The Cyber Sushi

(serving up the cold facts, with some phish bytes)

Welcome back! Here's what we are covering in this issue:

The Expert Testimony that saved an Australian woman from death row

Sydney grandmother Maria Exposto faced a death sentence in Malaysia after unknowingly carrying 1kg of crystal methamphetamine through Kuala Lumpur airport. Arrested for drug trafficking, Maria spent five years in a Malaysian prison, with 18 months on death row, before her life was saved in November 2019. The turning point? The expert testimony of global romance scam authority, Professor Monica Whitty.

Prof Whitty, the Head of Department of Software Systems and Cybersecurity and Professor in Human Factors in Cyber Security, is a cyber expert on the IDCARE Foundation. She joined us in our studio for our “In the Chair” podcast.

And she revealed what she said that saved Maria’s life.

In her testimony, Prof Whitty explained how scammers use emotional manipulation, building real relationships to exploit victims. She highlighted that Maria’s actions weren’t due to naivety or stupidity, but a result of the emotional deceit built by the criminals.

Prof Whitty’s insights helped the judge understand the psychological tactics behind the scam and ultimately led to Maria’s acquittal.

You can listen to the full interview with Prof Whitty on IDCARE’s “In the Chair” podcast.

Revealed: The Personality Profile of a Romance Scam victim

Let's face it – finding love today isn’t what it used to be. The chances of meeting the perfect match through work, sporting clubs, or a night out have become much slimmer. That's why more and more Australians are turning to dating apps. In fact, a recent study revealed that 30% of Australians have used a dating app to find love.

But there’s a dark side to this shift. Criminals are also taking advantage of these platforms to commit fraud and harm. IDCARE’s latest Monthly Insights Report has examined how organised criminal groups exploit dating apps and the sophisticated tactics they use to target those looking for love.

Insights from IDCARE’s In the Chair podcast with global romance scam expert and Director of the Monash University Cyber Security Hub, Professor Monica Whitty, provide valuable information on this growing threat.

Your Personality and Romance Scam Vulnerability

Professor Whitty’s research suggests that there is a specific personality type more likely to fall victim to romance scams. People with impulsive, sensation-seeking traits and addictive personalities are especially vulnerable.

According to Professor Whitty, there’s one factor that stands out as the strongest predictor of romance scam vulnerability - and it is a romantic belief. "If you believe there is a perfect person out there, you're more vulnerable," she explains. Scammers often exploit this belief by pretending to be the ideal partner – and they frequently impersonate people in positions of authority, such as doctors, engineers, military personnel, and pilots. They bombard their target with flattering messages, so when they eventually make a request that raises suspicions, the victim is too emotionally invested to question it.

Protecting Yourself: Slowing Down the Process

Professor Whitty’s extensive research, conducted in both the UK and Australia, highlights how slowing down the process can help protect people from scammers. Her advice? Arrange to meet face-to-face within a few weeks – and if they refuse, "just drop them."

What Can You Do to Protect Loved Ones?

One of the most alarming aspects of romance scams is that around 30% of victims are revictimised. If someone you care about is looking for love online, it’s crucial to help them navigate the process safely. "How we approach romantic relationships has to change," Professor Whitty said,. "Get family and friends involved in choosing your person. Have your loved ones help with the screening process." By helping a friend or family member create a dating profile and screen potential matches, you can take the emotional element out of the equation and spot any red flags that might otherwise go unnoticed. This approach also prevents the "grooming" process, where scammers manipulate their victims over time.

Contact IDCARE's sales team at [email protected] for detailed insights and the Behind the Swipe: The Hidden Reality of Dating Apps report

Early Bird Registration Now Open!

The wait is over! Registration for CyPsy28 is now open – don’t miss this opportunity to be part of the premier international CyberPsychology Conference, which is being hosted by IDCARE and held in Sydney for the very first time! 🌍✨

This is your opportunity to:
✅ Present your research to global experts
✅ Network with top professionals in CyberPsychology & CyberSecurity
✅ Contribute to cutting-edge conversations shaping the future of health & technology

📢 Early Bird Registration is available! Lock in your spot at the best rate before prices increase.

Don’t miss this chance to connect with researchers, cybersecurity analysts, digital health pioneers, and policymakers at the must-attend event of the year.

🔗 Register now and secure your place: https://conta.cc/4bfwxLF

Behind the mask: The Guide to New and Trending Scams

The “No Interest Loan” Scam Impersonating Our Much-Loved Charities

How low can criminals go? Taking advantage of low-income earners searching for No Interest Loans by impersonating our reputable charities like Good Shepherd and Salvos is a new low. IDCARE analysts have detected a spike in these scams in January, with more than one report each day. In most cases, the client saw an advertisement for the No Interest Loan that appeared to be from a charity, advertised on Facebook. What’s interesting about these cases is that criminals have used it to access their victims’ myGov accounts – and that’s where the damage is being done.

Our Tips:

If you are looking for a No Interest Loan, visit the charity’s website directly and don’t go there through adverts on social platforms or links in emails and text messages. It is also important to protect your myGov account with a passkey, instead of a password. Here’s a handy explainer on passkeys:

The Lowercase ‘l’ and the Fake Cab Website: The Difference One Little Letter Can Make!

One of our Melbourne clients let us know about a fake website impersonating 13 Cabs. The website domain looked identical to the official website except for a small but crucial difference. The "1" in “13 Cabs” was actually the lowercase letter “L.” The fake website was designed to steal a person’s name, address, email, and financial details. The fake website was found when clients were Google searching for cabs, and it appeared near the top of the list as a sponsored option.

Our Tips:

Remember that criminals can pay to have their fake websites appear at the top of a Google search too. Always check a website closely for errors.

The Problem with 1800 Numbers: Microsoft Pop-ups Continue to Have a Devastating Financial Toll

Since July last year, IDCARE clients have reported losses of more than $5.2 million to Microsoft pop-up scams, and this February has been the second-highest month for reports. In most cases, the client will be looking at an article when their computer appears to freeze, and a pop-up with a 1800 number for Microsoft appears on the screen. IDCARE consistently reports these 1800 numbers to the telecommunications authorities, but the criminals create new ones.

Our Tips:

If you ever receive a pop-up while browsing your computer with a number for Microsoft, even if it is a 1800 number, it is a scam.

Have a Scam, Identity, or Cyber-Related Question? Ask Dr. David Lacey!

Having dealt with countless cases of scams, identity theft, and cybercrime, Dr. David Lacey is one of Australia’s most respected experts in the field. He is highly sought after by both government and industry for his unique insights into the online criminal environment. In this edition of The Cyber Sushi, Dr. Lacey is inviting you to submit your questions – and we (the Cyber Sushi team) will answer them. Send your questions to [email protected].

Our question today comes from Arri

Hi Dr. Lacey,

A friend of mine was recently scammed in a way that I had never even considered.

He thought he was doing all the right things by actually holding the item for sale and talking to the seller face to face. It was an iPhone, still in the original packaging, never been opened. It was selling for $300 less than the retail price and the seller gave good reasons for selling which satisfied my friend.

After having checked with Apple the model name and number, plus serial number my friend was assured it was genuine and bought it.

However, after having tried to customise and download apps and finding nothing was working properly my friend approached an officer in the fraud squad and was subsequently told it was a ‘clone’.
I have not heard of this before. How does it work?

Answer:

Hi Arri,

It’s unfortunate that your friend experienced this scam, and it’s a growing issue with high-value tech items like iPhones.

Clone phones are counterfeit devices designed to look almost identical to genuine models. Scammers often package them in convincing boxes, complete with fake serial numbers that can sometimes pass initial verification checks. However, these phones are not authentic and are a complete waste of money.

Given it passed the verification test your friend put it through, you may be wondering "well, how can an ordinary person protect themselves". The advice comes back to the basics - purchase high value items like iPhones from reputable sellers or official retailers. They may be more expensive initially, but they do work better in the long run. If you are looking to purchase from an online marketplace, test the phone before buying— try turning the phone on and checking settings like iOS version and storage.

You can also use Apple’s Check Coverage website (checkcoverage.apple.com) to verify warranty status (clones won’t have valid coverage).

Here's hoping your friend gets a working phone soon.

Best regards,
The Cyber Sushi team