Elder fraud grows as exposed data fuels SIM-swap and deepfake scams, 9to5Mac reports

The report describes how family chat groups can be a goldmine for scammers. Everyday updates about doctor visits or travel plans provide personalized information that makes it easier to convincingly impersonate family members in trouble.

Although iMessage, WhatsApp and most other messaging apps use end-to-end encryption, the report says that does not always keep the information safe. One of the most dangerous tools is a SIM swap. Scammers use personal information found in public sources to convince a mobile carrier that they are the person they are targeting. They claim the phone has been lost or damaged and ask the carrier to switch the mobile number to a new SIM card they have purchased.

If the carrier is fooled, all texts sent to the victim are received by the scammer, including SMS-based two-factor authentication codes used to reset passwords and access bank accounts. That access can also give the scammer entry to family chat groups. Combining personal data found online with details gleaned from chats can give scammers what they need to persuade a victim that they are a family member in urgent need of help. Voice notes, the report notes, can provide the audio needed to create deepfake speech that appears to be the family member's voice.

To protect family members, the report recommends minimizing the personal data a scammer can find online. Scammers use data broker sites to obtain family names, phone numbers, hobbies and travel history. There are hundreds of data brokers, and removing personal data from all of them is described as a mammoth task. The report says Incogni can do it for users.

The report also says two-factor authentication should be switched on for all messaging apps, social media and other accounts. Any time 2FA is offered, it should be accepted. If a choice is offered between text message and an authenticator app to receive codes, the app should always be chosen, as it is described as the best protection against SIM swap attacks.

Another step is to contact a family member by a different method to verify that it really is them. If a text message arrives, email in response; if an email arrives, phone. The more communications channels a scammer has to compromise, the lower the chance of success. The report also recommends agreeing on a secret family password to verify identity during emergency calls. If a call claims to be from a family member in need of urgent assistance, the password should always be requested, even if the voice seems recognizable and the caller knows personal details. This is described as the final layer of protection against a scammer who has access to a family member's phone number, email account and more.

For a limited time, 9to5Mac readers can get 55% off Incogni subscriptions using the checkout code 9TO5MAC, according to the report.