Developing a Critical Disposition

This morning, I received a photo (found below – I added the watermark) from a catfishing victim. She received it from a scammer who had used many of my personal and professional photos to form an online, intimate relationship with her for the purpose of defrauding her out of money. The victim finally clued into the scam after already sending him thousands of dollars. While it may seem ridiculous to fall for such a scam, I receive hundreds of similar reports every year, and if you know of my ongoing saga, you will understand that I have tried my best to bring the problem to the attention of Facebook, Google, elected officials, law enforcement, etc. None of these organizations or agencies seem to be willing or able to do anything about this problem, and thus I feel the responsibility of teaching about such Internet scams must continue to be taken up by educators in K-12 and post-secondary institutions.

Over the years, I have seen teachers make great use of interesting “fake sites” designed to help students develop information literacies/skills. Some of these include DHMO.org, Save the Endangered Pacific Northwest Tree Octopus, Feline reactions to bearded men, and DehydratedWater.com. And while these are still great resources that can be used with some success, given the abundance of fake news and internet scams that inundate our digital society, there are plenty of opportunities to use fresh and authentic examples in class.

For instance, using the example of the photo above, students could employ some very basic info/digital literacy skills to identify the picture as a fake (i.e. photoshopped) picture through a reverse image search. In this Youtube video, I’ve previously demonstrated how to use Google Images to run a reverse image search, but I also wanted to highlight TinEye as an alternative tool for this task. To try out TinEye for this purpose, I would suggest that you download the above photo to your computer (ctrl-click+save or drag+drop), visit the TinEye site, and then upload the image to TinEye (there is also a TinEye Chrome extension available that makes the process a little quicker). In the case of the photo above, using TinEye produces the following results:

Exploring the resulting links, you will quickly discover that the original image shows Anders Breivik, who killed 77 people in Norway in a terror attack in 2011. Further investigation also reveals many additional photos of Breivik in custody, making it clear which version of the image is the photoshopped one (if the tiny size of my head compared to my body wasn’t already enough proof).

So there you have a component of a very basic information/digital literacy lesson that you could use in the classroom. However, I’d like to stress that these important tools and/or processes will likely not become first-nature to our students unless we help our students develop the disposition to approach the world with a critical eye. Recent studies have shown that young people are not, on the whole, very good at detecting fake news – and the stories that emerged regarding fake news about the U.S. presidential election being written by teens in Macedonia have made it clear that adults are equally vulnerable. There is little doubt that information/digital literacy will become more and more important in the years to come.

I’d love to hear from you. What strategies are you using in your classroom to help students become critical consumers and creators of information and media? 

Facebook Is About To Make Catfishing Problems Even Worse

Scam Computer Keys Showing Swindles And Fraud

Over the past week, I’ve had a number of people share articles with me related to Facebook’s testing of a new feature that is purported to alert Facebook users when it finds that someone is impersonating your account. Once the user is alerted, that user is then able to report the fraudulent account and pray that Facebook will take it down. However, given my 8 years of experience with this problem, I feel that I am qualified to say that this approach will simply not work for a number of reasons.

  1. Facebook often fails to take down fraudulent profiles: While I have successfully had Facebook take down hundreds of fake profiles (I find several new ones each day), there are certain profiles that it simply does not take down. For instance, I’ve been trying to get Facebook to take down the account of “Trofimov Sergei” (a user who is clearly using a profile photo of me and my son) for over a year now. Yet, no matter how many times I report the account, the profile remains. More disturbing is the fact that if you search for “Trofimov Sergei” on Facebook, you will see dozens of fake accounts by the same name using stolen photos of other men. Most of the deception is done in private communication with the (potential) victims, but every once in a while, you will find a public post where the fraudsters are asking for money for a feigned illness. Luckily, there are many people (often former victims) who do uncover and share their knowledge of these fraudulent accounts in order to contain some of the damage.
  2. Scammers may use photos of your children as their profile photo: After hundreds of reports, Facebook still refuses to take down the account of “Nelson Colbert,” a scammer who is using photos of my children as a profile photo. When you report an impersonation in Facebook’s current reporting tool, you ultimately have to choose one of the following: A) “This timeline is pretending to be me or someone that I know”, or B) “This timeline is using a fake name.” I have been completely unsuccessful when using Option B, and I have had only limited success with Option A: when you choose this option, you are asked to identify the user who is being impersonated, but when I identify myself, Facebook quickly rejects the report as it is clear that I am not the person in the profile photo. I have attempted to use Facebook’s “Report An Underage Child” tool (which is only available in Canada after you logout, apparently), but this has also been completely unsuccessful. The most unnerving part of this particular profile is that I receive more reports about it from victims than I do about any other. In fact, there are literally dozens of pages of search results that relate to “Nelson Colbert” and this scammer’s involvement in fraudulent activities. Yet, it appears that Facebook has made this account untouchable. I suspect that the scammer behind it may have created falsified documentation to get the account validated internally.
  3. Scammers may use your elderly mother’s photo as their profile picture: These criminals often create sophisticated networks of friends and family in their schemes. For instance, the scammers created a fake profile using my mother’s photos and named her Maria Gallart. I cannot report this profile directly to Facebook; instead I am only able to report it to my mother to deal with it. I did so, and as you would imagine, the distress, anxiety, and uncertainty that this caused my nearly 80-year-old mother was not something that she needed nor something that she necessarily knew how to deal with. And even with my assistance, reporting the fraudulent account from my mother’s account (many times) has not led to the account being taken down.
  4. Facebook doesn’t always believe the “real” person in cases of identity fraud: Facebook has taken down my account twice because a scammer reported me as being the fake Alec Couros. In both cases, I had to submit my passport to Facebook via email for verification (which is incredibly problematic for security reasons). I am unsure of why I had to do this twice, and I am puzzled as to why my account wasn’t verified either time (even though I have applied for verified status). Facebook’s proposed system will have to rely on verifying an account using a secure, consistent, and foolproof system if it is to be successful. To date, the company has failed miserably in this respect.
  5. Facebook’s proposed system could give an advantage to the criminals: Fraudsters have often used photos of me that I have never previously used on Facebook. Based on the incomplete details provided so far about this new alert system, one might assume that if I were to use any of my personal photos after a scammer had done so, I would be the one flagged as an impersonator. Thus, the criminal might easily be regarded as having the authentic profile, which sounds like really bad news.

The Mashable article shared at the beginning of this post states that Facebook is rolling out these features as the company attempts to push its presence into regions of the world where “[impersonation] may have certain cultural or social ramifications” and “as part of ongoing efforts to make women around the world feel more safe using Facebook.” If that is the goal, Facebook’s proposed technology won’t help, and it may very well make things worse for women (or anyone) using the site. Already, Facebook is plagued with identity thieves who adversely affect the safety, comfort, and freedom of many of its users, and the problem will only continue to grow with these types of half-baked efforts. You may not be affected now, but unless Facebook does something to fully address this issue, you almost certainly will be.

The Future of Identity Theft

I’ve written and spoken extensively about my problems with romance scammers, criminals who have used my photos (and the photos of many others) to create fake profiles and trick victims into sending them significant amounts of money. In my research, I’ve learned that many potential victims ask for a video chat with scammers as a way for them to prove their identities. In fact, participating in a video chat and then asking supposed suitors to perform particular actions on request (e.g., hold up two fingers on your left hand) is often touted on anti-scammer sites as a way to ensure that the person that you are talking to is in fact who they say they are and not a scammer who may be using recorded video as their video source (a common and frightening possibility).

Well, verifying identity online has just become even more complex. As you have already likely discovered, there are a number of freely available apps (e.g., Snapchat, FaceSwap Live, MSQRD) that allow for live face-swapping. In fact, MSQRD was recently purchased by Facebook, and there have been suggestions that face-swapping could become more directly integrated into the social network. If you have used one of these apps, you’ll likely agree that face-swapping can be a lot of fun, but these are fairly touchy/glitchy apps and their use could be easily detected. However, this may not be the case for long.

Researchers from Stanford University recently released a project that works to “animate the facial expressions of the target video by a source actor and re-renders the manipulated output video in a photo-realistic fashion.” The results are incredible, but the implications for identity theft are incredibly frightening, in effect allowing scammers to become puppet masters who manipulate the faces and bodies of their fake profile avatars. Takes the idea of “authentic identity” to a whole new level, doesn’t it?

Catfishing Tricks Become More Complex

Yesterday, I received the following Facebook message:

Message from "Bola Shagaya"

I posted this to my Facebook wall when I received it, and it was interesting to hear from several people who felt they might have been fooled had they received the same message. After nearly a decade of becoming familiar with the tricks of these scammers, I question just about every angle. While this was the first time that I have received a message like this, the motive for the message seemed obvious to me. A photo of me that verifies the date would make it possible for a scammer to “prove” they were really me (rather than just using old photos). As well, if I had Googled the name of the sender (like my colleague Katia did), I might have wondered how this famous Nigerian business woman had the time to message me personally (and perhaps even why she cared about a mere 150K).

Today, I was contacted by another person on Facebook who had heard from her friends that a profile with her name, photos, and identifying information was trying to friend many of them. Several reported this to be suspicious so she immediately warned her friends with a status update. I asked her where the fake profile was and she found it for me. What we noticed was really sneaky (and horrible).

See below, the real person’s profile:

Joy_Brennan

Now, look at the fake profile:

Joy_Brenan

Do you see the important difference? The profile and header photos are the same in each. The friend count is certainly different. But the big thing is the spelling of the name. The authentic profile is “Joy Brennan” (two ‘n’s) and the fake profile photo is “Joy Brenan” (one ‘n’). The especially sneaky part is that if you were to try and search for fake Facebook profiles with your photos and name, this would make these much more difficult to find.

So why would the scammers do something like this? My guess is that they were hoping to perform a scam such as the common “email hijack,” where members of an existing friends/family network could eventually be tricked into sending money due to a contrived distress call (e.g., I was robbed while traveling, please wire me money).

So there you have it - a couple more scams to be concerned about. Oh, and Facebook still isn’t doing anything about these problems.

Continued Catfishing Woes

Landing in Regina tonight, I checked my phone to find the following tweets directed at me.

Screen Shot 2016-03-03 at 12.44.16 AM

Screen Shot 2016-03-03 at 12.44.45 AM

Screen Shot 2016-03-03 at 12.45.14 AM

Screen Shot 2016-03-03 at 12.45.38 AM

Screen Shot 2016-03-03 at 12.46.03 AM

From what I was able to understand, it appears that this tweeter has been chatting with a person by the name of James Vardy who is using my photos (as seen in the screenshots). However, she believes that I’m the guy she is actually talking to and that I’m “sick” and a “pervert.” A quick search in Facebook brought up this fake profile that I have now reported. Below is a screenshot in case it actually gets taken down by Facebook (which is rarely ever the case).

James Vardy Fake FB Profile

James Vardy Fake FB Profile

It was difficult to make out exactly what happened between this tweeter and the scammer. It sounds like the scammer didn’t want to use video during chat, but this tweeter did and it broke his “rules.” The scammers obviously would much rather communicate via audio or text because video can give up their identity (unless they are exploiting the videos of those they impersonate such as in the manner that I describe in this clip). Even so, this fake video approach only works in small doses and scammers only use it to strengthen their deception and then continue on via text and voice.

You’ll also notice that the tweeter opens up with accusations that I was showing her my “privates.” Sigh. I’m not sure if this tweeter actually saw someone’s privates on her screen, but I know that this sort of explicit interaction is commonly sought out by scammers to provoke their victims to share the same. Once the scammers have captured explicit photos of their victims, the scammers can then blackmail victims for money or in rare cases, the victims can become scammers themselves.

After reading these tweets, I quickly alerted the tweeter that she was speaking to a scammer. I also sent her this resource that I prepared to help victims understand their situation. She didn’t seem to believe me.

Screen Shot 2016-03-03 at 12.46.49 AM

Screen Shot 2016-03-03 at 12.47.16 AM

Screen Shot 2016-03-03 at 12.47.33 AM

Fun, hey? I didn’t bother replying after that. While her tweets are public, my replies only bring publicity to the situation and I assume that most people who read my tweets don’t actually know about my long-term catfishing predicament.

It’s honestly exhausting dealing with this. And, I’m not the only one who is having to do so. Check out Alan’s latest post on his efforts in trying to get Facebook to take down a scammer account that is using his photos. This overall situation is only going to get worse, and social networking services continue to look the other way.

And hey, just wait until face swap technology gets a bit better … then we’re pretty much all doomed.

Facebook’s Identity Authentication Is Broken

Update: Within 24 hours of writing this post, Facebook restored my account. I am happy for this but the problem for Facebook’s identity authentication still exists. It is my hope that engaged thinkers around network identities will continue to put forth potential solutions to these emerging and difficult problems.

You may have read my previous posts about scammers using my personal photos to construct fake identities for the purpose of entering into online romantic relationships with women and defrauding them out of money or goods. If not, here’s the original post which outlines the problem and here is the followup.

Over the better part of seven years, I have notified and reported hundreds of fake profiles, some that have been made up of my name and photos, and others comprised of my photos and alternate names. These profiles have shown up on sites such as Twitter, VK.com, Match.com, Christian Mingle, and most prominently, Facebook. At any given time, there are at least three fake Alec Couros’ on Twitter or Facebook, and likely dozens if not hundreds of others that I do not know about. It has been a frustrating game of wack-a-mole. The other discouraging piece is that many women (at least one per week on average) continue to report to me that they have been scammed, or nearly scammed, by these criminals. In many cases, even when there isn’t a loss of money, there is certainly a high incidence of heartbreak and hurt.

And, while I have successfully had Facebook take down hundreds of profiles, apparently they no longer believe that I am Alec Couros. My Facebook account has been suspended as seen by the notice shared below.

Support_Dashboard

I’ve submitted my government ID with the hope that this will be resolved soon. However, this is incredibly frustrating. My assumption was that a Facebook account that is 7+ years old with over 2000 friends and hundreds of posts would have had some weight in terms of authenticity. I assume also that my profile has been taken down by one of the very scammers that I have been reporting, likely from an account that is fairly new (less than a few months old) and connected to a limited number of friends.

But mostly, I’m really frustrated because the response from Facebook on romance scamming has been entirely absent. Through messages sent through reporting dozens of these fake profiles, I have been regularly, and perhaps naively, offering Facebook my services (for free) to better help them envision a way that they can fix their reporting and authentication system. I am more than happy to pay my way to get to Facebook HQ (or wherever I need to be) to sit down with people and help them fix this. And while, part of this is selfish (I want this 7+ year problem solved once and for all), I really do want to fix this for others.

Addendum:
As an addendum to this post, I want to share my reasons for even wanting a Facebook account. I know that there are countless reasons to quit Facebook altogether. I have thought about closing it down many times. However, I have continued to use Facebook for three main purposes:

  1. I enjoy it. Still. I connect with people there that I do not connect with in any other place. And I enjoy what they have to share. Although there is much content that can be annoying, I feel that Facebook still connects me to people I know well, and people that I want to know more about, in ways that other spaces do not easily allow.
  2. My timeline is meaningful. I regularly look back through my timeline to see what I have posted, and it gives me a sense of who I am and who I have become. Interactions that I’ve had with friends in Facebook still make me laugh and make me cry. My message history, for instance, includes conversations I’ve had with hundreds of people, including my dad. I don’t want to lose those meaningful artefacts.
  3. I’ve used it to verify who I am. Due to the fact that my profile was long-standing and well-connected, the profile seemed from the outside as being more authentic. Thus, this was the place where many of the romance scam victims felt safe to come forward and trust that I am who I say I am. In this way, Facebook helped me protect my identity. While, I’d rather have my identify authenticated through other personally-controlled spaces (like this blog), for many of these victims, my Facebook profile felt like a familiar and trustworthy space.

So, I don’t do this often, but could I ask you to share this post? Certainly, I want my profile restored, and perhaps I’ll only have to wait a few days for this to happen. But more so, I want to help Facebook recognize, remedy, and acknowledge this huge problem that they have with romance scams. Facebook’s identity authentication is broken and it needs to be fixed. And daily, people are being hurt and scammed because of this problem.

Thanks for listening,

The ‘real’ Alec Couros