Smarter online scams — when the mole fights back

Note: This site may show light ads and occasional affiliate links. How that works.

You are at a funfair, playing whack-a-mole. You have played before. A mole pops up — you hit it. Easy. Then something strange happens. The next mole sprays water in your face. You laugh. “Weird, but okay.”

Then another pops up. You hit it — it sprays again, but this time the water smells funny. Then it is blue. Then it talks. It sounds just like your friend. “Hey, can you send me your password real quick?” Wait… what kind of game is this?

The scam that learns

Scams used to be obvious. Bad spelling. Weird links. Strange requests. Now scammers use ai to copy voices, faces, and messages. They can sound like your boss. Look like your friend. Even act like someone you know. And just like that mole, they adapt every time you react — which is why the habit matters more than memorising last month’s template.

How it might unfold

First trick: a weird email or text. You ignore it. No big deal.
Second trick: a phone call from someone who sounds like a coworker asking for a password.
Third trick: a video call that looks like your manager — but it is fake.
Fourth trick: the scammer uses your name, job, and recent posts to gain trust.
Fifth trick: you click a link, log in, and they are inside your account.
After that: customer details leave, homepages change, or money moves.

At the moment of risk

Stop! Pause! Is it urgent? Do you know who it is from? Is it really from who it says it is? If something feels off — even when it looks or sounds familiar — check with the person another way. Call or message them on a channel you already use.

What still helps

Strong passwords and mfa
Updates on apps and devices
Watch for odd logins, site changes, or customer complaints
Say “hold on, let me double-check” without embarrassment

A self-check

The moles got smarter. Would you still swing at the first thing that pops up — or pause when the request involves passwords, money, or secrecy? In this game, the best move is often not to hit anything until you have verified.