Easy Prey

The intersection of AI and cybersecurity is changing faster than anyone expected, and that pace is creating both incredible innovation and brand-new risks we're only beginning to understand. From deepfake ads that fool even seasoned security professionals to autonomous agents capable of acting on our behalf, the threat landscape looks very different than it did even a year ago. To explore what this evolution means for everyday people and for enterprises trying to keep up, I'm joined by Chris Kirschke, Field CISO at Tuskira and a security leader with more than two decades of experience navigating complex cyber environments.

Chris talks about his unconventional path into the industry, how much harder it is for new professionals to enter cybersecurity today, and the surprising story of how he recently fell for a fake Facebook ad that showcased just how convincing AI-powered scams have become. He breaks down the four major waves of InfoSec from the rise of the web, through mobile and cloud, to the sudden, uncontrollable arrival of generative AI. He then explains why this fourth wave caught companies completely off guard. GenAI wasn't something organizations adopted thoughtfully; it appeared overnight, with thousands of employees using it long before security teams understood its impact. That forced long-ignored issues like data classification, permissions cleanup, and internal hygiene to the forefront.

We also dive into the world of agentic AI which is AI that doesn't just analyze but actually acts and the incredible opportunities and dangers that come with it. Chris shares how low-code orchestration, continuous penetration testing, context engineering, and security "mesh" architectures are reshaping modern InfoSec. Chris spends a lot of time talking about the human side of all this and why guardrails matter, how easy it is to over-automate, and the simple truth that AI still struggles with the soft skills security teams rely on every day. He also shares what companies should think about before diving into AI, starting with understanding their data, looping in legal and privacy teams early, and giving themselves room to experiment without turning everything over to an agent on day one.

• [00:00] Chris Kirschke, Field CISO at Tuskira, is here to explore how AI is reshaping cybersecurity and why modern threats look so different today.
• [03:05] Chris shares his unexpected path from bartending into IT in the late '90s, reflecting on how difficult it has become for newcomers to enter cybersecurity today.
• [06:18] A convincing Facebook scam slips past his defenses, illustrating how AI-enhanced fraud makes traditional red flags far harder to spot.
• [09:32] GenAI's sudden arrival in the workplace creates chaos as employees adopt tools faster than security teams can assess risk.
• [12:08] The conversation shifts to AI-driven penetration testing and how continuous, automated testing is replacing traditional annual reports.
• [15:23] Agentic AI enters the picture as Chris explains how low-code orchestration and autonomous agents are transforming security workflows.
• [18:24] He discusses when consumers can safely rely on AI agents and why human-in-the-loop oversight remains essential for anything involving transactions or access.
• [21:48] AI's dependence on context becomes clear as organizations move toward context lakes to support more intelligent, adaptive security models.
• [25:46] He highlights early experiments where AI agents automatically fix vulnerabilities in code, along with the dangers of developers becoming over-reliant on automation.
• [29:50] AI emerges as a support tool rather than a replacement, with Chris emphasizing that communication, trust, and human judgment remain central to the security profession.
• [33:35] A mock deposition experience reveals how AI might help individuals prepare for high-stress legal or compliance scenarios.
• [37:13] Chris outlines practical guardrails for adopting AI—starting with data understanding, legal partnerships, and clear architectural patterns.
• [40:21] Chatbot failures remind everyone that AI can invent policies or explanations when it lacks guidance, underscoring the need for strong oversight.
• [41:32] Closing thoughts include where to find more of Chris's work and continue learning about Tuskira's approach to AI security.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Tuskira
• Chris Kirschke -LinkedIn

Publicly available data can paint a much clearer picture of our lives than most of us realize, and this episode takes a deeper look at how those tiny digital breadcrumbs like photos, records, searches, even the background of a Zoom call can be pieced together to reveal far more than we ever intended. To help break this down, I'm joined by Cynthia Hetherington, Founder and CEO of The Hetherington Group, a longtime leader in open-source intelligence. She also founded Osmosis, the global association and conference for OSINT professionals, and she oversees OSINT Academy, where her team trains investigators, analysts, and practitioners from all experience levels.

Cynthia shares how she started her career as a librarian who loved solving information puzzles and eventually became one of the earliest people applying internet research to real investigative work. She talks about the first wave of cybercrime in the 1990s, how she supported law enforcement before the web was even mainstream, and why publicly accessible data today is more powerful and more revealing than ever. We get into how OSINT actually works in practice, from identifying a location based on a sweatshirt logo to examining background objects in video calls. She also explains why the U.S. has fewer privacy protections than many assume, and how property records, social media posts, and online datasets combine to expose surprising amounts of personal information.

We also explore the growing role of AI in intelligence work. Cynthia breaks down how tools like ChatGPT can accelerate analysis but also produce hallucinations that investigators must rigorously verify, especially when the stakes are legal or security-related. She walks through common vulnerabilities people overlook, the low-hanging fruit you can remove online, and why your online exposure often comes from the people living in your home. Cynthia closes by offering practical advice to protect your digital footprint and resources for anyone curious about learning OSINT themselves. This is a fascinating look at how much of your life is already visible, and what you can do to safeguard the parts you'd rather keep private.

• [01:17] Cynthia Hetherington, Founder & CEO of The Hetherington Group is here to discuss OSINT or Open-Source Intelligence.
• [02:40] Early cyber investigators began turning to her for help long before online research tools became mainstream.
• [03:39] Founding The Hetherington Group marks her transition from librarian to private investigator.
• [04:22] Digital vulnerability takes center stage as online data becomes widely accessible and increasingly revealing.
• [05:22] We get a clear breakdown of what OSINT actually is and what counts as "publicly available information."
• [06:40] A simple trash bin in a photo becomes a lesson in how quickly locations can be narrowed down.
• [08:03] Cynthia shares the sweatshirt example to show how a tiny image detail can identify a school and possibly a city.
• [09:32] Background clues seen during COVID video calls demonstrate how unintentional information leaks became routine.
• [11:12] A news segment with visible passwords highlights how everyday desk clutter can expose sensitive data.
• [12:14] She describes old threat-assessment techniques that relied on family photos and subtle personal cues.
• [13:32] Cynthia analyzes the balance and lighting of a Zoom backdrop, pointing out what investigators look for.
• [15:12] Virtual and real backgrounds each reveal different signals about a person's environment.
• [16:02] Reflections on screens become unexpected sources of intelligence as she notices objects outside the camera frame.
• [16:37] Concerns grow around how easily someone can be profiled using only public information.
• [17:13] Google emerges as the fastest tool for building a quick, surface-level profile of almost anyone.
• [18:32] Social media takes priority in search results and becomes a major driver of self-exposed data.
• [19:40] Cynthia compares AI tools to the early internet, describing how transformative they feel for investigators.
• [20:58] A poisoning case from the early '90s demonstrates how online expert communities solved problems before search engines existed.
• [22:40] She recalls using early listservs to reach forensic experts long before modern digital research tools were available.
• [23:44] Smarter prompts become essential as AI changes how OSINT professionals gather reliable information.
• [24:55] Cynthia introduces her C.R.A.W.L. method and explains how it mirrors the traditional intelligence lifecycle.
• [26:12] Hallucinations from AI responses reinforce the need for human review and verification.
• [27:48] We learn why repeatable processes are crucial for building trustworthy intelligence outputs.
• [29:05] Elegant-sounding AI answers illustrate the danger of unverified assumptions.
• [30:40] An outdated email-header technique becomes a reminder of how quickly OSINT methods evolve.
• [32:12] Managed attribution—hiding your digital identity—is explained along with when it's appropriate to use.
• [33:58] Cynthia unpacks the reality that the U.S. has no constitutional right to privacy.
• [35:36] The 1996 case that sparked her digital-vulnerability work becomes a turning point in her career.
• [37:32] Practical opt-out steps give everyday people a way to remove basic personal data from public sites.
• [38:31] She discusses how indirect prompting of AI tools can still narrow down someone's likely neighborhood or lifestyle.
• [39:58] Property and asset records emerge as unavoidable exposure points tied to government databases.
• [40:52] A high-risk client's situation shows how family members often create digital vulnerabilities without realizing it.
• [42:44] Threats that surface too late demonstrate why proactive intelligence work is essential.
• [44:01] Concerns about government surveillance are contrasted with the broader access private investigators actually have.
• [45:12] Train tracks become an example of how physical infrastructure now doubles as a modern data network.
• [46:03] She explains how audio signatures and forensic clues could theoretically identify a train's path.
• [47:58] Asset tracking becomes a global operation as valuable cargo moves between ships, trucks, and rail systems.
• [49:48] Satellite imagery makes monitoring even remote or underwater locations almost effortless.
• [51:12] Everyday applications of geospatial analysis include environmental changes and shifts within local communities.
• [52:19] Surveillance is compared to gravity; it's constant, invisible, and always exerting pressure.
• [52:44] Cynthia shares practical strategies for controlling your environment and keeping conversations private.
• [54:01] Resources like OSINT Academy, Information Exposed, and the Osmosis Association offer pathways for learning and strengthening personal privacy.
• [55:32] The episode closes with encouragement to stay aware of what you share and how easily digital clues can be connected.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Hetherington Group
• OSMOSIS
• OSINT Academy
• Cynthia Hetherington - LinkedIn
• OSINT: The Authoritative Guide to Due Diligence
• Business Background Investigations: Tools and Techniques for Solution Driven Due Diligence

Sometimes we forget how much trust we place in the little things around us like a lock on a door or a badge on someone's shirt. We see those symbols and assume everything behind them is safe, but it doesn't always work that way. A person with enough confidence, or the right story, can slip through places we think are locked down tight, and most of us never notice it's happening.

My guest today is Deviant Ollam, and he's one of the rare people who gets invited to break into buildings on purpose. He talks about how he fell into this unusual line of work, the odd moments that shaped his career, and why understanding human behavior matters just as much as understanding locks or alarms. Listening to him describe these situations, where he's walking through offices, popping doors, or blending in with repair crews, makes you realize how blind we can be to our own surroundings.

We also get into the practical side of things: the mistakes companies make, the small fixes that go a long way, and why teaching employees to slow down and ask a few extra questions can make all the difference. It's an eye-opening conversation, especially if you've ever assumed your workplace is more secure than it really is.

• [03:24] Deviant shares how early adventures, abandoned buildings, and curiosity about locks pulled him toward physical security.
• [06:20] A story about a law firm reveals how an office "secure" door was bypassed instantly, exposing major hardware flaws.
• [09:16] Discussion shifts to how the locksmith and safe technician community reacted to his public teaching and how that's changed over time.
• [13:28] The topic turns to security theater and the gap between feeling safe and actually being protected.
• [16:18] An explanation of symbolic locks versus real security products highlights how easily people mix up the two.
• [19:11] Conversation moves into the lack of clear U.S. lock standards and why European systems make things easier for consumers.
• [21:51] Layered security comes into focus, emphasizing that the goal is to delay and deter rather than stop every possible attack.
• [24:35] Monitoring tools, overlooked windows, and forgotten blind spots show how attackers often choose the easiest entry point.
• [27:38] We look at the politics of penetration tests and why coordinating with building management is essential.
• [31:28] Escalation testing illustrates how long suspicious behavior can go unnoticed inside an organization.
• [34:34] The need for simple, obvious reporting channels becomes clear when employees aren't sure who to alert.
• [37:00] A breakdown of common cover stories shows why attackers lean on confidence and industry jargon.
• [39:50] Urgency and pressure tactics surface as key components of social engineering and why "polite paranoia" helps.
• [41:14] A viral prank underscores how easily an unverified person can be escorted into restricted areas.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Deviant Ollam
• Deviant Ollam - You Tube
• Deviant Ollam - Instagram
• Practical Lock Picking: A Physical Penetration Tester's Training Guide

Fraud today doesn't feel anything like it used to. It's not just about somebody skimming a credit card at a gas pump or stealing a check out of the mail. It has gotten personal, messy, emotional. Scammers are building relationships, earning trust, and studying the little details of our lives so they can strike when we're tired, distracted, or dealing with something big. And honestly, most people have no idea how far it's gone.

My guest, Ian Mitchell, has spent more than 25 years fighting fraud around the world and leading teams in the financial sector. He's the founder of The Knoble, a nonprofit bringing banks and industry leaders together to protect vulnerable people from scams, human trafficking, and exploitation. Ian has seen the evolution of fraud firsthand, from the old-school days of stolen cards to the organized global crime networks using technology, AI, and human manipulation to scale at a pace we've never experienced before.

What stood out to me is Ian's belief that the strongest defense doesn't start with fancy tools or tighter security. It starts at home. Real conversations with our kids about safety online. Checking in on aging parents. Talking openly with people we trust so scammers can't isolate us and break us down. It's serious work, but Ian is hopeful. He believes there are far more good people than bad, and when we look out for each other, we're a lot harder to exploit.

• [00:58] Ian unexpectedly shifted from music and modeling into the world of fraud prevention.
• [01:19] Founding The Knoble and building a global network to fight human crimes and protect vulnerable populations.
• [01:49] A look at Follow the Money, the documentary project raising awareness about exploitation and financial crime.
• [02:19] Why Ian believes crimes of exploitation have moved directly into our homes and daily lives.
• [03:08] The early moment when Ian uncovered a major fraud ring while working at an internet company.
• [06:44] How canceling $300,000 in fraudulent orders changed the direction of his career.
• [08:11] Reflections on the "wild west" early days of online fraud and security.
• [11:01] How fraud evolved from stolen cards into emotional manipulation and trust-based scams.
• [12:49] The post-COVID surge in scams and the shift toward targeting individuals instead of systems.
• [14:03] Why fighting fraud today requires global coordination and an army of trained professionals.
• [16:38] Scammers coaching victims to distrust banks, friends, and even family members.
• [17:05] The longest romance-style scam Ian has seen — an eight-year manipulation before money was ever requested.
• [18:25] Discussion on timing, trust, and why even smart people can be caught off guard.
• [22:05] Ian shares his own experience dealing with identity theft and the complexity of proving it wasn't him.
• [23:22] AI and big data transforming broad scam attempts into precise, personalized attacks.
• [25:31] The alarming rise of sextortion schemes targeting kids ages 13–16 and why awareness is critical.
• [26:40] The urgent need for uncomfortable safety conversations within families.
• [28:09] Why Ian believes the first line of defense isn't technology — it's communication at home.
• [29:30] The emotional impact on scam victims: shame, isolation, and loss of confidence in judgment.
• [31:13] How AI can be used for good and why the industry must move quickly to fight back.
• [40:40] Three essential conversations families should start having right now.
• [41:21] Protecting children through parental controls, boundaries, and digital safety.
• [42:42] Encouraging open dialogue with aging parents about financial protection and autonomy.
• [44:19] Finding balance: staying vigilant without living in fear.
• [47:57] A hopeful reminder that there are far more good people than bad — and collective action matters.
• [48:30] Where to find Ian, learn more about The Knoble, and connect with his work.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• The Knoble
• Ian Mitchell - LinkedIn

AI has brought incredible new capabilities into everyday technology, but it's also creating security challenges that most people haven't fully wrapped their heads around yet. As these systems become more capable and more deeply connected to the tools and data we rely on, the risks become harder to predict and much more complicated to manage.

My guest today is Rich Smith, who leads offensive research at MindGard and has spent more than twenty years working on the front lines of cybersecurity. Rich has held leadership roles at organizations like Crash Override, Gemini, Duo Security, Cisco, and Etsy, and he's spent most of his career trying to understand how real attackers think and where systems break under pressure.

We talk about how AI is changing the way attacks happen, why the old methods of testing security don't translate well anymore, and what happens when models behave in ways no one expected. Rich also explains why psychology now plays a surprising role in hacking AI systems, where companies are accidentally creating new openings for exploitation, and what everyday users should keep in mind when trusting AI with personal information. It's a fascinating look behind the curtain at what's really going on in AI security right now.

• [01:00] Rich describes getting into hacking as a kid and bypassing his brother's disk password.
• [03:38] He talks about discovering Linux and teaching himself through early online systems.
• [05:07] Rich explains how offensive security became his career and passion.
• [08:00] Discussion of curiosity, challenge, and the appeal of breaking systems others built.
• [09:45] Rich shares surprising real-world vulnerabilities found in large organizations.
• [11:20] Story about discovering a major security flaw in a banking platform.
• [12:50] Example of a bot attack against an online game that used his own open-source tool.
• [16:26] Common security gaps caused by debugging code and staging environments.
• [17:43] Rich explains how AI has fundamentally changed offensive cybersecurity.
• [19:30] Why binary vulnerability testing no longer applies to generative AI.
• [21:00] The role of statistics and repeated prompts in evaluating AI risk and failure.
• [23:45] Base64 encoding used to bypass filters and trick models.
• [27:07] Differentiating between model safety and full system security.
• [30:41] Risks created when AI models are connected to external tools and infrastructure.
• [32:55] The difficulty of securing Python execution environments used by AI systems.
• [35:56] How social engineering and psychology are becoming new attack surfaces.
• [38:00] Building psychological profiles of models to manipulate behavior.
• [42:14] Ethical considerations and moral questions around AI exploitation.
• [44:05] Rich discusses consumer fears and hype around AI's future.
• [45:54] Advice on privacy and cautious adoption of emerging technology.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Mindgard
• [email protected]

Ransomware isn't a lone hacker in a hoodie. It's an entire criminal industry complete with developers, brokers, and money launderers working together like a dark tech startup. And while these groups constantly evolve, so do the tools and partnerships aimed at stopping them before they strike.

My guest today is Cynthia Kaiser, former Deputy Assistant Director of the FBI's Cyber Division and now the Head of the Ransomware Research Center at Halcyon. After two decades investigating global cyber threats and briefing top government leaders, she's now focused on prevention and building collaborations across government and industry to disrupt ransomware actors at their source.

We talk about how ransomware groups operate, why paying a ransom rarely solves the problem, and what layered defense really means for organizations and individuals. Cynthia also shares how AI is reshaping both sides of the cyber arms race and why she believes hope, not fear, is the most powerful tool for defenders.

• [01:04] Cynthia Kaiser had a 20-year FBI career and has now transitioned from investigation to prevention at Halcyon.
• [03:58] The true scale of cyber threats is far larger than most people realize, even within the government.
• [04:19] Nation-state and criminal activity now overlap, making attribution increasingly difficult.
• [06:45] Cynthia outlines how ransomware spreads through phishing, credential theft, and unpatched systems.
• [08:08] Ransomware is an ecosystem of specialists including developers, access brokers, money launderers, and infrastructure providers.
• [09:55] Discussion of how many ransomware groups exist and the estimated cost of attacks worldwide.
• [11:37] Ransom payments dropped in 2023, but total business recovery costs remain enormous.
• [12:24] Paying a ransom can mark a company as an easy target and doesn't guarantee full decryption.
• [13:11] Example of a decryptor that failed completely and how Halcyon helped a victim recover.
• [14:35] The so-called "criminal code of ethics" among ransomware gangs has largely disappeared.
• [16:48] Hospitals continue to be targeted despite claims of moral restraint among attackers.
• [18:44] Prevention basics still matter including strong passwords, multi-factor authentication, and timely patching.
• [19:18] Cynthia explains the value of layered defense and incident-response practice drills.
• [21:22] Even individuals need cyber hygiene like unique passwords, MFA, and updated antivirus protection.
• [23:32] Deepfakes are becoming a major threat vector, blurring trust in voice and video communications.
• [25:17] Always verify using a separate communication channel when asked to send money or change payment info.
• [27:40] Real-world example: credential-stuffing attack against MLB highlights the need for two-factor authentication.
• [29:55] What to do once ransomware hits includes containment, external counsel, and calling trusted law-enforcement contacts.
• [32:44] Cynthia recounts being impersonated online and how she responded to protect others from fraud.
• [34:28] Many victims feel ashamed to report cybercrime, especially among older adults.
• [36:45] Scams often succeed because they align with real-life timing or emotional triggers.
• [38:32] Children and everyday users are also at risk from deceptive links and push-fatigue attacks.
• [39:26] Overview of Halcyon's Ransomware Research Center and its educational, collaborative goals.
• [42:15] The importance of public-private partnerships in defending hospitals and critical infrastructure.
• [43:38] How AI-driven behavioral detection gives defenders a new advantage.
• [44:48] Cynthia shares optimism that technology can reduce ransomware's impact.
• [45:43] Closing advice includes practicing backups, building layered defenses, and staying hopeful.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Halcyon
• Cynthia Kaiser - LinkedIn

Criminals are always adapting. Whether it's copper wiring stripped from job sites or porch pirates grabbing deliveries in broad daylight, they keep finding new ways to take what isn't theirs. But maybe prevention isn't about harsher punishment or more cameras. Maybe it's about smarter design and understanding what drives people to steal in the first place.

My guest today is Dr. Ben Stickle, a professor of criminal justice at Middle Tennessee State University and one of the country's top researchers on property crime. Before entering academia, he worked in law enforcement, which gives him a rare mix of real-world perspective and research-based insight. His work on metal theft, catalytic converter crime, and package theft sheds light on who's actually committing these offenses, what motivates them, and which prevention methods truly work.

We discuss how fluctuating metal prices influence theft rates, why cameras often fail to stop certain crimes, and how a few simple design changes to your home can make a real difference. Dr. Stickle also shares unexpected examples of modern theft, from stolen pets to disappearing beehives, and explains how communities can act early before small trends turn into national headlines.

• [01:22] Ben recalls his early years as a police officer and what motivated him to serve.
• [01:27] The conversation moves into crime scene investigation training and lessons from real-world cases.
• [03:38] Ben talks about transitioning into teaching and research, guided by a drive to improve policing through knowledge.
• [05:30] The focus turns to crime prevention and understanding how to stop crimes before they happen.
• [06:15] Discussion shifts to metal theft, from copper wiring to catalytic converters, and the steep cost of replacing what's stolen.
• [10:47] Ben explains how metal theft isn't new, tracing its roots all the way back to ancient Greece.
• [14:58] The challenges of balancing better security design with cost and practicality come to light.
• [17:46] The topic turns to porch piracy and why package theft has become one of the most common crimes in America.
• [19:43] Ben breaks down how daily routines influence theft risk and how thieves range from organized groups to impulsive opportunists.
• [25:23] The role of cameras is questioned as Ben explains why surveillance doesn't always deter crime.
• [27:00] Practical prevention strategies emerge like delivering to lockers, hiding packages, and using better drop-off options.
• [28:53] New tech enters the discussion with alarms, GPS tracking, and geofencing tools designed to stop porch pirates.
• [29:14] Ben explores how rethinking porch layouts could help protect deliveries and reduce crime opportunities.
• [31:47] The conversation expands to environmental criminology and how physical spaces can influence criminal behavior.
• [34:00] Ben emphasizes the importance of targeted prevention instead of one-size-fits-all solutions.
• [38:00] The value of using local crime data, rather than fear-driven news, to make safety decisions is underscored.
• [40:30] Emerging trends come up, from pet and beehive thefts to crimes tied to the growing sharing economy.
• [42:00] The episode wraps with takeaways on prevention, awareness, and where listeners can find Ben's research.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• The Knoble
• Freddy Massimi - LinkedIn

Fraud usually gets talked about in numbers like how much money was stolen, how many people were affected, how many cases got filed. But behind every one of those numbers is a person who's been blindsided, manipulated, or left trying to rebuild trust in others and in themselves. This episode shifts the focus back to those human stories and the fight to protect them. My guest, Freddie Massimi, has spent more than a decade helping scam victims find both financial and emotional recovery, bringing empathy and understanding to a field that too often feels cold and procedural.

As a certified financial crimes investigator and program manager at The Knoble, Freddie has made it his mission to bridge the gap between institutions and individuals. He shares the heartbreaking and hopeful moments that define his work including one phone call that saved a life. Along with how that experience changed the way he thinks about what true fraud prevention really means.

Freddie also opens up about The Knoble's Post-Scam Victimization Guide, a collaborative, trauma-informed resource designed to help victims regain control of their lives and prevent re-victimization. From crypto scams to romance cons, he explains how these schemes keep evolving, why empathy is still one of the best tools we have, and how every fraud fighter can make a difference simply by listening and responding with humanity.

• [00:40] Freddie shares his background as a certified financial crimes investigator and program manager at The Knoble.
• [01:40] A look back at Freddie's early path into criminal justice and how empathy shaped his fraud-fighting approach.
• [03:07] The story of a Tennessee widow who lost $300,000 in a pig-butchering crypto scam.
• [04:30] Freddie's emotional account of saving a victim's life and how it reframed his mission to protect others.
• [07:42] The rise of collaborative fraud-fighter networks and Freddie's work leading The Knoble's post-scam initiatives.
• [08:11] How The Knoble unites financial institutions, law enforcement, and NGOs to address "human crime."
• [08:58] Development of the Post-Scam Victimization Guide, a trauma-informed resource for banks and fraud teams.
• [10:39] How financial crime has evolved from simple check scams to complex digital exploitation and trafficking.
• [13:01] The need for faster, more transparent information sharing between banks and law enforcement.
• [14:04] What makes the Post-Scam Guide different including actionable steps, empathy-driven language, and real-world tools.
• [15:00] Sextortion cases, Gavin's Law, and how shame and silence compound the harm.
• [18:30] Practical tools in the guide, including hotline numbers, QR codes, and scripts for supporting victims.
• [20:20] How to talk to romance scam victims with compassion including using questions that spark reality checks, not judgment.
• [22:00] Why shame keeps scams underreported and how trauma-informed communication changes outcomes.
• [23:19] The role of technology in scams: remote access, malware, and how scammers exploit smartphones and computers.
• [24:36] Shoutout to Kitboga for his cybersecurity tools and awareness campaigns against scam call centers.
• [25:22] Why elderly victims remain the most vulnerable and how education can empower prevention.
• [27:24] The double victimization cycle like when scammers return pretending to recover lost money.
• [30:00] Freddie's real-world example of helping a victim secure their accounts and recover identity.
• [32:50] How banks can adjust fraud detection systems to catch hidden patterns of exploitation.
• [34:30] Spotting red flags in gift card purchases and why speaking up can literally save lives.
• [36:31] Freddie's advice for anyone who suspects they're being scammed: stop all contact and secure your accounts.
• [37:06] The importance of documenting everything and reporting through IC3.gov and law enforcement.
• [38:30] Emotional recovery and community support are just as vital as financial recovery.
• [41:00] The biggest mistake victims make after being scammed is staying silent out of shame or fear.
• [41:40] Freddie's story about protecting his own grandmother from IRS and WhatsApp scams.
• [43:00] Common text-message scams and why you should never reply, even with "wrong number."
• [44:48] How to access The Knoble's free, vetted Post-Scam Victimization Guide.
• [45:30] Where to connect with Freddie and The Knoble's wider fraud-fighter network.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• The Knoble
• Freddy Massimi - LinkedIn

You think you'd never fall for a scam until you meet someone like Kitboga. He's a software engineer who's turned his curiosity about online fraud into a full-time mission to outsmart scammers and protect the people they target. His YouTube channel, The Kitboga Show, has millions of followers and nearly a billion views, thanks to his mix of humor, empathy, and clever ways of exposing how scams really work.

In our conversation, Kit opens up about how this all started, what it's really like to spend hours pretending to be a scam victim, and how organized crime has turned fraud into a massive global business. He shares what's changed over the years and why those old "red flags" don't always work anymore and how new tools like deepfakes and AI have made deception harder to spot than ever.

Kit also talks about his newest project, Serif Secure, a free tool he created to help people clean and protect their computers after a scam attempt. He's honest, thoughtful, and a little funny even when the subject is dark. By the end, you'll see just how much one person can do to fight back.

• [01:15] Kit explains how he got into "scam baiting" and why protecting victims became personal.
• [03:05] He shares how streaming scam calls to friends unexpectedly turned into a viral mission.
• [06:07] Kit recounts nearly falling for a Discord impersonation scam himself.
• [09:17] We discuss how deepfakes and AI are changing what a "red flag" looks like online.
• [11:31] Scammers now use real services like PayPal and DocuSign to appear legitimate.
• [13:11] Kit explains how long-term investment and "pig-butchering" scams draw people in slowly.
• [15:51] Fraudsters are now going after 401(k)s and retirement funds instead of small cash grabs.
• [17:00] We examine how fake phone numbers and online ads make verification harder than ever.
• [19:56] Kit talks about the emotional toll of scam-baiting and why he sometimes needs a break.
• [21:51] We reflect on why decades-old scams, like Nigerian letters, still thrive today.
• [23:57] The scale of organized fraud is compared to global industries worth trillions.
• [25:41] Kit admits scams will never truly disappear—only evolve with new technology.
• [26:44] We learn how his team uses automation to detect and map out scam networks.
• [30:24] Kit describes juggling live streaming with scam calls and the role humor plays in coping.
• [33:37] He explains why scammers' aggression still works and what it reveals about victims.
• [37:00] Kit shares moving stories of victims, including a widower deceived in a romance scam.
• [40:00] We explore how scams erode self-trust and make victims doubt their own judgment.
• [42:13] Kit talks about working with law enforcement and the need for stronger collaboration.
• [44:10] We hear about Serif Secure, his anti-scam software designed to protect users' devices.
• [47:04] The software now proactively blocks remote access tools and phishing websites.
• [48:14] Kit warns about "scam recovery" frauds and the cruel trick that targets victims twice.
• [49:30] We wrap with practical advice on skepticism, security, and staying a step ahead of scammers.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Kitboga - YouTube
• Seraph Secure
• Kitboga
• Kitboga - Instagram
• The Scamcast with Kitboga

Everywhere you turn, someone's trying to fake something like an image, a voice, or even an entire identity. With AI tools now in almost anyone's hands, it takes minutes, not days, to create a convincing fake. That's changed the game for both sides. The fraudsters have new weapons, and the rest of us are scrambling to keep up. The real question now isn't just how to stop scams, but how to know who or what to trust online.

My guest today, Bala Kumar, spends his days on the front lines of that battle. He's the Chief Product and Technology Officer at Jumio, a company working to make digital identity verification faster, smarter, and safer. Bala has more than twenty years in the industry, including leadership roles at TransUnion, and he's seen firsthand how the race between innovation and exploitation never really ends. It just keeps speeding up.

In our conversation, Bala shares how generative AI has supercharged the fraud world, what makes identity such a fragile link in digital trust, and why biometrics may finally offer a way forward. We also dig into the psychology behind online risk, how convenience often wins over caution, and what small habits can help people protect themselves in an age where deception looks more real than ever.

• [01:04] Bala Kumar has a background in product management and fraud prevention from TransUnion to Jumio.
• [01:59] He describes how fraudsters constantly evolve, forcing companies to anticipate attacks instead of just reacting.
• [03:56] The quality of manipulated images has skyrocketed, making real vs. fake nearly indistinguishable.
• [05:17] Jumio's systems catch most fake IDs, but Bala admits even advanced systems must keep auditing for missed fraud.
• [07:16] Regular audits and rapid response cycles help Jumio identify attack spikes within 24–48 hours.
• [09:40] Generative AI has dramatically increased the speed and volume of fraud attempts across industries.
• [11:33] Jumio uses cross-transaction risk analysis to detect emerging fraud patterns and shut down attacks quickly.
• [13:00] Fraudsters move from one platform to another, always searching for weaker defenses and faster wins.
• [15:10] Bala explains how fraud prevention has expanded beyond banking into gaming, dating, and gig platforms.
• [16:38] Consumers crave low friction, which ironically makes them more vulnerable to scams.
• [17:20] Instant gratification culture pressures companies to reduce security steps, fueling greater risk.
• [19:52] New AI-driven fraud tactics include injected camera feeds and highly realistic deep fakes.
• [20:12] Old tricks like "send me a selfie with proof" no longer work—deepfakes can now mimic anything.
• [22:22] Bala sees biometrics as the next major safeguard for digital identity and real-time verification.
• [23:12] Facial recognition has become mainstream, paving the way for secure and low-friction identity checks.
• [26:19] Jumio is already deploying biometric check-ins for events and hotel registrations with great success.
• [27:30] Account recovery and payout systems now use liveness and device checks to confirm identity safely.
• [30:09] Bala critiques outdated knowledge-based questions like "What's your favorite food?" as unreliable security.
• [31:12] Consumers lack visibility into which apps use strong verification or multi-factor authentication.
• [33:56] He calls for an independent rating system to rank apps based on security and identity protection.
• [37:53] Bala urges users to question why companies ask for personal data like SSNs or ZIP codes.
• [39:29] Even a ZIP code and last name can expose personal records, highlighting the need for awareness.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Jumio
• Bala Kumar - LinkedIn