Darknet Diaries - 138: The Mimics of Punjab

Episode Date: October 3, 2023

This episode is about scammers in the Punjab region. Tarun (twitter.com/taruns21) comes on the show to tell us a story of what happened to him. Naomi Brockwell (twitter.com/naomibrockwell) makes an appearance to speak about digital privacy.To learn more about protecting your digital privacy, watch Naomi’s YouTube channel https://www.youtube.com/@NaomiBrockwellTV. And check out the books Extreme Privacy (https://amzn.to/3L3ffp9) and Beginner’s Introduction to Privacy (https://amzn.to/3EjuSoY).SponsorsSupport for this show comes from Axonius. The Axonius solution correlates asset data from your existing IT and security solutions to provide an always up-to-date inventory of all devices, users, cloud instances, and SaaS apps, so you can easily identify coverage gaps and automate response actions. Axonius gives IT and security teams the confidence to control complexity by mitigating threats, navigating risk, decreasing incidents, and informing business-level strategy — all while eliminating manual, repetitive tasks. Visit axonius.com/darknet to learn more and try it free.Support for this show comes from SpyCloud. It’s good practice to see what data is getting passed around out there regarding you, your employees, your customers, and your business. The dark web is a place where this data is traded and shared. SpyCloud will help you find what out there about you and give you a report so you can be aware. Then they’ll continuously monitor the dark web for any new exposures you should be aware of. To learn more visit spycloud.com/darknetdiaries.Support for this show comes from ThreatLocker. ThreatLocker has built-in endpoint security solutions that strengthen your infrastructure from the ground up with a zero trust posture. ThreatLocker’s Allowlisting gives you a more secure approach to blocking exploits of known and unknown vulnerabilities. ThreatLocker provides zero trust control at the kernel level. Learn more at www.threatlocker.com.

Okay, so I've got a good story for you today, but when I was researching this episode, I came across something that wasn't exactly hacker-related, but it captured my curiosity for like a good 30 minutes. And maybe you'll find this interesting too. So, apparently people in India like flying kites. But when I think of flying kites, I think about doing it in a park or at some beach, someplace wide open, right? Yeah, well, that's not how kite flying happens in India. They like to fly kites on their rooftops,

in populated parts of the city, like on the tops of low-rise apartments. And you'll sometimes even see them hanging over their balcony or flying the kite right out the window. I never even knew you could fly a kite out a window three stories up, but yeah, they're doing it. And I saw videos of this on YouTube. And so, on nice breezy days in India, you may look up and see some people on the rooftops flying kites right in the middle of a busy city.

Anyway, kites alone aren't that exciting to me. But here's the part that surprised me. Apparently, there are kite fighters among these people. And this gets wild. They take kite flying to a whole new level, if you ask me me so the idea here is to knock someone else's kite out of the sky with your kite so like if you're on the rooftop and you see a kite flying a couple rooftops over from you the mission is to knock theirs down and so the first thing you have to do is to get your kite near theirs or at least near their string and that takes a bit of skill to get your kite close to the person's kite who's's like three rooftops away from you. And I don't even understand how they do this. Like, how do you send your kite over to someone else's where you can't even move off your balcony?

I thought the wind decided where your kite went, but apparently they're able to let out the string more or weight the kite down or something to get it to go where they want. Now I've flown a kite too close to someone else's kite before. And what happened to me is that the kites got tangled up and both of our kites crashed to the ground. But the kite fighters don't want their own kite crashing to the ground. They want to win this battle. So what kite fighters do is they coat their strings with something sharp to turn it into a skyward saw. Some use wax, but I think a lot of people are buying strings that are coated in little pieces of glass, making it sharp and scratchy. So if you can get your string to touch theirs, and then just at the right time, give it a quick tug,

it'll scrape your string across theirs, and it may cut their kite's string, sending their kite to float off freely and eventually crash to the ground, but like a block away, leaving yours in the air as the victor of the battle. It's wild. You can watch these videos where you see somebody taking out like one kite after another on rooftops. And I can't tell if the other flyers like this or hate this, because if you had like a nine-year-old trying out a kite and their string gets slashed by some teenager looking for some sky fight, that kid's going to be crying. But anyway, that's kite fighting. Or locally in India,

it's known as manja. And you can buy like sharpened manja strings in stores and online. But hold on, this gets even crazier. So you have these razor-sharp kite strings flying around in the air, right? All from rooftops and residential areas. But these are in some busy areas with lots of street traffic. So like motorcycles and cars are whizzing by down on the streets below. So what happens sometimes is when these losing kites crash into the ground, sometimes they get tangled in weird ways on its descent. Like the string may get snagged up on some tree branch or a sign or something,

but then the kite floats to the other side of the road and gets tangled on that side, essentially making a little tightrope that goes across the street. And when someone drives by, the car can get snagged on it and pull the string in weird ways. Well, the real problem comes with motorcycles and bicycles. There have been a lot of incidents where the string gets caught around the neck of a motorcyclist and cuts their throat. Bad scratches, gashes, and cuts.

But some have even died from getting their neck slit by a glass-covered string. Yeah, people have died from this kite fighting stuff. So what motorcyclists do in the areas where it's popular is to install a small bar on the front of the motorcycle to catch any of those strings. It kind of looks like a little antenna on the front of the motorcycle, and it's there just to catch any kite fighter strings from killing the rider. It's always interesting to me to see the downwind consequences of something that we didn't immediately think would be a problem. These are true stories from the dark side of the internet. I'm Jack Recider.

This is Dark by Delete Me. I know a bit too much about how scam callers work. They'll use anything they can find about you online to try to get at your money. And our personal information is all over the place online. Phone numbers, addresses, family members, where you work, what kind of car you drive, it's endless and it's not a fair fight. But I realized I don't need to be fighting this alone anymore.

Now I use the help of Delete.me. Delete.me is a subscription service that finds and removes personal information from hundreds of data brokers' websites and continuously works to keep it off. Data brokers hate them because Delete.me makes sure your personal profile is no longer theirs to sell. I tried it and they immediately got busy scouring the internet for my name

and gave me reports on what they found. And then they got busy deleting things. It was great to have someone on my team when it comes to my privacy. Take control of your data and keep your private life private by signing up for Delete.me. Now at a special discount for Darknet Diaries listeners. Today, get 20% off your Delete Me plan when you go to joindeleteme.com slash darknetdiaries and use promo code darknet at checkout. The only way to get 20% off is to go to

joindeleteme.com slash darknetdiaries and enter code darknet at checkout. That's joindeleteme.com slash darknetdiaries and use code darknet at checkout. That's join, delete me.com slash Darknet Diaries. Use code Darknet. Support for this show comes from Black Hills Information Security. This is a company that does penetration testing, incident response, and active monitoring to help keep businesses secure. I know a few people who work over there and I can vouch they do very good work. If you want to improve the security of your organization, give them a call.

I'm sure they can help. But the founder of the company, John Strand, is a teacher, and he's made it a mission to make Black Hills Information Security world-class in security training. You can learn things like penetration testing, securing the cloud, breaching the cloud, digital forensics, and so much more. But get this, the whole thing is pay what you can. Black Hills believes that great

intro security classes do not need to be expensive, and they are trying to break down barriers to get more people into the security field. And if you decide to pay over $195, you get six months access to the MetaCTF Cyber Range, which is great for practicing your skills and showing them off to potential employers. Head on over to BlackHillsInfosec.com to learn more about what services they offer and find links to their webcasts to get some world-class training. That's BlackHillsInfosec.com. BlackHillsInfosec.com. All right, I got an interesting story for you today. And let's just jump right into it. Here, listen to this phone call.

Okay, this phone call is in the Punjabi language. It's from India. But I really want you to hear this. So, one second. Hello? Hello Raj? It's been such a long time since we spoke. You sound different. Okay, there. I've translated the audio and had it re-recorded in English. Now, take a listen. Hello? Hello Raj? This is Jagga, your cousin, calling from Canada. It's been such a long time since we spoke.

Oh Jagga, is that really you? You sound different. It has been a long time. Yes, yes, absolutely. How is the farm back home in Punjab? Yeah, the farm is going well. We had a dispute with Harijit but it's finally over and he paid me for ploughing the fields near the canal. Oh, they finally sent you the money. God bless us today. How are you? Yeah, I'm doing well. Good, good.

If you need something, anything, call me brother. It won't be a problem. Yeah, thanks for letting me know. It's been ages since we have spoken. And you've always been like a brother to me. So I wanted to call you because i've got a problem okay first i wanted to call my family but and please don't tell anyone i worry i'm gonna lose their respect if they find out absolutely okay okay i understand raj you're my

cousin and the only person i feel safe enough to tell. So please don't tell anyone else. Okay. Okay. Yes. Don't tell my dad or my brother. Have you seen them recently? Yeah, I saw them last month. Your dad is doing well after his heart attack in November. Okay. So last night I went out for a friend's birthday party here in Canada.

We went to a club, had some food and drinks. But my friends also started getting high. Okay. I guess the combination of drugs and alcohol really got to one of my friends. Because out of nowhere, he took a bottle and smashed it onto the waiter's head. Blood went everywhere. Oh my God. They called the police. My friends ran away but I didn't run and the police arrested me for the fight

even though I am innocent. I have been charged for hitting the waiter. I have a lawyer from Punjab though who's gonna help me get out. Why didn't you call your dad? No, no, no, no. I can't call dad. He thinks I am working hard. What would he think if I tell him I have been arrested? He's already had a heart attack and I don't want to risk causing another. Everything with the party happened last night and as soon as I could, I called you. I just need you to talk to the lawyer and say that you are my cousin. I still think your dad should know but okay, what can I do?

I'll pass you over to my lawyer. All you have to say is the boy is innocent, the boy has done nothing wrong, please leave him be. My ATM card, my identity card, all the money from my wallet it's in custody. I can't do anything.

Okay, okay, let's talk. Talk to my cousin. Hello. anything okay okay let's talk hello hello there's a lawyer yes my name is luck when they're single aka how are you related to the boy sir yeah yeah he's my cousin right I met with the officers on duty and I've spoken to them now you tell me about the boy should he be punished or released? Let him go. He's innocent. You know, foreign laws are very strict and very different to Punjabi laws.

And so that it's clear, your cousin may be charged with being an accomplice in a murder case. The waiter is under intensive care in hospital. This is an extremely serious charge, one that will ruin your cousin's life. We will have to prove him innocent to save him. Okay sir. I will have to say that those who are his friends are not his friends. He went alone to the club, drank only water and was alone at his table until he was rudely interrupted by these people who then started a fight. If we do not prove him innocent he will go away for 25 years. Do you understand? Yes, I understand. There will be a cost if you want to save his life. We will have to encourage the officers to remember events the way we want them to. Some money put into their pockets. Think

of it as a small fine. I will need you to send money to help him. But wait, he has more money than me. Can't you take it from him? That's not going to work. Talk to your cousin Jaggi. He'll tell you what to do. Hello, Raj? How much money do you have? Raj? Raj loads in my account.

But I don't have any access to it. You must pay it off, however much it costs. I will pay you back. I swear by Guru Granth, I will repay you as soon as I get out. We need your dad's help for this one, cousin. Please, please, please, don't call anyone. I will be shamed for eternity. I am begging you, please.

My family is going to realize if money goes missing. No, no, no, it won't be that much. Talk to the lawyer and he'll give you an idea. My life will be wasted if you don't help me out now. Okay, okay. Here, talk to him. Hello? Lawyer, how much money is needed?

It will cost about $2,000. $1,500 is needed just to pay for damages to the club okay listen lawyer i have one request yes i want you to leave my cousin in prison for a long time what why because he's a terrible person he tried to scam me for two thousand dollars you're both sick to act like my cousin and try to steal money from me i know my cousin chadka and it does not sound like that i've recorded this entire call and I will share it with the police. I find this call interesting. The victim recognized that this was an attempted scam right away

and recorded the whole phone conversation. And it's very good for him to notice it that soon and hit record for the whole call. But would you have noticed this was a scam so early on? If your cousin called you out of the blue and was in trouble, would you have been tempted to and was in trouble, would you have been tempted to send him $2,000 to free him? Apparently, this kind of scam is becoming more popular in Punjab, which is an area in India and Pakistan. And what you're hearing behind me here is a clip from a YouTuber called Suk Viral, highlighting how people

are getting hit with this scam. The idea here is simple. The scammer will pose as someone you know and ask you for money. It's not always the same scenario though. Let's hear another one of these calls. Hello? Hey buddy, how are you doing? Yeah, I'm good, thanks. And you?

Yep, all good here. What have you been up to? Do I know you? Sorry. What? You don't recognize my voice? No, sorry. What? I'm sure your daughters Kreeti and Rani would recognize my voice. It's Tarun. I'm calling from Canada. Oh, Tarun. Hi. I didn't recognize your... I'm calling you because I'm in trouble and I need your help. Oh no. What's happened?

You know I went to Canada to do my studies, right? Yes, I know. So first I moved in with a girl while going to school and I tell you cousin, I never did anything wrong to her. But we did some things together and she took a video of me naked in her bed and now she has accused me of raping her. Oh, this is so embarrassing to say

out loud because it's not true and just so awkward. I know you will help me. Why don't you call your dad or sister? Oh no, no. You know my parents. If they get to know about this, they will be panicked and really upset. Let me get out of this trouble and I will let them know personally. But I don't want them to know right now. My dad will not believe me, cousin. It's too embarrassing and he will be angry. He's already unhappy about my grades. I don't want to make it worse. So what can I do? I've talked to a lawyer who says he can get me free from this charge but he's expensive and I don't have the money. How much money do you need? The lawyer is also from Punjab and he wants to help.

Because we're both from Punjab, he's giving me a discount. He says for 40,000 rupees, he can free me from the charges. That's what? 2,000 Canadian, is that right? Yes, cousin. I'm sorry to ask you like this, but you would be saving my life. Imagine, if I don't do anything, I will go to jail for a long time. Okay, okay. I will help. How can I send you the money?

Okay, so I have my lawyer right here. He can tell you. I will give the phone to him now. Here. Hello? Hello. We think we can free your cousin from the charges, but we need 40,000 rupees to get started on the case. Are you able to send that?

Yes, I will send it. Okay. The fastest way to send the money is through Western Union. Do you have a pen? I will tell you the name to send it to. Yes, yes. Please tell me. I will send it right away. Okay. You must send it using Western Union to Neil Shankar. Okay, I will. Thank you. Bye. Goodbye. Tarun's cousin was convinced he spoke to Tarun on the phone and wanted to help him. So he sent $700.

But ouch, this was a scam. He was out all that money. And almost immediately after sending the money, the scammer called back, asking for another $1,200. Tarun's cousin said, okay, and started trying to get more money to send, but then started having second thoughts and decided to call Tarun's sister and just told his sister, hey, can you check on Tarun to make sure everything is okay? My name is Tarun, and I'm living in Canada, basically from India and Punjab state. This is the real Tarun, the guy that the scammer was impersonating. We'll start from the beginning.

At one day, I woke up early, around 4 a.m., and I saw some missed calls from one of my family members, my cousin, and one from my sister. And I called my sister first, and she said, hey, where are you? And are you okay? She seemed panicked to me, and I asked her what happened. She said, okay, call your cousin. He will tell you the whole story.

Tarun was confused. The whole story? What's the whole story? Something very strange was going on here, and even his sister won't tell him what's going on. But okay, Tarun ends the call with his sister. Then I called my cousin. He said, hey, are you okay? And I said, yes, I'm okay.

I'm at my house. What happened? He said, somebody impersonated you and called me and said that I'm in trouble. I'm in jail for doing something really embarrassing. So I was surprised at that moment. How could somebody involve my cousin or my relative in such kind of thing? You've got to probably appreciate your cousin for helping you out.

If you get in jail, he's going to send you $1,200. Yes, exactly. Actually, after a few months, I sent him the money that he lost. He wasn't asking for it, but I thought I should pay him back because it was all from his resources. And what would happen if he sent another 90,000 rupees to the scammer who lost around all of his money? Like he has kids to raise, and his family. So I thought, okay, I would send him the 48,000 rupees that

he lost. Wow. What even is the morally right thing to do here? On one hand, his cousin is the one who made the mistake, and Tarun did nothing wrong. But on the other hand, Tarun's cousin came to his rescue, even though he didn't

actually need help and sent money to a scammer and not him. But to just call someone out of the blue like that, and they immediately send you $1,700, that's a great cousin to have. I think Tarun did a stand-up move by sending his cousin the money he lost. And how this scam works seems kind of familiar to me, actually. I've always been warning people about scammers targeting elderly people to try to tell them their grandchild or something is in trouble And needs help to get out of a mess Because some elderly people think that family is above everything and they'll just immediately try to help their family without thinking about it Or validating it so like if a scammer knows someone is traveling abroad

They could call back home to the grandparent and say your son has been arrested here and needs money to bail them out of jail. And the grandparent might just pay right away because it's very difficult to like work through time zones and phones and stuff. And so the grandparent doesn't want to drop the call since it may be really hard to get that person back who's in another country. Calling long distance and getting a person who can speak their language is sometimes pretty tricky. The other thing I'm starting to see arise in is AI scammers. This is where they get some clips of audio from the person that they're trying to imitate, and then they get AI to clone that voice so that AI can just talk like that person for them.

And then this is when they call the victim, and their voice sounds just like their real cousin or brother or whatever. Tarun and his family did not know that these kind of scams were going around, and they paid a price for it. But once it happened, they started seeing how other families are getting hit with these kind of scams too, and noticing post after post on social media. As time passed, after several months,

I got to see same stories or same scams on Facebook happening to other people as well. Now what was surprising to me when I first heard about Tarun's story is that I think everyone's heard about these Indian scammers trying to call you and act like they're Microsoft tech support so you can send them some money or something. But I've not heard of Indian scammers scamming other people from India. But apparently there's a reason for this. I come from the Punjab in India. And so most of the population has migrated to in foreign countries like Canada, Europe, Australia, New Zealand. And so there's hardly any person in India or in Punjab who doesn't know anybody in one of their relatives or friends who's living abroad.

So the scammers is taking the benefit of this fact that if you go to any random person in Punjab and ask them if he or she has any relatives living abroad, I don't really think that anyone would ever say no to this fact. And it's also really tricky when scammers say, oh, don't tell mom or dad. You know how they are. They'll have a heart attack, which is such a powerful line,

especially if the target's dad did have a heart attack, you know? It's a great reason not to tell them. But these scammers are even more tricky than that. In the end, when he gets the trust of the entity and he said, hey, are you alone? I want to talk to you something in private. If you're not, just get out of the entity and he said, hey, are you alone? I want to talk to you something in private. If you're not, just get out of the house and I want to say something or I want you to do my favor. And here's another red flag. When a scammer tries to isolate you and get you to not tell anyone else,

that should be like a warning sign. Like, wait a minute, why is this a secret? I think I do need to bring this up with someone else in my family. But it's crazy that just a little bit of small talk is how you can get your target to do this. I'm still not convinced that these scammers are from India, scamming other people from India. Stay with us, because when we come back from the break, we learn where they're really from.

This episode is sponsored by Shopify. The new year is a great time to ask yourself, what if? When I was thinking, what if I start a podcast? My focus was on finding a catchy name, some cool stories, and working out the best way to record. But oh, so much more goes into making a podcast than that. If you're thinking, what if I start my own business? Don't be scared off, because with Shopify, into making a podcast than that. If you're thinking, what if I start my own business? Don't be scared off because with Shopify, you can make it a reality. Shopify makes it simple to create your brand, open for business and get your first sale. Get your store online easily with thousands of customizable drag and drop templates. And Shopify helps you manage your growing business.

Shipping, taxes and payments are all visible from one dashboard, allowing you to focus on the important stuff. So what happens if you don't act now and someone beats you to the idea? The best time to start your new business is now with Shopify. Your first sale is closer than you think. Established in 2025. That has a nice ring to it, doesn't it? Sign up for your $1 per month trial period at shopify.com. Go to shopify.com slash Darknet. Go to Shopify.com slash Darknet and start selling with Shopify today. Shopify.com slash Darknet.

Okay, so these scammers speak fluent Punjabi, right? And that's a language spoken in the Punjab region. But that region is very interesting. The thing is, Punjab is half divided into Pakistan and some other regions of India. So if somebody is talking in Punjabi, it's the same language as the people living on the Indian side as well. Yeah, Punjab is actually a really big area in South Asia and is shared between Pakistan and India. The two countries have a long-standing feud for loads of reasons, and a similar feud is seen between the Punjabis in India and Pakistan. So even though they share the same language and live right next door to each

other, they do not always get along. And this may be a reason why people in this area are being targeted. It could be part of the continued feud between Pakistan and India. Tarun actually saw a video of someone who recorded one of these scam calls. The scammer, he called someone and the guy on the other side of the phone, he recognized him. Hey, I know you are a scammer. You've been calling to people in such a way and collecting the money. Why would you do that? And the scammer, he just got straightforward. He said, hey, you know, everything is not going in Pakistan. We don't get any jobs. We are like unemployed.

So in any way, we have to get the money from the people. So this is the easiest way we can get money from the people. The language difference between Punjabi spoken in Pakistan and India is close enough that it can trick a lot of people. Yes, because there are some parts in the Punjab who are like on the border side of the Pakistan. So their accent in the Punjab is kind of similar. So you cannot really tell. As Tarun researched this scam more, he saw some other methods scammers were trying to do. Another one he saw was where the scammer says this.

Hey, I'm coming in India, Punjab, in the next few months. And I want to send some money to you so that you can keep it safe. Because if I send to my family, they will just spend it all. And so the target gets some kind of confidence that, okay, he's sending me the money, so it is kind of legitimate. And the target says, okay, I will send you money through Western Union or any other mode of transfer and I will let you know. Now, of course, the scammer does not actually send this money to the victim.

What they do instead is they get a different scammer to call up the victim and pose as the bank or Western Union and say something like, hello, this is the bank. We're calling to let you know that there's been a large deposit in your name. Someone has just put $9,000 into your account and it's ready for you to pick up at any time. But then before that person can leave the house and go get the money, they get another call from the same scammer once again. So he gets another call and says, hey, have you got the money? He said, yes, I got the money.

I got a call from the bank. So, okay, so everything going on really well. And in the end, he says, hey, I have a friend living in your area, maybe other side. And he got in trouble and he needs some money as quick as possible. So can you send him some amount of the money that I sent you earlier, like say one lakh Indian rupees or $2,000. After a while, he sends the money to the scammer. And by the time the target realizes that he got scammed, it's over. It's too late for him to know.

Oh man, those jerks. These scammers are sneaky. But again, this scam requires a bit of research by the scammers to be so successful. You gotta know someone's details to convince them who you're impersonating. And it sounds like Tarun's cousin was tricked into thinking the scammer was Tarun by giving him details that only Tarun would know. And I wonder, how did they get that info? Did they find Tarun on Facebook or something, and that's why they decided to target him? I think this could be a possibility, but usually I don't share a lot of details about my family on the social media. So maybe there could be another way. Well, if the scammers are not grabbing people's details from social media,

what other methods are there to get info on someone? Tarun kept watching videos about these scammers on Facebook and noticed something in one video. In one scam call, the victim was like, no, no, no, I'm no sucker. I'm not getting scammed by you. So the target, he said, no, I'm not going to'm not getting scammed by you so the target he said no I'm not gonna fall into such a trap

with you you had to drop this you had to drop this idea this is not good but the scammer said yes like but we have to earn some money in some way so the scammer he he asked him to do him favor the target he said

if you could give me details of your relatives or anyone in your friend circle, and whatever the money I will get from them, I will send you the 20 or 25% of it. Whoa, whoa, whoa. So the scammer's making what deal again? Yes, he said, if you give me details of anyone in your family or anyone in your family or anyone in friend circle, whatever the money I would get from them by scamming them, I would send you like 20 or 25% of it.

So this is like a win-win situation. Why would somebody give that up? Oh, because they want 25% of it. Man, that's messed up to say, oh, yeah, you can scam my cousin. Yes. So then remember I told you that how this is, I guess this might be the way the scammer who scammed my cousin, he might have got some details about me and my cousin, maybe from my family or relatives. Because I know them how they are. Not blaming them, but I think this has more possibility. Dang. Think through your family relatives for a moment. You think there's anyone in your family or friends

that would give your details to a scammer in hopes to make a few hundred dollars from it? I mean, your family wouldn't be scamming you directly. They'd only be giving information about you, like what city you're in or what children you have, what jobs you have. Just enough information to impersonate you on a basic level. And of course, phone numbers. I know there are people in my family that may do it. One of my cousins is currently homeless. And last we spoke, we got into a fight. Who knows what that kid's out there doing

for cash right now? I don't know. I just think that this is wild, that scammers are getting caught in the act, but then offering to pay you for information on any targets that you can give them, offering 25% of the cut even. And you know, now that I think of it, that's probably a scam too. If you give them information, you are probably never going to see your cut of the money. I mean, did your cousin open a police report or anything? I guess not, because if he went for the guy, there would be no help from the police, I would say. I heard from some people on Facebook, they got scammed around $10,000 Canadian, $15,000 Canadian dollar, $15,000 Canadian dollar in Punjab. And they reported an FIR to the police, but I never heard any of them getting to the scammer.

So I don't really think that police would ever make any effort to catch the guy. Because they have a lot of stuff to do. So people in Punjab who are scammed for more than $10,000 can submit an FIR, and that's the first incident report, which is the first thing you should do to register an issue with the police in India. But then a lot of times nothing happens of it. I guess this is why it's rising in popularity, because it's so easy to get away with. I don't even understand the border situation enough down there to know what region has jurisdiction over each other or if anything can be done about this. I mean, suppose they do track this to be someone from Pakistan.

Can the Indian police arrest someone in Pakistan? Would the Pakistani police do something with that information? I have no idea. But I still think if you're a victim of a scam and lose money, it's a good step to issue a police report if you can. There have been some cases where scammers were caught and you may be the person with the information that can help catch them. I don't know the stats. I imagine it's a slim chance that your report will do anything, but I still think having that hope can sometimes keep you going. Once Tarun got privy that this kind of scam is going out there in the wild, He became a target of the scam himself. Even myself, I got two calls from a number in Pakistan. It has the area code of plus 92. And somebody said, hey, how are you? I said, yeah, I'm good. How are you? He said, hey,

recognize me? I said, yes, you are that person. And I just made up some scenario. I said, hey, what happened to your wife? I heard he ran away with made up some scenario. I said, hey, what happened to your wife? I heard he ran away with some other random guy. He said, oh, yes, it happened. It happened. I asked him, hey, tell me how, explain to me how it happened. He said, no, no, no,

I will explain that to you later. Then he hung up the phone. I think this is a brilliant way to combat this kind of scam, to do a verification check of some kind. You could ask them to confirm something that only they knew. Like, you could trick them and say something like, oh, do you remember that one summer we went to the lake together? That was fun, wasn't it? And when they say, yeah, yeah, I do. But you never went to the lake with that person. Now you know

they're lying. I know as my dad, we have some code words that if one of us is in trouble, we have to say the code word to prove it's you. And I've told him, if he ever gets kidnapped and someone calls me to pay the ransom, my immediate reaction is to not believe them unless I hear the code word. So you got to tell your kidnappers the code word if you want me to send you money. Otherwise, I'm just hanging up the phone. And he's cool with that. But stories like this really do bring my focus back to looking after our digital privacy online. And someone who knows a lot about digital privacy is Naomi.

I'm Naomi Brockwell. I run a media platform called MBTV Media, and we focus on helping people protect their privacy online. In this story, the scammer seems to know quite a lot of information about the victim that they're targeting, right? They know this person's kids' names, where they live, what cousins they have they know from abroad, and this sort of thing. Do you have any idea where a scammer might be getting this kind of information from? I think we give away all of this data voluntarily online. I think we're incredibly lax with how we don't protect our data these days. I interviewed someone recently, it was an interesting story. He bought a new car. It was a used car, actually. And just by looking

through the details in the car, he was able to find out the name of the previous owner, that the previous owner had two daughters, where they went to school, that she was a breast cancer survivor. All of this stuff was literally just the data that the car itself was collecting. So now if you zoom out and look at all of the information that we're posting on social media of our own volition, just handing it over, all the personal details about our lives. It's incredible how much information we are just giving away online. It's incredibly easy for anyone to find out anything they want about us these days. And that's mainly our fault. It's mainly because we are really not thinking about how to protect our data online. I think we need a major mind shift in this digital age.

And we need to really start to be aware of how much information we're putting out there. I don't think it's always your fault. Do you ever think about that of just like, we're living in this world where stuff just gets leaked and it's not your fault? That's definitely part of it. But I do think that individuals do have to take some responsibility for how they navigate their digital lives. I think we need to stop being naive. I mean, it's 2023. We've had computers for a long time now. We've had the internet for a long time now. And I don't want to blame people for not being aware that their data is being collected by every corner of the internet. There's third-party trackers everywhere.

There are data brokers scraping all of our financial data, all of our legal records, all of our social media posts. I mean, there are nefarious actors out there who want to collect our data. There are non-nefarious actors who just want to monetize our data.

And so I don't think that it's our fault, but I also don't think that we need to be passive victims. I don't think that it's okay for people in 2023 to say, you know, oh, well, you know, I am putting all this information out there publicly, but I didn't think someone would use it against me. Because clearly this has been used against people all the time. If we just zoom out, like not even talk about scammers, if we just think about the hundred billion dollar industry or potentially trillion dollar industry that is the data brokerage industry, it's incredible. They are making so much obscene amounts of money just from collecting our data, from scraping social media, from ingesting data breaches that are out there, from scraping our

financial records. I mean, our banks are selling all of our records, right? We know this. They tell us when we sign up, they literally say, you are giving us permission to hand over all your financial data to third parties. Wait, banks? Hold on a second. This banks thing is frustrating to me. I think banks are a private sanctuary and they should not be doing this. What do you know about this? There are a lot of laws that have been passed that basically say, listen, your data is not your data anymore.

It is something that you've voluntarily handed over to this third party and they're allowed to do with it what they want. And financial data used to be this sanctuary and you have famous places like Switzerland, where they'd have these banking laws, and you'd have this private contract with your financial institution there. And you'd think that everything you did was just between you and the bank. And that's just not the way of the world. Not only has the US actually broken the Swiss banking system,

but they've completely undermined those laws in the US as well. So now we're in a situation where due to things like the third party doctrine, the government says that if you hand over your data to a third party, you no longer have any reasonable expectation of privacy with that data. And that includes financial institutions because governments want that data as well. And so it's not in their interest to create laws that are going to protect your data. It's in their best interest to make it as easy as possible for these organizations to not have liability for handing over your data. So that's the way that the arrangement goes. I just recently learned about this third party doctrine doctrine, and it's really frustrating me.

Yeah, as Naomi says, the U.S. has a legal principle that says, if you voluntarily give your data to another company, you no longer have the reasonable expectation of privacy. What? Excuse me? This essentially means that every email I've ever written is no longer private? Every private message I've ever sent is not actually private? My phone's GPS location isn't private? This is awful. But not only that, the U.S. government made all kinds of laws which require you to give up certain information to do things like open bank accounts. So yeah,

all your banking information is no longer considered private due to this third-party doctrine. And guess what the downstream consequences of this is? Criminals, scammers, stalkers, thieves, and people who want to target you can now easily get data on you. The more we become a digital society, the more important it is to protect our digital privacy.

Yet the laws seem to be going in the opposite direction. And it makes me furious. Have you ever heard this term, oh, nobody would target me? Yeah, everyone says it. It's very naive. I think that people haven't quite adjusted to the digital world, right? We're used to nefarious actors maybe being there in person, someone who's going to hold you up at gunpoint. They're physically there. We understand the threat model. It's a person, they need, they want to

steal your handbag or whatever. But we live in the digital age where the people who are attacking us are not next to us. They're sometimes over the other side of the world. And sometimes they're just completely indiscriminate about who they target. So when someone says no one's going to target me, I'm unimportant. I think that it is naive to underestimate your digital significance in today's world, because the current situation is that scammers are not targeting you. They're indiscriminate with how they attack victims. They are casting a giant wide net that you will inevitably fall into. And this is just the current

reality. It doesn't matter whether you think you're important or not. It doesn't matter whether you think that you're a worthy target, whether you're rich or anything, whether you have status, you're going to be targeted because you will be inevitably captured in this very wide net. That's just how scammers work. The reason they do this is because there's a very low cost to them casting this wide net and there is a potential big payoff, even if a tiny fraction of people fall for their scams. There's a huge potential payoff. So what can we do to be a self-advocate of our digital privacy?

There are lots of things that you can do to make a big impact on your digital privacy. First of all, be mindful of the companies, the services that you're using. Start using tools and services online that don't collect your data. Your email provider, think about which email provider you're using. Are they a company that is capturing the contents of every one of your emails and they're analyzing it and adding it to a profile about you and selling it? Maybe stop using that. Maybe start

using a company that respects the individual's privacy and takes that data out of their own reach. The same thing with private messaging apps. Start to choose apps that protect your privacy and don't actually access the contents of your messages. You can start using other privacy tools online. All of this stuff goes a really long way to helping you protect your digital identity. Because the more careless you are with putting your data out into the wild, allowing these companies to collect it, the easier it is for scammers to target you. So you need to start being mindful of that and making smarter choices in your digital life. Susan B. Anthony changed the world.

She grew up in a time when women did not have the right to vote. It was illegal, even. And she said, screw that, and went down and voted anyway. And she was arrested for voting. She was thrown in jail, and she went to court, and she was found guilty. But she refused to pay her fine. She had to break the law, to go against the government in order to make change happen. And now she's highly celebrated, even to the point that her face is on the quarter.

I think about her sometimes and I wonder, what should I be doing that's wrong but right? And what I keep thinking about is our digital privacy. The government is stripping away our privacy from us. Corporations are being so grabby of our personal data in a predatory way. And they do it so much that it just seems normal at this point. But they are wrong. So what's the right thing to do? I imagine a world where our privacy actually matters, and it's not some meaningless double talk. Companies who actually take your privacy seriously are companies that either don't want your data at all or encrypt it in such a way that they can't even see it, even if they wanted.

This way, no amount of data breaches or subpoenas can expose you. And you don't have to worry about these companies looking at your stuff, sharing your stuff, or selling your stuff. Because it's all garbled. And only you can ungarble it. Isn't that the normal you'd rather see in the world? Companies like Google, Apple, and Facebook all say that they take your privacy seriously, but then they proceed to collect every data point about you

that they can. Your location, your contacts, your address, your phone number, your work history, your sexual orientation, the car you drive, political affiliations, financial data, all communications with your friends and family. And then they analyze this and study you. And then they store it all in a database so they can keep building a profile on you. All this data is a huge liability for them and for you. And they absolutely 100% positively don't need any of it to do what they do. I've had enough of this and switched from an Android phone to a privacy phone. I exclusively use end-to-end encryption for all my text messaging where nobody

can see the chats but me and the person I'm sending it to. And I moved my email to one that encrypts my emails on their server so they can't even read them. I stopped using search engines that try to learn everything about me and I've switched to ones that collect zero data on their users. I've stopped using browsers that send my web history somewhere.

I always use a VPN. And I'm so mad at banks for giving my financial data away that I'm ready to just start using cryptocurrency everywhere I can or go back to using cash. I'm exercising my rights, and I'm being a self-advocate of my digital privacy. And I want you to be a self-advocate too. Major tech companies aren't going to give you privacy. The government isn't going to give you privacy.

But you can take it. I need you to take it. Take your digital privacy seriously. Because you know it's the right thing to do. A huge thank you to Tyroon for coming on the show and sharing this story with us. I particularly love this story because it gave me a glimpse into a pocket of the world that I had little knowledge of, and I feel smarter from having met him. Oh, and thank you to Naomi Brockwell

for coming on and telling us about digital privacy. She always gets me so revved up about it. She's got an awesome YouTube channel called NBTV Media, which can really level up your digital privacy. And there's a book I also recommend for protecting your online privacy, which is called Extreme Privacy, What It Takes to Disappear. I'll have links to all this in the show notes. The show is made by me, the Bloodhound Knight, Jack Lee Sider. This episode

was produced by the two-handed backslashing, Tristan Ledger, mixing done by Proximity Sound. And a big thanks to all the voice actors we had on this one. Our theme music is created by the mysterious Brickmaster Cylinder. Oh no, my robot's trying to run away. Quick, grab the botnet. This is Darknet Diaries. Thank you.