Top
Best
New

Posted by scapbi 12/22/2025

Ask HN: My mother was scammed out of all her savings. What should I do?

Today is the worst day of my life. We live in a country near Cambodia, and as you know, it is kind of a dream land for scammers. Today, it happened to my family.

My mother received a call from a scammer. They told her she needed to process some tax issue and prove that her bank account had enough money. In just a few minutes, they tricked her and manipulated her into entering banking OTP codes. All of her savings are now gone.

What makes this more dramatic is that last year I architected and helped a government department in my country build a big system. This system can track money flows across the whole country, to know where money comes from. I was very proud of this. It is the biggest achievement of my life. Even if nobody knows I built it, that was fine.

But now I cannot protect my own mother. I cannot protect my family. My system can track the money, but it is almost impossible to get it back.

When I went to the police, just in one small area, there were more than 20 cases in a single day. A hardworking student sent all their family's money, thinking it was for university fees or going abroad. An old factory worker lost all her retirement savings. So many people lost everything. That is when I realized that the system I built, the system I was proud of, is not enough.

All my own savings are gone too. (My mother was scammed into borrowing a lot of money and sending it to the scammers, and now it is my responsibility.) I had plans for the next few years: to do open source work, to write books about math and programming, to create a dream Go web framework, to give back to the community. Now all of that is gone.

But this is not only about me. I can still start over. I am strong enough to rebuild my life. But who will protect people like my mother? Or a poor student? Or a factory worker? Or so many others?

I can build systems. I can build distributed systems that scale to a whole country. But for what? What should I do?

I have been reading Hacker News for 12 to 13 years, sometimes posting from other accounts. I am writing here now to ask for advice and help from this community.

If anyone has experience with similar cases, or ideas on what can realistically be done, or even advice on how to move forward after something like this, I would really appreciate it. I will keep this account semi-private, because with the details above, I think some engineers from my country may recognize me.

137 points | 67 commentspage 2
freedomben 12/22/2025|
Unfortunately I don't have any advice for recovering the money, as that's just so far outside of my knowledge field.

This may not help, but you have my utmost sympathy. An elderly lady that I know recently lost her husband and her only son, and got scammed out of much of her savings by people exploiting her horrible circumstances. She had to come out of retirement and go back to work because of it.

I think crimes like this are among the most evil you can commit to people. I really wish that law enforcement organizations would chase these down and prosecute as aggressively as they would if there had been a murder or something committed. They are fully capable of doing so when it's something that they care enough about, but they just don't seem to care about people like your mother and my friend. It breaks my heart and I really wish I could do something about it as well.

scapbi 12/22/2025|
Thank you very much for your kind words. What I am thinking about most right now is, first, encouraging my mother and helping her through this difficult situation. Beyond my responsibility to my family, I also feel a responsibility related to the system I built. I want to connect with people who have much more knowledge than I do and see whether we can do something meaningful for third-world countries. That has always been my lifelong dream.
raw_anon_1111 12/23/2025||
This seems like such a simple problem to solve on the institutional level. Allow a person to have 3FA. Two phone numbers being required to log in - yours and trusted person.

I would have that setup for my parents so that if they ever called me for the 2nd code, I could ask questions about why they need it.

While I’m not too worried about my 83 year old mom, she is more tech savvy than most and has been using computers since 1986, I do worry about my dad if my mom passes first. He’s a lot more gullible.

hulitu 12/23/2025||
> Allow a person to have 3FA.

This might not be sufficient. We need 4FA or, better, 5FA.

lcnPylGDnU4H9OF 12/23/2025||
You could reduce it to a single hardware security key without a password and it would be more secure. The problem—in this case and in general—is using passwords and OTPs for anti-phishing; with a hardware key, there is no way for the phishers to gain access to the account (without being in the room or in possession of the key), even if they successfully convince their victim to log in.

No affiliation other than using their products:

https://www.yubico.com/

raw_anon_1111 12/23/2025||
There are scams where they tell the user to do stuff themselves even as far as to tell the victim to take all of the money out and deposit it in a bitcoin account
ipaddr 12/24/2025||
This is silly. If the person believed this was the bank the 3rd code would be used. Best answer is don't answer phone calls and force people to send letters.
bhoult 12/22/2025||
A technical solution without the will or ability to enforce it will ultimately be unsatisfying. I remember an old group https://www.419eater.com/ (I guess it is still there). They basically "waste the scammers time". The scams rely on low effort ways to find the target, robocalls, emails, etc. But once the target is found they have to put real effort into implementation. With AI, this will only become easier on their end.

I would look into solutions that would make it harder for them. Like AI chatbots that act like targets, both text and voice. If the majority of their efforts end up being weeks of conversation with an AI before they figure it out then it will not be worth the effort.

Right now it may take them hours to find a viable target then days to extort them. Make it take longer, until it is more lucrative to get a legitimate job.

I used to think it was fun to mess with scammers... but I think these days many of them are forced into it. Basically they are lured in with reasonable sounding job offers then once they find themselves in another country with only their "employer" look out for them, they basically become slave labor.

You need to hurt the ones trapping the slaves that run the scams, and your weapon is the same as theirs... technology.

Fred678 12/30/2025||
I was scammed online about 3-4 month ago by someone pretending to be someone else and I don’t know what to do even the police can’t help me until my cousin direct me to Synacktx on Instagram,he helped me track them and recovered all my money back for me . I was very lucky I found them for help
coolThingsFirst 12/23/2025||
Cyber attacks have gotten pretty sophisticated. Lately supply chain attacks are all over HN, I got hacked through a Web3 interview. I managed to get the site down after complaining to their hosting provider.

November 1st I received an email that I had been hacked and all private data including a video of me was owned. I got really emotional but then after reading it, I saw it was a generic threat and nothing could be done.

You are asking, what can be done? Start with the basics, strong password and MFA everywhere. Avoided pirated Windows, and if you can avoid the OS entirely as well. Basic cybersecurity awareness need to be taught in schools. After 23andme, a lot of companies just have very shitty practices as well.

feydaykyn 12/22/2025||
I am really sorry it happened to you, and wish you and your mother lots of resilience.

The following is very naive...

I have no experience in this, but since you're working in the banking system, you may know someone who knows someone etc ? It may go high enough that "something" happens, be it some help, or green light for a project to prevent scamming or anything really.

Where I live, banks have to control wire transfers, so for instance if someone wires money for "Brad Pit's kidney", the bank must prevent this. Actually it's a real case, and an undisclosed deal was made between the victim and the bank. Maybe there's something like this where you live?

nwellinghoff 12/22/2025||
As your parents age you should convince them to transfer their assets into a trust where they still maintain control but withdraws etc can be optionally approved by a spouse or other family member. The trust has many other benefits but is especially good for fraud as it can disassociate the holders identity from the assets and have specific conditions for withdrawal. It also can provide a clean transfer of ownership in the event of a death etc. I am sorry this happened to you, it is becoming more common in the us too. And all of these “companies” seem to establish bank accounts and addresses in Delaware…
silexia 12/22/2025||
Every country needs a digital firewall so outside scammers and scammers can't harass its citizens. This is the primary reason for borders in the first place: allow police to enforce a countries laws.
chrisjj 12/24/2025||
> All my own savings are gone too. (My mother was scammed into borrowing a lot of money and sending it to the scammers, and now it is my responsibility.)

Sorry to hear of your misfortune, but I am wondering why you didn't spot the scam before lending money to feed it.

boojums 12/24/2025|
It's more likely his mother borrowed money from other people and he paid her debts.
libertarian2 12/22/2025|
It's interesting that in our digital age there are tens of thousands of text editors emerge every millisecond but hackers won't do any project that would help their own people to build robust communities and educational platforms, that would teach everyday (cyber)security and computer/tech skills.
More comments...