How I Turned the Tables on a Cyber Scammer: A Step-by-Step Guide to Outsmarting Fraudsters

In the digital world, scammers are becoming more sophisticated with their tactics. They lure unsuspecting individuals with promises of easy money, fake job offers, or even threats designed to intimidate. But what happens when someone who understands the game plays along, turning the tables on the fraudsters? Well, that’s exactly what happened to me when I was recently targeted by a cyber scammer pretending to be an HR professional. Here's a detailed breakdown of the steps I took to expose this scam and how you can protect yourself in similar situations.

____________________________________________

Step 1: The Bait – Playing Along with the Scammer🎯

It all started when I received an unsolicited message from an unknown number on WhatsApp. The scammer introduced herself as an HR representative offering me a job. The offer was clear: complete a few tasks, and I would receive money in return. The catch? It was a scam!

Instead of ignoring the message, I decided to engage and pretend that I was an unsuspecting victim. I wanted to gather information and see how far the scammer would go. I played along, asking innocent-sounding questions and allowing the scammer to believe that I was genuinely interested.

____________________________________________

Step 2: OSINT (Open Source Intelligence) – Gathering Information 🔍

Once I had some communication going, I decided to use a little OSINT (Open Source Intelligence) to dig deeper into the scammer’s background. Here's what I did:

- Email and Phone Number Tracking: Using the scammer’s phone number, I uncovered her email address. This was key because I could now search for it in data breach databases.

  

- Checking Breach Databases: I quickly ran the email through Have I Been Pwned, a popular website that checks if an email has been involved in any data breaches. The email was part of several major data leaks from a few years ago, which raised red flags.

- Digging into the Dark Web: I took my investigation a step further by checking dark web breach dumps. I found an old password of the scammer’s, which gave me further confirmation that the person behind this was indeed a hacker.

____________________________________________

Step 3: Phishing the Phisher – Turning Their Own Tactics Against Them🕵️‍♂️

After my research, the scammer sent me a phishing link, hoping I would click on it and provide personal information. This was the perfect opportunity for me to flip the script.

Instead of falling for the scam, I decided to use a technique called *"IP grabbing"*. I sent them a custom phishing link (carefully disguised as the one they had sent me) that would collect data about the scammer once they clicked it. Here's what happened:

- Tricking the Scammer: I made the phishing link look identical to the one they had sent me, asking the scammer to click on it and check if it worked.

  

- Collecting Information: When the scammer clicked on the bait link, I was able to collect:

    - *IP Address

    - *Location Information  

    - *Front-Camera Snapshot (surprisingly, the scammer allowed access to their camera)  

    - *MAC Address and other technical details

This allowed me to uncover more about the scammer's true identity. What I discovered was shocking: the "female HR" they had portrayed was actually a male hacker using a fake identity to lure in more victims.

____________________________________________

Step 4: Exposing the Fraud and Educating Others💡

With all the information I had gathered, I was able to see just how easy it is for scammers to deceive people. This is where the real lesson comes in. By understanding their tactics, we can protect ourselves and others from falling victim to similar scams. Here’s how you can stay safe:

- Don’t Trust Unsolicited Messages: If someone messages you out of the blue offering you a job or money, be skeptical. Always verify the source before taking any action.

  

- Educate Yourself on Phishing and Scam Tactics: Learn to recognize phishing links. Pay attention to URLs that don’t look right, and don’t click on links from unknown sources.

  

- Use OSINT Tools: You can use tools like Have I Been Pwned or search social media platforms to verify the identity of the person you’re dealing with.

  

- Protect Your Devices: Always have a reliable security solution on your devices to help you detect suspicious activity.

____________________________________________

Conclusion: Be Smart, Be Safe!!🛡️

This experiment turned out to be both fun and enlightening. It was an opportunity to outsmart a cybercriminal and demonstrate how important it is to stay vigilant online. However, it also reinforced a crucial lesson: scammers are constantly evolving, and it’s up to us to keep our digital worlds safe.

The next time you receive a suspicious message or email, take a step back, think critically, and remember that scammers will do anything to trick you. Protect yourself, stay informed, and, if possible, educate others to help them avoid falling into these traps.

____________________________________________

Stay Safe Online!🌍🤍

About the Author:

Hello, I'm Prince Jain, a passionate web developer, public speaker, event manager, and cybersecurity enthusiast. With a love for technology and digital safety, I aim to help others stay informed and protected in this digital age. I share insights on ethical hacking, web development, and cybersecurity while also managing and speaking at tech and management events...

Feel free to explore my work on my website: Prince Jain!

Gmail: princejain.public@gmail.com