Scam - Anatomy of an Attack

The other day, I was distracted by work, trying to multitask and get things done. My phone rang from a private caller. Normally, I ignore those and follow up if they leave a voicemail. That day, I picked up and put it on speaker so I could keep working.

“Is this (me)?” the scammer asked.

“Yes, what can I do for you?”

“Sir, this is the (town police department). This call is not for any charity; it’s about a legal matter.”

• Establish Credentials

I had just received a notice in the mail that my house alarm registration was due. The scammer continued to provide his credentials, claiming he knew all about me. Some details he mentioned were correct a few years ago but were no longer accurate—still, it wasn’t enough to raise a red flag yet.

“Sir, we just issued a bench warrant for your arrest and would like to give you the opportunity to turn yourself in and clear this matter up.”

Wait. What? Distracted, I had already qualified this guy as legitimate. “Why did you issue a bench warrant for my arrest?”

“Sir, you failed to show for a grand jury summons.”

“Excuse me, what are you talking about?”

“Sir, you were to be a juror in a murder trial. You failed to show up and then failed to show up for your hearing for failure to show.”

• Place the hook

Now I was online, searching for scams. “What?”

“Yes, we sent a notice (to your former address), and you didn’t show.”

“I live 3,200 miles away. What?” I found the scam online.

“Sir, we sent you a notice, and you failed to show up for your hearing. We have issued a warrant for your arrest. You need to stay on the line with me so I can inform any law enforcement that pulls you over that you’re on your way to take care of it.”

“Okay, I’m on my way.”

“Wait, we have to send you your warrant, and you have to read it out loud.”

“Is this a text?”

• Reel them in

“Yes, I sent it from my encrypted FBI line. Now please read it out loud.”

“Okay. (My name), jurisdiction blah blah (can I really say ‘blah blah’?), signed by judge…”

“Okay, now someone from the local police will call you.”

Wait, what? Oh yeah, you said you were FBI.

• Reenforce Legitimacy

Caller ID showed my city police. “Sir, you are on the phone with an FBI agent. We want to let you know your rights…”

Wait, what? Reading me my rights from a number that is my city police? Damn, this is good.

Then the scammer was back on the phone. “Sir, do you need to stop before you come down?”

“What for?”

• Reel them in

“So you can get money for your fine.” Whoa, hold the phone? A fine? “Yes, it was listed on your warrant that you read.”

Scanning the text again: $50k + $125k + $50k. “I don’t have $225k.”

“No, sir, it’s just 10%.”

I laughed. “What, $22.5k? You’ve got the wrong mark.”

“Sir, if you don’t come down, we will play this recording at your trial.”

“Great talk. I appreciate the scare. I’m at the police station and have turned myself in.”

The scammer hung up.

Final Thoughts

How did they target me? What else are they going to do? Where was my information compromised?

I learned afterward that these scammers will actually come to your house and do the scam in person. If it’s not you, it’s a loved one—a sibling, a cousin, or a niece/nephew—in trouble, and you can clear it up for them. They will take you to the bank.

Here’s the thing, though: they have been to your house and know where you live (they’ve also been to your loved ones’ houses). Law enforcement isn’t keeping up; our community is not keeping up.

These are not people looking for extra birthday money. These enterprises fund additional bad things.