Digital Deception: Scams, Social Engineering & AI Fraud

Why the Scams You’re Ready For Aren’t the Ones That Will Get You

There is a moment, and I have heard versions of this story more times than I can count, when someone realizes they have just transferred money, or shared a password, or believed a voice on the phone, because it sounded exactly right. Not suspicious. Not clumsy. Exactly right. That is the moment this course is built around, because it is also the moment where almost everything we thought we knew about spotting a scam quietly stops being true.

I have spent a significant part of my career at the intersection of behavioral systems, intelligence analysis, and human risk. My work has always depended on understanding how people make decisions under pressure, and how that decision making can be deliberately engineered against them. What has changed recently, and changed fast, is the tool available to do that engineering. Artificial intelligence has made it possible to convincingly fake a face, a voice, and a moment of connection, cheaply, quickly, and at a scale that was simply not possible even a few years ago. That shift is what led me to build this course.

The story that changes how you think about this

In 2019, the CEO of a UK energy firm received a phone call from a voice he recognized instantly, his boss, calling from Germany, with the right accent and the right tone of mild Friday afternoon impatience. The voice instructed him to urgently transfer over two hundred thousand euros. He complied. The voice was not his boss. It was an AI generated clone, and the money was gone within minutes.

In 2024, a finance employee in Hong Kong joined a video call with what appeared to be his CFO and several colleagues, all instructing him to proceed with a confidential transaction. He processed fifteen transfers over the course of a week, totaling approximately twenty five million dollars. Every person on that call, aside from himself, was a deepfake, built from publicly available footage of the real executives.

I open the course with these stories not to frighten anyone, but to be honest about where we currently stand. And then I spend the rest of the course making the case, in specific, practical terms, for why neither of these outcomes was inevitable.

Why smart, careful people are not immune

One of the most persistent and damaging myths about scams is that they only happen to people who are careless, unintelligent, or poorly informed. It is a comforting belief, and it is also false. Decades of behavioral research show that intelligence and education offer very little protection against social engineering, because manipulation does not target how smart you are. It targets specific, well documented psychological principles, authority, urgency, scarcity, social proof, reciprocity, that operate the same way in every human brain, regardless of expertise.

This reframing matters enormously. Vulnerability to manipulation is situational, not characterological. The same capable, careful professional who would immediately question a stranger’s request often complies instantly with an identical request that appears to come from a boss, especially late on a Friday, especially when tired, especially when the message is engineered to feel urgent. Understanding this is not an invitation to distrust your own judgment. It is the first step toward building defenses that do not depend on your judgment being perfect in the moment it matters most.

What artificial intelligence has actually changed

Deepfake video and AI voice cloning are not future risks. They are active, documented, and increasingly accessible. Modern voice cloning tools can produce a convincing replica of someone’s voice from as little as three to ten seconds of audio, easily lifted from a voicemail greeting or a social media clip. What once required Hollywood level resources and specialized expertise can now be done, by essentially anyone, in minutes, often for free.

This is the detail I most want people to sit with. For your entire life, seeing a familiar face or hearing a familiar voice has functioned as a kind of identity confirmation. That assumption has quietly stopped holding, and most of us have not yet updated our instincts to match. The course spends real time on how this technology works, what current detection cues still exist, and, just as importantly, why those cues are becoming less reliable every year, and should never be your primary line of defense.

The single idea the entire course is built around

Every example in this course, the CEO fraud call, the twenty five million dollar deepfake video conference, the grandparent scam enhanced with a cloned voice, shares the exact same underlying vulnerability: the absence of a way to verify identity that does not depend on trusting your own eyes and ears in the moment. That vulnerability is entirely solvable, and it does not require becoming a technologist, a security expert, or a permanently suspicious person.

For organizations, the solution looks like structural protocols: mandatory out of band verification, dual authorization, callback procedures for vendor and payment changes, and a reporting culture where flagging a mistake is treated as valuable information rather than a source of blame. For families, the solution is simpler still, and one of my favorite parts of the course to teach: a private verification phrase, agreed on in advance, during an ordinary calm moment, that does not exist anywhere an AI system could learn it from. It is low cost, low tech, and remarkably effective, precisely because it does not rely on spotting a fake at all.

What this course builds

Digital Deception: Scams, Social Engineering & AI Fraud is a six module, approximately two hour course covering the psychology behind manipulation and why intelligence does not protect against it, the mechanics of phishing, spear phishing, smishing, vishing, and business email compromise, the technical reality of deepfakes and voice cloning, including real documented cases and current detection limits, and a full, practical build out of both organizational countermeasures and a family protection protocol, including the verification phrase method in complete, usable detail.

It is CPD eligible and designed for managers, HR professionals, senior leaders, and anyone responsible for protecting a team or a household. It is available now on LearnFormula and Udemy.

If you have completed Biology in the Boardroom or The Psychology of Listening, you will recognize familiar threads here, particularly around stress, cognitive load, and how both shape decision making under pressure. Digital Deception applies that same behavioral lens to one of the most urgent and fastest moving risks professionals and families currently face.

Protection against digital deception does not require paranoia or expensive technology. It requires a small number of well designed habits, practiced consistently. That is what this course exists to build.