But usually I deal with like,

one or two guys in each state that is basically like the crypto guy for the state, for the local level. And then you also have the FBI, the Secret Service, and the IRS. All three are very good. Secret Service in particular and IRS CI are very, very good at this. The FBI has an entire unit that I was part of

That is strictly dedicated to virtual currency. So if you don't have any luck on a local level, you can always escalate that to a federal level. But the key is report it as soon as possible. You can go to ic3.gov and make a report there. And

The key here is, yes, in most cases, once you send that money, it might be gone. But what I do personally, legitimately in my job, is I deal with either training or assisting or working alongside law enforcement every single day. And we try to get some restitution for some of these victims. If we can act quickly, because crypto moves very fast, the scammers move very fast. But if you do it quickly enough, if you make the report...

There's always a chance that there are funds sitting somewhere that we can then work with law enforcement to seize and get back to victims. So that's the other actionable step is as soon as you are aware that you've fallen victim or someone you know is make a police report. And the one thing I want to warn about is that there are companies out there that are recovery companies that some are legitimate, but many...

recovery companies will say, I can get your crypto back. Say you lost $500,000. They will say, I can get your crypto back if you just give me $10,000 upfront. And now you're getting victimized again. So many of these recovery companies are scams themselves. They are either just like a shady business, and maybe they're kind of like a legitimate business. But what they're going to do

is they're going to do normally not a very good job investigating and tracing the money. I will look at those and be like, oh, look at all the mistakes they made. And what they're going to ultimately do is then refer you to law enforcement anyway, because law enforcement is the only thing that can get you back that money. Do not trust a recovery company to say that they can get you back money, because the only way to get the money back is to have law enforcement involved. So you might as well call law enforcement to begin with. And then one final note,

is these scammers have learned that as well. So the scammers, it could be the same exact guy you've been talking to and built a relationship with. Once he's done fleecing you of your money, now he's gonna go sit in a different chair

And he's going to become a recovery company. He has your information. He knows who you are and he knows how to work your buttons. And he's going to say, oh, did you just fall victim to this? Oh, I can help you out. He's just going to switch seats and now target you that way because they already have your information. So those are just things to be aware of that I want people to know about action steps, protecting yourself on the front side, but also once you're a victim, what you can do.

Wow. Yeah, that is really, really helpful. And you mentioned in passing there, ic3.gov. That's the number three, ic3.gov. It's the Internet Crime Complaint Center. And yeah, on this site, it looks like it's through the FBI. So ic3.gov is really important. Tom, I just wanted to ask just a couple super quick things as we close this out. So first,

There are instances where, again, with these links, right? Like somebody purports to be like tech support or something. And they're like, Hey, I want to take over your phone or take over your device to fix X, Y, and Z. Like, or, Oh, you've got a virus. Maybe you, like you said, they're sitting in both chairs. Hey, you clicked on this malicious link.

and now I can fix it. Just let me take over your device. Whenever, even when I see this with, again, I'm probably in the top 1% of crazy people who are worried about this, but even my alarm company, they needed to help me update something on the keypad, and they wanted to...

Send me a link. So they essentially wanted to be live with me in the room. And I'm like, no, I really don't want to do that. Can you just give me the instructions on the phone call and we can deal with it. But like, even that sketched me out because I just don't want anyone weaseling their way into my phone.

Yeah, what they'll do is I think you're referencing screen sharing. Yeah, that's what it is. Thanks for your time. Yeah. So what they do, and that's the key, is what they want to do is they want to get... It's not even necessarily about installing malware per se on your computer and infecting it in some crazy way. What they're really trying to do in a lot of these instances is just gain access to your computer

so that then they can start doing things. A case I worked while I was at the FBI, that's exactly how it started. Tech support fraud. They said, hey, you have some sort of virus. It's very sophisticated. They say, hey, I'm from company A, Norton, whatever. And

They'll send you an email that says, you have an $800 bill from Norton to take care of or whatever. You click that, you call them up, and they're like, oh, by the way, let me transfer you to the FBI. We need you to be a part of this case to help us out to get these scammers. It can be very elaborate. But at the end of the day, what they're going to do is they're going to log onto your computer. And there was one lady who said...

oh great you're going to help me and she was very trusting unfortunately that's what they prey on and she said yeah alright I'm going to go to the grocery store I'll be right back you've got access to my computer just go ahead and fix it right well while she's gone they've logged into her bank account

Yeah, they've created a crypto account for her at some platform, let's say Coinbase. And now they've deposited money onto Coinbase, bought Bitcoin, sent the Bitcoin to themselves. By the time she gets back, all of her money is gone. What they're trying to do is gain access to your computer to be able to do these types of things.

Yeah, that is crazy. That is absolutely crazy. And final thing I wanted to talk about, this actually reminded me when you talked about that video that Jeremy Schneider put up is in this day and age of people being able to spoof your voice. Right.

right? Like I see a potential and I know this exists, but a significant potential for, oh, hey, a grandchild calls frantically, quote unquote, grandchild calls their grandparents. I'm in trouble. I need $5,000, blah, blah, blah. Like, and it sounds like them. It is them for all intents and purposes. That's the voice that they're hearing. But I

I mean, how can people like the way that I've kind of talked about this with my girls is we actually have like a code phrase that we talk about. I'm like, if you bring this up in conversation, I will come to you anywhere, anytime, any place in the world immediately. Like this, I know this is like code red. And I know also that it's you, frankly, but.

Is that a reasonable way to go about this? Are there other simpler ways to do it? How do you think about that? Yeah, it's funny you bring that up because my dad and I, ever since I was a child, have had a code phrase. No kidding. And...

It's funny because I hadn't thought about that in a while. I still remember it because it was drilled into my head that if my dad ever needs to call me for whatever reason, and it wasn't because of AI 20 years ago that he was coming up with that, but it was just, here's a way to verify. And emails do that nowadays. I don't know if you are a part of any companies or platforms that do that, but you can have an anti-phishing code word that you put in and then every single email in the corner of it

will have that word.

So you can look and say, oh, they know my anti-phishing email. So that actually happens on a legitimate basis nowadays, like for websites. But yeah, personally, let's just be honest. The tools are going to get scarier and better. And so ultimately, just verifying the best you can is all we can do. But again, I grew up with that code word in my head that if something ever happened and someone was trying to say, hey, something happened to your dad, you need to come over here.

Well, if that person didn't get the code word, I don't trust them. So that's actually a great idea. And going forward, it's just about being as diligent as you can. We're all going to make mistakes, but it's just about being aware, talking to people about it and doing the best we can. Yeah.

Great advice. Tom, thank you so very much for being here. Thanks for being part of our community. People might recognize you from multiple of our Facebook groups as Tommy Dogs. So if anybody is looking for, hey, who's this guy, Tom? That's, you know, obviously security is important, right? So your full name is not out there, but Tommy Dogs on our Facebook groups and

Yeah, I would love to have you back for episodes like this, but also shorter snippets. As you see things in the world of cybersecurity, we're going to definitely put them on a bunch of our roundups. So Tom, thanks for being a friend. Thanks for being here. Yeah, thanks for having me. And if anybody does have questions along these lines, feel free to shoot Brad an email at feedback at choosefi.com. You know, I'm happy to hop back on and answer questions here live or in the Facebook group, wherever I can help. That's all I want to do.

Awesome. All right. Again, thanks for being here, Tom. And thank you for listening and take action on this. Just be aware. It's so important. This really, really matters. And that's why we dedicated an entire episode to this. Thanks for being part of the Choose to Buy community.

Thank you for listening to today's show and for being part of the Chooseify community. If you haven't already, the best ways to get involved are first, subscribe to the podcast. So you're listening to this on a podcast player, just hit subscribe, and then subscribe to my weekly newsletter. I actually sit down every Monday and write this by hand.

and I send it out Tuesday morning. So just head over to choosefi.com/subscribe, and it's really, really easy to get on the newsletter list right there, and I would greatly appreciate it. It's the best way to get in touch with me. You can actually just hit reply to any of those emails, and it comes directly to my inbox. So that's the way that I keep a pulse of the community, and

How We Keep This, the Ultimate Crowdsource Personal Finance Show. And finally, if you're looking to join an in-real-life community, we have Chooseify local groups in 300-plus cities all around the world. So head to chooseify.com slash local, and you'll find a list of all of those cities in 20-plus countries all across the world.

And if you're just getting started with FI or you have a family member or a friend who you think would be interested, two easy ways. Choose a FI episode 100 is kind of our welcome to the FI community. And even though it's a couple years old at this point, it still stands up and it's a really great just starting point to get an understanding of what is financial independence? What are we doing here? Why are we looking to live a more intentional life where we save money and use it as a springboard to live a better life?

And then Choose a Vi created a financial independence 101 course that's entirely free. Just head to chooseavi.com slash fi101. And again, thanks for listening.