Posted by scapbi 12/22/2025
Ask HN: My mother was scammed out of all her savings. What should I do?
My mother received a call from a scammer. They told her she needed to process some tax issue and prove that her bank account had enough money. In just a few minutes, they tricked her and manipulated her into entering banking OTP codes. All of her savings are now gone.
What makes this more dramatic is that last year I architected and helped a government department in my country build a big system. This system can track money flows across the whole country, to know where money comes from. I was very proud of this. It is the biggest achievement of my life. Even if nobody knows I built it, that was fine.
But now I cannot protect my own mother. I cannot protect my family. My system can track the money, but it is almost impossible to get it back.
When I went to the police, just in one small area, there were more than 20 cases in a single day. A hardworking student sent all their family's money, thinking it was for university fees or going abroad. An old factory worker lost all her retirement savings. So many people lost everything. That is when I realized that the system I built, the system I was proud of, is not enough.
All my own savings are gone too. (My mother was scammed into borrowing a lot of money and sending it to the scammers, and now it is my responsibility.) I had plans for the next few years: to do open source work, to write books about math and programming, to create a dream Go web framework, to give back to the community. Now all of that is gone.
But this is not only about me. I can still start over. I am strong enough to rebuild my life. But who will protect people like my mother? Or a poor student? Or a factory worker? Or so many others?
I can build systems. I can build distributed systems that scale to a whole country. But for what? What should I do?
I have been reading Hacker News for 12 to 13 years, sometimes posting from other accounts. I am writing here now to ask for advice and help from this community.
If anyone has experience with similar cases, or ideas on what can realistically be done, or even advice on how to move forward after something like this, I would really appreciate it. I will keep this account semi-private, because with the details above, I think some engineers from my country may recognize me.
How are scammers able to operate bank accounts without leaving any traces, and why don’t the police and banks have the power to reverse transactions that are obviously fraudulent.
I realize that in society we don't typically care for these kinds of approaches, but how else do you actually deal with literal evil that sits safely on the other side of the globe, when their own governments won't do anything to stop it?
The problem is, in reality any such activity would largely be indistinguishable from terrorism.
As an engineer, I hope that I can gain more knowledge, connect with more people, and do more to help those who have no one to protect them.
One thing is the government must act. These calls are mostly done from abroad. Phone companies can implement some protective measures. Banks too need to watch for common patterns (doesn't always help because scammers talk the victim around the checks). The society as a whole needs to get aware. What a single person could do is to keep contact with the relatives. I've read an expert report on one such case; the author wrote that even a single close someone could break the trance and stop the scam. In that case the victim happened to be a popular singer seemingly never alone, yet as it turned out she actually was a lone old lady with not a single confidant close enough for more than a month.
She was, of course, shattered with what happened (she lost close to $3M), but after some time in one if her interviews she said: "I will survive". She said it in Russian and did not comment on the phrase further, it must be too personal. Yet of course she meant that song. The song helps her. The song's story is different, but the emotion is same. We have all our love to give. A hard hit will do good if it makes us to commit on that.
A small gesture, but anything that can help I'm all for.
As for the human side, I have already shared my story within a closed community where other engineers know me personally. I am not begging for help; my goal is to inform more people about this situation and, if I am fortunate, to find others who are willing to join me in this fight.
Similar to Streisand Effect, there's now in Russia the term Dolina Effect [0] after this singer, referring to these "grandma schemes" where criminals direct the elderly to sell their property and then renege, relying on courts siding with them to keep the property and the money. Whatever the real story is, it's all so messed up.
(Most such sales happen at a large discount; half price is not uncommon. In many cases the buyer can clearly see something is off. Yet the price is so sweet the buyer cannot resist and risks getting sued afterwards. Of course, maybe this particular case is an exception.)
And that is bad because...?
Just like not all Ukrainians were slaughtering Polish people in most barbarian ways, icluding newborns and pregnant woman in Wołyń
1. Get police reports 2. Use the police report to start an issue with the bank 3. Work with a lawyer and escalate through the courts.
Do all of these things. Don't let the bank staff dissuade you from getting a lawyer involved now.
There is a second "thing to do" which is to regather yourself. You seem to feel, justly, as if your house was robbed. Take care of yourself as if that was true. Do a personal security audit if that is the sort of thing that makes you feel better. Journal, meditate, pray, etc as appropriate.
No defense is perfect and complete. That doesn't mean the defenders stop trying.
To @dang and the moderators: I honestly do not understand why this topic was flagged. This situation is real and very painful for my family, and it is beyond my imagination that sharing it would be a problem.
Sorry for any distress over this. The moderators didn't flag (or see) it. Users flagged it, and whilst we never know why users flag things, in this case it may have been because it seemed outside of HN's usual scope. But as moderators we think it's fine if the community is able to discuss a topic like this and provide meaningful advice and help. We're really sorry this happened to your family, and we wish you well in finding a way forward.
As I mentioned before, HN is a technology community. I hope that one day I can share only technical topics here, so we can focus the discussion on technical matters. I hope we can stand together as engineers, doing our part and taking responsibility, even if that does not fully address the root causes.
One urgent warning I want to share is about how scammers are now using AI.
In my country, they are already using AI for video calls, voice cloning, and highly scripted conversations. The person on the screen can look and sound real. The conversation feels natural and authoritative. For many people, especially older relatives, it is almost impossible to tell that it is fake.
This is no longer about obvious scam messages or bad phone calls. AI is making scams feel personal and trustworthy. Please warn your families. No bank or authority will ever ask for OTP codes or urgent transfers, even if it is a video call and the person looks real.
These kind of scams have become a huge problem in India (look up “digital arrest” scams). People of all backgrounds and age groups have lost a lot of money (to put it in US dollar equivalent amounts, imagine a person losing few hundred thousand dollars to a couple of million dollars). There is nothing like “digital arrest” in Indian laws. The government has tried to warn people about this.
The larger problem seems to be a combination of factors across disinterested entities:
1. The police aren’t interested in solving these (there’s a separate division for cybercrime). Filing a formal report is usually thwarted and avoided by the police. Even if they show some interest, it always involves paying them fat sums of money. There’s no guarantee that they can recover the money.
2. The banks aren’t interested in solving this. It seems like specific bank branch managers are involved and just stand by allowing large transactions (like cash withdrawals) to just be approved without raising any questions or concerns. All the talk by banks about “risk management” (alongside compliance matters) goes out the window just for the victims of these scams.
3. With SMS OTPs being common and the scammers recruiting some locals to run SIM farms/phone farms, the telecom companies aren’t interested in solving issues within themselves either. Though there is a limit of nine phone numbers (total) per person in India, and though there is on paper a KYC process (including a live video) to get a phone number, the telecom companies have systems and employees who can provide numerous numbers based on stolen or fake IDs.
4. The government is a bystander and appears helpless. Instead of creating laws and enforcing existing laws, it focuses on some awareness that these scams are not genuine.
5. The Supreme Court finally ordered CBI (the Indian equivalent of FBI) to investigate these scams.
So there you have it: none of the entities involved has any interest or will to do something about the problem. There will always be excuses that the scammers are in another country.
Unfortunately the scams themselves range from amazingly complex to what should be really easy to spot. I make it a rule to NEVER give personal information to someone that calls me unexpectedly, at least nothing that isn't already effectively public information. Annoying when your doctor's office has an automated system that calls and the first thing it does is ask for your social security number... My response is "nope, not doing it" and that's what I told anyone that would listen at that office every visit... it's training people to get scammed.
Think of it this way: If I needed a document from your house, would you give me a permanent copy of your keys? Probably not. Unlike a physical key, a shared password can never truly be taken back.
No legitimate organization needs full, permanent control over your bank account. If a situation feels incredibly urgent, it is almost certainly a scam.
• Taxes? The government already has the access they need. • Loans or Visas? Ask for payment instructions or a formal bank certification instead.
Everything can wait a day—except a scammer. Educate your circle: urgency is their greatest weapon.