A Retail Clerk Warned Him Multiple Times. He Still Lost $2,000.

A Retail Clerk Warned Him Multiple Times. He Still Lost $2,000.

A man in his mid-30s walked into a retail store and asked to buy Apple gift cards. The clerk — familiar with how often those cards show up in scam reports — gave him a warning before the first sale. The customer said the cards were for his brother overseas and bought about R2,000 worth, roughly $115.

Ten minutes later, he was back. The clerk warned him again. He bought more. This cycle repeated until the man had spent R36,000 — about $2,076 — on Apple gift cards, with a warning attached to every transaction. After his last purchase, he stepped outside for a smoke. He came back looking, in the clerk's words, "pale and defeated." He asked if anything could be reversed. It couldn't.

The clerk shared the account on r/Scams not to shame the victim, but to document something anyone who works retail has seen: scammer pressure can override direct, face-to-face warnings from someone with nothing to gain. The clerk was clear — they had warned him multiple times before each purchase. The money was already on the cards and unreachable.

Gobble's Take: The clerk did everything right — and that's the part worth sitting with.

Source: r/Scams

An Arup Employee Watched His "CFO" Explain a Confidential Deal — None of It Was Real

The call looked normal. Senior executives were on screen, speaking calmly, referencing real internal projects and real colleagues. The company's CFO explained that a confidential acquisition was underway and that several urgent transfers were needed. A finance employee at Arup's Hong Kong office, the British engineering firm, followed the instructions and moved the money across 15 separate transactions.

According to reporting on the incident, attackers had used AI tools to create deepfake video and cloned audio, drawing on publicly available sources — conference presentations, LinkedIn videos, company webinars, interviews — to reconstruct the appearances and voices of the executives with enough accuracy to pass a live video call. The attack did not target computer systems. It targeted a person's reasonable trust in what they could see and hear.

The final total transferred was approximately $25 million. The case has since become a widely cited example of how AI-assisted fraud has moved past phishing emails and into fully staged video environments.

Gobble's Take: Seeing someone on a video call is no longer the same thing as knowing who you're talking to.

Source: Packt Cyber_AI

Most People Cannot Tell a Cloned Voice From the Real Thing — and Scammers Know It

In a global survey of 7,000 people conducted by McAfee, 70% said they were not confident they could distinguish a cloned voice from the genuine article. One in ten reported already receiving a call or message that used an AI voice clone. Of those who did, 77% said they lost money.

Among people who reported financial losses, 36% lost between $500 and $3,000, and 7% lost between $5,000 and $15,000, according to the same McAfee research. The messages that arrive this way tend to follow a recognizable pattern, according to McAfee: urgency, distress, and a request for money — framed as a car accident, a robbery, or an injury — all delivered in a voice that sounds like someone the recipient trusts.

McAfee's research also noted that three seconds of audio is enough to begin building a voice clone, and that 53% of adults surveyed said they share voice data online at least once a week through videos, voice notes, and similar recordings. Security guidance from Kaspersky recommends ending the call and independently verifying any urgent request through a trusted contact number — not a number provided during the call itself.

Gobble's Take: A pre-arranged family code word — something only you and your relatives know — is still one of the simplest defenses available.

Sources: McAfee · Kaspersky · Adaptive Security

In Case You Missed It

Yesterday's top stories:

• Dad Met a Woman in 'Melbourne.' She's Now in Russia, and the Family Has Seen This Before.
• AI Has Made Phishing, Voice Cloning, and Fake Websites Faster to Deploy — Here's the Baseline Defense Families Now Need