What changed.
WHAT USED TO IDENTIFY FRAUD
Poor spelling and grammar Obviously wrong formatting Implausible stories
WHAT CHANGED
Those signals are gone.
Messages are now well written, correctly formatted, and plausible.
WHAT ELSE IS POSSIBLE
Convincing impersonation by voice Fake documents and identification Messages matching a real person's writing style Fake profiles with history
WHAT THIS MEANS
The old training is obsolete.
Telling staff to look for spelling errors no longer protects them.
WHAT STILL WORKS
Verification through a separate channel Scepticism about urgency Established procedures that do not bend
WHAT TO TEACH INSTEAD
Not how to spot a fake. How to verify.
Because you frequently cannot spot it.
THE PRINCIPLE
Do not judge authenticity by how something looks.
Confirm it by contacting the other party through details you already had.