Disclaimer: This section of the blog post does not constitute legal advice, are not intended to be a substitute for legal advice and should not be relied upon as such. You should seek legal advice or other professional advice in relation to any particular matters you or your organisation may have.
WATCH OUR SCAMBAITING SERIES HERE
What is “scambaiting”?
Scambaiting, also known as scam baiting, involves online vigilantism aimed at wasting scammers’ time and resources, collecting information for authorities, and publicly exposing fraudulent activities. Motivations vary, with some driven by civic duty, others by amusement, and some influenced by racism. (Note: scambaiting is legal, more info on that soon!)
Ever since we started our scambaiting series on YouTube, i’ve gotten a few questions on exactly how to scambait, where to get numbers, is it legal, and some general tips and tricks, This post will tell you all about it!
Join my discord server
kalab templeman army
Join the scambaiting channel for all things scambaiting and scam awareness!
Here’s a basic guide to scambaiting.
Requirements:
Here is a few things you need to get started
– A way to call them (BobRTC , TextNow, Google Voice) etc – don’t use real number.
– A voice changer (optional, just to troll scammers or fake your voice)
– A program that runs VMs (Virtual Machines) such as VirtualBox and VMWare
Once you have these requirements, follow these steps:
1. Login to BobRTC, TextNow, Google Voice *whatever one you used)
2. Find a toll-free Tech Support Scammer’s phone number. You can find these numbers on websites such as scammer.info or BobRTC’s phone book.
3. Depnding on the scammer you’re calling, you might need a VM,
4. Once your VM just started up, call the scammer using one of the programs ^
5. Give the scammer some information (Pop-up message etc.)
6. If they’re asking for your First Name and Last Name or something like that, you must tell your false Full Name. (Or else they will get some of your personal information)
7. Give the scammer remote access to your computer. (If they tell you to do it)
8. Listen to the scammer. This is very important. Don’t call them out at the beginning, remember, you are there to waste their time.
9. If you have a voice changer, then you can use it to fake your voice or troll. (Optional)
What is Scambaiting?
Scambaiting, also known as scam baiting, involves online vigilantism aimed at wasting scammers’ time and resources, collecting information for authorities, and publicly exposing fraudulent activities. Motivations vary, with some driven by civic duty, others by amusement, and some influenced by other factors. (Note: scambaiting is legal, more info on that soon!)
Ever since we started our scambaiting series on YouTube, I’ve gotten a few questions on exactly how to scambait, where to get numbers, whether it is legal, and some general tips and tricks. This post will tell you all about it!
Types of Scams and How They Work
Common Scams
- Tech Support Scams: Scammers pretend to be tech support agents from well-known companies, claiming your computer has a virus.
- Phishing: Scammers send emails or messages that appear to be from legitimate companies to steal personal information.
- Lottery Scams: Scammers tell you that you’ve won a lottery or prize and need to pay fees to claim it.
- Romance Scams: Scammers create fake profiles on dating sites to form relationships and eventually ask for money.
Scam Scripts
Tech support scammers, for example, often use scripts to manipulate victims. They might instruct you to open certain files on your computer, claim these are evidence of a virus, and then request remote access to “fix” the problem.
Setting Up Your Scambaiting Tools
Separate Phone Number
Why It’s Important: Using your real phone number can expose you to further scams or harassment. Protect your privacy by using a separate number.
Options:
- Google Voice: Free and easy to set up.
- TextNow: Another free option with a user-friendly interface.
- Skype: Paid option, but reliable.
Finding Scammer Numbers
Sources:
- scammer.info: A community-driven website where users share scammer numbers.
- BobRTC: Despite recent changes, you might find updated alternatives or similar platforms through community recommendations.
Types of Numbers:
- Spoofed Numbers: Scammers often use fake numbers to hide their true identity.
- Direct Numbers: Actual numbers used by scammers that can be found through community forums.
Voice Changers
Purpose: Voice changers help conceal your identity and add an element of fun by allowing you to mimic different voices.
Options:
- Voicemod: Popular for its wide range of voice effects.
- MorphVOX: Offers both free and paid versions with advanced features.
- Clownfish: Simple, free, and integrates well with various communication apps.
Creating a Persona
Why It’s Necessary: A consistent fake identity helps maintain your cover and adds credibility to your interactions.
Details to Include:
- Fake Name: A realistic-sounding name.
- Background Story: Basic details like a fake address, job, and family background.
- Fake Email Address: Use a disposable email service for this purpose.
Using Virtual Machines (VMs)
Why It’s Necessary: A VM protects your main computer from malware and other malicious activities.
Setup:
- Download VirtualBox: Visit the VirtualBox website and download the latest version.
- Install VirtualBox: Follow the installation instructions.
- Create a New VM:
- Open VirtualBox and click “New.”
- Name your VM and select the OS you want to install (e.g., Windows 10).
- Allocate memory and create a virtual hard disk.
- Install the OS: Use an ISO file to install the operating system in your VM.
- Secure Your VM: Install antivirus software and create a restore point.
Engaging with Scammers
Preparation
Fake Information: Have a list of false information ready to provide scammers, such as names, addresses, and emails.
Tools Ready: Ensure your VM, voice changer, and other tools are set up and ready before making calls.
Initial Contact
- Making the Call: Use your chosen service (Google Voice, TextNow, etc.) to call the scammer.
- Following the Script: Engage with the scammer using their script, but provide fake information.
Handling Remote Access Requests
What to Expect: Scammers often use software like AnyDesk, TeamViewer, or ScreenConnect.
Tips:
- Stay in Control: Only allow access to your VM, not your real computer.
- Observe: Watch what the scammer does to understand their methods.
Advanced Scambaiting Techniques
Advanced Tactics
Wasting Their Time: Ask questions, act confused, and keep them engaged without giving real information.
Recording and Reporting: Use software to record calls and gather evidence. Report this information to authorities or share with the scambaiting community.
Ethical and Legal Considerations
Stay Legal: Ensure your actions are within legal boundaries to avoid any legal issues.
Respectful Engagement: While trolling can be fun, avoid abusive behavior and focus on the goal of wasting their time and gathering information.
Do’s:
– Have the evidence of a VM hidden.
– Always use a VM to scambait. (important) – VM’s can be a challenge to use, only use if you know what you’re doing. If you can’t use a VM, don’t let the scammer connect to computer, instead just pretend and give them information, to waste their time etc – more updated info soon
– Always fake your data. (such as your name, age etc.)
– Always fake your credit card info. If the scammer realizes that it’s fake credit card info, you will have slight problems. (You can always use a Credit Card Generator or a fake credit card that sometimes works)
Dont’s:
- As always, do not provide your real personal info. (As the Do’s say)
- Do not use a real machine. (Because they will like syskey your Real Machine)
- Don’t use your real phone numbers to scambait
- Do not attempt to ‘scam” them, in the case of getting money from them
- Don’t act like you know everything, act venerable.
More Tips
We get a lot of questions about scam-baiting, and one of the popular questions “is scam-baiting illegal or legal?” Now, i am not a lawyer, and cannot provide legal advice, but generally speaking, scam-baiting is NOT ILLEGAL, As you yourself are doing nothing illegal, as you are just spreading awareness and wasting their time (this isn’t illegal). BUT, if it could be come illegal if you go general illegal activities such as, hacking into their systems, asking them for money, threatening them etc, those general activites, if you’re not doing that, you will be fine! (Click here to read further)
Recording/Publishing calls
Depending on local laws, you may need to get permission to record conversations, for example, we always let the “scammers” know we are recording, and tend to tell them they’ll be on youtube (with them mostly acknowledging this with cussing, etc) however for research/awareness purpose, this may not be needed, but it is good to let them know anyway to cover yourself.
Disclaimer: This section of the blog post does not constitute legal advice, are not intended to be a substitute for legal advice and should not be relied upon as such. You should seek legal advice or other professional advice in relation to any particular matters you or your organisation may have.
Leave a Reply