Top
Best
New

Posted by scapbi 1 day ago

Ask HN: My mother was scammed out of all her savings. What should I do?

Today is the worst day of my life. We live in a country near Cambodia, and as you know, it is kind of a dream land for scammers. Today, it happened to my family.

My mother received a call from a scammer. They told her she needed to process some tax issue and prove that her bank account had enough money. In just a few minutes, they tricked her and manipulated her into entering banking OTP codes. All of her savings are now gone.

What makes this more dramatic is that last year I architected and helped a government department in my country build a big system. This system can track money flows across the whole country, to know where money comes from. I was very proud of this. It is the biggest achievement of my life. Even if nobody knows I built it, that was fine.

But now I cannot protect my own mother. I cannot protect my family. My system can track the money, but it is almost impossible to get it back.

When I went to the police, just in one small area, there were more than 20 cases in a single day. A hardworking student sent all their family's money, thinking it was for university fees or going abroad. An old factory worker lost all her retirement savings. So many people lost everything. That is when I realized that the system I built, the system I was proud of, is not enough.

All my own savings are gone too. (My mother was scammed into borrowing a lot of money and sending it to the scammers, and now it is my responsibility.) I had plans for the next few years: to do open source work, to write books about math and programming, to create a dream Go web framework, to give back to the community. Now all of that is gone.

But this is not only about me. I can still start over. I am strong enough to rebuild my life. But who will protect people like my mother? Or a poor student? Or a factory worker? Or so many others?

I can build systems. I can build distributed systems that scale to a whole country. But for what? What should I do?

I have been reading Hacker News for 12 to 13 years, sometimes posting from other accounts. I am writing here now to ask for advice and help from this community.

If anyone has experience with similar cases, or ideas on what can realistically be done, or even advice on how to move forward after something like this, I would really appreciate it. I will keep this account semi-private, because with the details above, I think some engineers from my country may recognize me.

120 points | 58 commentspage 3
thrownaway561 1 day ago|
I hate to be the one that says it, but there is only one way to handle scammers like this. They need to be hunted down and put down. All of them and anyone who is involved.

Truth be told that scamming is becoming easier and easier. The problem is that most countries not only allow it, it is part of their GDP. Look at the number of scammers that originate in India. Everyone there knows who they are, there are numerous YouTube channels souly dedicated to exposing them and reporting them to the authorities, yet they still remain active.

Until a more brutal and direct response is used, these organizations and countries will continue to operate. If the attacks Trump has used on drug boats has taught us anything is that a direct response is the best response when dealing with the underworld.

coolThingsFirst 2 hours ago||
This really should be way this problem is approached. There have been people who have committed suicide because their private data was leaked. It's an altogether serious matter.
scapbi 1 day ago|||
It is much easier than you might imagine. Hundreds of thousands of people live together almost like a city, scamming their own people, speaking the same language as their victims. They train day and night to manipulate the human mind, supported by an underlying system of fake accounts. When I was building the system against that, I felt like David facing Goliath. The problem goes far beyond what technical systems alone can solve.
vivzkestrel 1 day ago||
https://cybercrime.gov.in/ you can report cybercrimes here for india. The problem is the police is short staffed and their tech is also not on part with that of the scammers. The slow judiciary system due to staff shortage again makes this difficult
sebow 1 day ago||
(If you're OP: this is not a solution per se but more of a generalist rant; just so you don't waste critical time)

People talk about changing laws or technical solutions, but the inconvenient truth is that technically literate people should peer-pressure nearby friends/family/etc. into being more aware of such possibilities. I've done so, to the extent that some people find it ether borderline schizophrenic/paranoid (to my "luck", I live in an ex-communist country, where most people are usually skeptical in many contexts with strangers; so this group of people is relatively small).

People who know better bear a responsibility towards helping others who don't; towards those who are too kind (or naive) for their own good; Even though I'm the "tech guy" in my close circles (family, friends,etc.) like many here, I often do the >opposite< of what other "pro-technologists" do these days: I don't encourage people, especially the older generation OR the more tech-illiterate ones to use more technology, because it is obvious that doing so "injects" another vector of attacks into their lives. More often these days this is not possible, everything gets digitalized to the detriment of such groups, but this also delves into the politics of keeping "older options" (cash, paper trails, etc.) available even if digitalization happens. Often times the older options are more secure, though obviously less convenient.

This is a non-solution, yes, but it is the correct way to approach this (imo), as more and more places LEGALLY force digitalization of different institutions(banking, gov. agencies, etc.) which inherently either add, or worse, completely shift the risk into virtual spaces. This is why a "legal" solution is more often than not either a slow one or a completely pointless one. It will always be an arms-race between scammers(which operate more effectively[in theory] due to their decentralized nature) and the gov./banks/etc., which operate in a more centralized fashion, thus demanding and imposing more control above all included parties. A legal way will always demand more than it's worth.

I digress from my shift into politics, but bottom line is this: don't let your peers/family/closed ones get into these situations. If you have "an authoritative" voice regarding tech, use it to first cultivate awareness regarding dangers, before cultivating hype/or anything else. (Obviously not talking about anyone specifically, but the whole "geeksphere" as a whole)

Good luck to you and your family.

barrenko 13 hours ago|
The bigger issue here (imvho) is that financial institutions / systems / companies accept (maybe even invite) / tolerate a small degree of fraud as it's "good" for the system.
jackiscott 16 hours ago||
[dead]
libertarian1 1 day ago||
[dead]
libertarian2 1 day ago|
[flagged]
kelseyfrog 1 day ago||
How would knowing the age of consent laws for every state help this poor gentleman?
amanaplanacanal 1 day ago||
This helps how?
hombre_fatal 1 day ago||
They meant timetravelling back to your 19yo self in uni before any of this happened.