Turns Out №3

Why Nobody Has Ever Tried to Scam You Properly

 ·  28 min read

There is a sticker on the parking meter outside my building. Laminated, peeling at one corner, a QR code and the words SCAN TO PAY underneath in a font nobody chose.

I have obeyed it about forty times.

Obeyed is the right word. I can’t scan that sticker. Neither can you. Nobody has ever looked at a QR code and known what was in it. We point a camera at a square, the square tells the phone where to go, and the phone goes.

Leave the sticker where it is. We’re coming back for it, and when we do you’re going to like it a great deal less.

Because here is what I believed my entire adult life, sincerely, and with a small warm feeling I’m not proud of: scams are obvious, and the people who fall for them are not like me.

And I had evidence. So do you. The prince with the frozen inheritance. The customs fee from a courier that doesn’t exist, at a company whose name is spelled two different ways in the same message. Nobody who wanted your money would send that.

Which is exactly what I thought, in exactly those words, about two weeks before I typed my card number into one.

The Two Weeks Between Being Funny and Being an Idiot

First scene. I’m in a group chat, a fake bank SMS has arrived, and I do what a man of taste does: screenshot it, send it to five people, add a joke.

It was a good joke. I want that on the record, because nothing else in this section is going to go well for me.

Fourteen days later I was actually expecting a parcel. Specific parcel, specific country, four days late, and I’d already checked the tracking page twice that morning.

Then: a text. Parcel held. Customs charge outstanding. €1.99.

And here’s the thought. I can still see the screen brightness I had it on. It’s the stupidest thought I have ever had, and at the time it felt like caution:

€1.99 is too small to be a scam.

Which isn’t insane. Nobody builds a criminal enterprise around two euros. Two euros is what you lose in a sofa. If somebody were coming for me they’d come for something worth coming for, so the smallness was, I concluded, evidence of legitimacy.

Card number. Expiry. Name as it appears on the card.

What stopped me was not judgment. I spent a week afterwards trying to build a version where it was.

What stopped me was my bank app, which pinged, and which said, in the flat voice of a system that does not care about my self-image:

Authorize payment of €480.00

€1.99 was the doorway. €480 was the room. And the €1.99 wasn’t lazy pricing. It was chosen, by somebody, precisely so I would think the thought I thought.

So I went looking for who writes these things, expecting to find idiots, and found a business model instead.

One admission before we go in, because you may have met the first half of this. There’s a clever explanation for why scam emails are so badly written that’s been doing laps of the internet for a decade. Mental Floss ran it. NBC ran it. Every outlet that has ever needed a Tuesday explainer ran it, and I have four tabs of it open. If you know it, good, we’ll be quick, and it is not the interesting part. The interesting part is what it implies about you.

What’s left, so you know a trail exists: one criminal’s spreadsheet, one American statute from 1972, and a number I’d rather not have run.

Congratulations, You Have Been Hired by a Criminal

Meet Nenad. A laptop with a cracked corner, a spreadsheet with a tab called leads, and a problem any small business owner would recognize instantly.

You’ve been hired. Head of Operations. The pay is bad and the work is evil, and you’re going to be very good at it, which is the part to notice on your way through.

His list: ten million addresses. His cost of mailing all ten million: zero, near enough, because the sending happens on machines belonging to people who don’t know about it.

His cost of converting one person who takes the bait: hours. His own. Somebody has to answer, build the story, invent a lawyer, invent a delay, invent a second fee, apologize for the first fee, and stay in character for weeks.

Sending the pitch costs him nothing. Talking to you costs him hours.

Say you’re good at your new job. You write a plausible email. Clean grammar, real courier branding, correct logo, tracking number with the right number of digits. It converts better than anything you have ever built. Which is the disaster.

Emails sent                10,000,000Cost                       ~€0Reply rate (it's good!)    0.02%Replies                    2,000

Two thousand people wrote back. In any other industry you’d be promoted.

I had this backwards for thirty years myself: I thought a reply was a win. Now cost it out, at six hours of conversation per reply:

  2,000 replies× 6 hours each= 12,000 hoursNenad's working year: ~2,000 hours= 6 years of labor, per send.

Six years, to service one afternoon’s emailing. And most of those two thousand were never going to pay him, because most people who reply to an email eventually stop replying to an email.

For Nenad, every reply from someone who will eventually say no is a loss, paid in the one resource he can’t steal from a machine.

So he isn’t running an advertising business. He is not looking for the most people who might say yes. He is looking for the fewest people worth talking to.

Your First Act as Head of Operations: Make the Story Worse

You know what to do. You knew four paragraphs ago.

Make the email stupid.

Put the prince back in. Misspell the bank. Sign it from a Colonel. Set the sum at forty-one million euros, which is not a number any real transaction has produced. Make it so bad that anyone with a functioning sense of the world deletes it in under a second.

Same 10,000,000 emailsReply rate now              0.0002%Replies                     20  20 replies× 6 hours= 120 hours. Three weeks.

Nearly the same revenue, for one hundredth of the labor.

Nearly is the word you should make me prove, and it is the only soft word in the sentence, so hold me to it.

So look at who the twenty are. Not a random twenty. The twenty out of ten million who read “Colonel,” and “forty-one million euros,” and “kindly revert,” which is a real phrase, typed on purpose, by a person nobody has ever asked to stop, and thought: this could be for me.

They were in the two thousand as well, indistinguishable from the other 1,980, costing him six hours each to find. Whatever puts a person in that slice, it was never a standard they apply to spelling. So insulting the spelling doesn’t sort them out. It stops costing him anything to sort them in.

The 1,980 were never revenue. They were the bill.

The badly written scam isn’t a scam that failed to be good. It’s load-bearingly bad. The stupidity is the filter: it screens out everyone he can’t afford to talk to, free, using their own judgment. Improve the writing and you get a bankrupt scam, buried under two thousand conversations it can’t afford.

Cormac Herley at Microsoft Research wrote this up in 2012 under the best title in security research: Why Do Nigerian Scammers Say They Are From Nigeria? Because Nigeria is the filter. The word does the screening.

And that paper is also where my nearly comes due, because Herley is less comfortable than I have been. Some of the payers left too. They had to. You cannot hang a sign that repels the wrong people without it repelling some of the right ones, because it is one sign and they are all reading it, and his model says exactly that before it says anything reassuring: Nenad can buy fewer wrong conversations only by having fewer right ones. Retreat far enough into the safe corner and you are talking to sure things only, which, in Herley’s words, “leaves most of the viable targets un-attacked.”

So the twenty are not the twenty. Say eight of them would have paid, against the twenty hiding in the original two thousand:

Payers, plausible pitch          20Payers, stupid pitch              8= 40% of the revenueHours, plausible pitch       12,000Hours, stupid pitch             120= 1% of the labor  40% of the money÷  1% of the hours= 40x more for every hour worked

Eight is a guess and I want it labeled as one. Nenad knows his real number, nobody outside those buildings does, and the argument never needed mine. It needs the two columns to fall at different speeds, and that is the part Herley proves rather than guesses. The insult costs him some of the money and nearly all of the bill.

So he takes the smaller pile, because it is the one he can carry. Which is the whole trade, and it is worse than the version where he loses nothing: he is not running a clever business. He is running a thin one.

Now price the alternative. Suppose Nenad went handmade: research each target, learn their real bank, their sister’s name, write each of them a personal lie. Four minutes each, which is a fantasy, but be generous:

  10,000,000 targets× 4 minutes= 40,000,000 minutes÷ 60= 666,667 hours÷ 8,766 hours in a year= 76 YEARS of continuous typing.

No sleep, no weekends, and he still hasn’t opened a single reply.

So he doesn’t. Nobody does. And that’s the reason nobody has ever tried to scam you properly: not because you’re difficult, but because you were never worth four minutes. You’ve been protected your whole life by the price of a lie, and by nothing else, and you’ve been quietly taking the credit ever since.

Your promotion is canceled.

The Permanent Collection

You’re thinking this is a technology story. Email made sending free, free sending made spam, spam made the prince. Modern problem, modern stupidity.

The Spanish Prisoner letter was doing this in the 1890s. Same architecture, down to the daughter: a wealthy man imprisoned abroad under a false name, unable to reach his fortune, has selected you, a stranger, to advance a small sum toward his release, for an enormous share and, in several versions, his daughter’s hand.

And postage cost real money, which means the filter mattered more. A hundred and thirty years of this, and every letter was a bet with a stamp on it.

Two Hours in Your Living Room, and Then the Coffee

So far this has been about a man with a spreadsheet. Now the other side of the wall, and I have to start by taking something off you. Not a flaw. A credential.

Believing people is not a mistake you make. It is the setting you run on, and it is the correct one.

Here is the number. Give people statements, ask them to sort true from false, and they land here:

Your accuracy            54%A coin                   50%A detective, 20 years    54%

A coin flip with a limp. Bond and DePaulo stacked up every study anyone had run, about three hundred of them, and that is what fell out. It holds for police, judges and customs officers too.

Experience buys confidence. It does not buy accuracy.

Which is not a defect. I spent one week of my life running at a higher setting, the week after the €480, and I was unbearable. I asked a courier for ID. I made my own mother identify herself on the phone. Going through life like that costs more than getting fooled now and again does, and I lasted six days. So 54% isn’t a weakness. It’s a budget, and somebody set it correctly.

So the question was never why they believed it. Belief was free. The question is what was supposed to have stopped them, and the answer is nothing about the message. Something about the room.

Nobody has ever bought a two-thousand-euro vacuum cleaner from a leaflet. Not once. What happens is a man rings your bell, and he’s pleasant, and he asks for twenty minutes.

He gets two hours. Somewhere in there he shampoos a patch of your carpet. You make him a coffee, because you’re not a monster. I have watched this happen in my mother’s hallway, and she made the coffee. And at some point he shows you the filter disc, which is gray and furred and is, he explains, you. Your skin. Off your floor.

Then he names the price, and you have to say no.

Look at what “no” costs now. Two hours of a man’s labor, in your home, at your invitation. A coffee he drank. A small pile of your own body on a paper disc. And the word has to be said out loud, to his face, by you.

The price was never justified. The refusal was made expensive.

Which is Nenad’s equation with one number changed. Nenad has ten million shots and no contact cost, so he filters with absurdity.

The man in your hallway gets six doors a day. He can’t afford to filter at all, so he selects on who opens the door and then loads the no.

Both of them are buying the same thing: a yes from somebody who will actually pay. They just buy it with whatever the room is selling. Nenad’s room has ten million doors. This one has six.

One of them is a spreadsheet. The other one drank my coffee, and he is the one that frightens me.

Brussels Worked This Out in 1985 and Filed It Under Paragraph Three

In 1985, somebody in Brussels whose name I will never learn sat down to write the preamble to a directive on doorstep selling. Passive voice. Paragraph three. The flattest prose the European Communities could manufacture, and they could manufacture a lot of it. Stay with me for two paragraphs of it, because one clause in there is about your text message.

Directives explain themselves before they get to the rules, in that bored voice, and this one gives two reasons the doorstep needs a law of its own.

One: the trader starts the conversation, and the consumer is unprepared.

Two, and read this one twice, the consumer is “unable to compare the offer with alternatives”.

A bureaucrat wrote the second half of this essay as a footnote to a shopping regulation, and it has been law since before I could read.

The rule underneath it: fourteen days to walk away from anything sold to you off-premises, which is the lawyer’s way of saying “in your hallway.” Some countries stretch it to thirty when the visit was one you didn’t ask for. A yes obtained in your own living room is treated as too unreliable to be binding.

And Brussels wasn’t even first. America ran the same arithmetic in 1972, when the Federal Trade Commission wrote a rule giving you three days to cancel anything you sign for inside your own home. It has a name that sounds like an apology for the whole species: the Cooling-Off Rule.

Two continents. Thirteen years apart. Nobody coordinating. A coffee changes what a signature means.

Marko, and the Only Sum That Closes

Same idea, different room. You have seen this message: a screenshot of some trading app showing €100 turned into €5,000 in three weeks, forwarded by somebody’s cousin, with a link and a first name attached. €100 became €5,000 for Marko.

For years I filed that under greed, and I was wrong, and here is what changed my mind.

Forget what the scam is offering. Look at what the person receiving it needs.

Marko is mine, and I should say so before I start, because I am about to do something with his numbers and I would rather you watched me do it than caught me at it. I built him, and I picked what is in his account on purpose.

He’s twenty-four. He rents. He needs a car that starts every morning, because the warehouse that pays properly is forty minutes out of town and the first bus arrives forty minutes after his shift begins. Not a nice car. A boring, reliable, €6,000 car. (The €1,500 car, the one he can actually afford, was most of volume 2, and it is a large part of why he has no savings.)

He has €120 in the account. That’s the end of a good month.

So how much does his money have to grow?

  €6,000 needed÷   €120 available=     50x his money= a 4,900% return

Now read the message in his group chat again. It promises 5,000%.

That’s the part that made me sit down. The number isn’t absurd to him. The pitch is quoting his life back to him, to within a hundred points, on a target he never picked.

And now notice the entry fee. The message asks him to start with €100. He has €120. Hold on to that, because it comes back.

Meanwhile, the honest option. A good boring savings account at 6% a year turns his €120 into €127.20.

Everything legitimate, everything regulated, everything your uncle would approve of, has €7.20 for him this year.

Seven euros twenty. That is not a car. That is most of a sandwich, and he has to wait a year for the sandwich.

He is not miscalculating. He isn’t even being greedy. He has one thing he needs, and the only figure on the entire page that reaches it is the fraudulent one.

So go back to the wall with the hole in it, because I had it wrong. I’d been drawing the hole as part of the wall, a fixed size, cut once by Nenad. It isn’t. Here’s what I ended up scribbling on a napkin, which is mine, and which Brussels apparently beat me to by forty years:

  how good the offer looks÷ how good your options are= how hard it pulls

Which means the pull isn’t in the message. You bring it with you.

And it works from below as well as above. My €1.99 did nothing to my options: I had a bank account and a job and a parcel that was actually coming. What it did was shrink the price of saying yes to almost nothing. That raises the top of the fraction instead of dropping the bottom. Same pull, different end of the same sum.

Marko’s €100 entry fee and my €1.99 are one number doing one job, and somebody sat down and chose both of them. I would find that more impressive if it had not worked on me.

(And now the rigging pays off, which is why I showed it to you first. Give him €200 instead of €120 and he needs 2,900%, which is also a number nothing legitimate on Earth will offer him. Give him €400 and it’s 1,400%, and still nothing. The near-match was mine. What isn’t mine is that every number which gets him a working car is a number only a liar will say out loud.)

(And notice the pitch never says 5,000%. It says Marko. One guy, named, singular, which is exactly the trick a football academy plays with the one boy who made it. If you’ve read volume 1 you already know what to do with Marko.)

Being broke increases it. So does being lonely, being new to the language, being on a deadline, being eighty-one, and having a man in your hallway for two hours. So does waiting on a parcel that is genuinely four days late.

Same wall. Same story. Different pull, depending on who walks up to it and what kind of week they’re having.

And it scales past one man with a bus problem. In 1992 and 1993, Dafiment Bank and Jugoskandik offered Serbs monthly interest that could not survive being written down, and most of a country queued for it anyway.

Not a nation of fools. A nation whose alternatives had all been cancelled in the same year: sanctions, hyperinflation, a currency losing value faster than you could physically spend it.

Divide by options worth nothing and the pull goes to infinity. A queue around the block is what that division looks like from the street.

It’s also why “just call your bank” is not advice where I’m from. Where I’m from, the bank was the scam.

And that’s where I stopped feeling clever about my €1.99. I hadn’t spent thirty years passing a test. I’d spent thirty years walking past a pinhole in good weather.

The Room Where Nobody Says Anything

Here’s what happened the morning after my €480 near-miss.

Nothing. I told nobody.

Not that day, not that week. I’d spent fourteen days being the man who screenshots scams into group chats with a joke attached, and I had a bank notification saying I was also the other kind of man, and those two facts could not be in the same room. So I put one away.

Think about that at scale.

The only scam stories that circulate freely are the ones nobody was ashamed of: the obvious ones, the funny ones, the prince, the one you spotted. Those get screenshotted. The ones where somebody competent and unhurried lost four thousand euros to a message that looked exactly like their bank do not, because the person holding that story is busy deciding never to say it out loud.

So the visible sample is wrong. Not slightly. Systematically, in one direction, by construction.

And a sample like that teaches one lesson: only fools fall for this. I know, because I learned it, and I can tell you exactly what it bought me. Fourteen days of not checking anything. I did not forward one warning. I did not ask one person whether their parcel text was real. I sat in a group chat being the funniest man in it.

Victims pay twice. Once in money, and once in silence, and the second payment funds the next victim.

The machine doesn’t merely survive being noticed. It’s fed by the specific way we notice it, and every laugh at a badly spelled text, mine included, is a small deposit.

And when people do say it, they say it small. Not “I was scammed.” Something administrative and survivable: I had a problem with a payment. Watch for that sentence. It’s what shame sounds like once it’s been sanded down enough to be spoken.

I did one worse. Fourteen days later I went back into that group chat and deleted my own joke. Not the scam text. My joke, the good one, the one I wanted on the record at the start of all this. Scrolled up, found it, removed it, put the phone face down like a man tidying a crime scene nobody was investigating.

My mother reads every text message out loud. Has done for years. Then she looks up and asks: is this one real?

I used to find it tiring. I’ve started to understand it’s the most effective anti-fraud measure in my family, and that it has nothing to do with judgment. She isn’t asking me to assess the message. She’s refusing to be alone with it.

The Receipt: I Rigged This a Little

Two things I owe you before anyone else charges me for them.

The first is Nenad. I have had you playing him as a man with a cracked laptop and a staffing problem, and that was a useful lie.

A large share of the people actually typing these messages aren’t entrepreneurs. They answered a job advert, flew somewhere, had their passport taken, and now work scam floors in compounds in Myanmar and Cambodia under threat of violence, in numbers the UN puts in the hundreds of thousands. The spreadsheet is real. It is also, often, somebody else’s spreadsheet, and Nenad is upstairs, counting.

The second is a weak spot in the argument, and a hostile reader would find it in about ninety seconds.

Everything above is about a scam where a human being has to sit and talk to you. That’s where the labor cost lives, and the labor cost is the entire reason the filter exists. Advance-fee fraud. The prince. The Colonel. The imprisoned Spaniard.

Now look at the text that nearly got me. It wasn’t badly written. It was fine. Courier logo, plausible amount, correct urgency, a payment page that looked like a payment page. Nobody had to talk to me at all. The whole thing was a form, and a form doesn’t get tired and doesn’t need three weeks off.

So this essay quietly generalized from one family of scams to all of them, and took its evidence from the family where somebody has to sit there and do the talking.

I could bury that. I’m telling you instead.

And Then Lying Got Cheap

Because it isn’t a hole in the argument. It’s the argument’s second half.

The prince stayed a prince for a hundred and thirty years because plausibility was expensive. The moment plausibility gets cheap, the filter isn’t a saving, it’s a waste, and the thing you’ve spent your life being immune to is the thing that stops being made.

The typo was never the tell. The typo was the price of stamps.

Fine. Argue With Me.

Objections, in ascending order of how much they hurt me.

“You’re overthinking it. They write badly because they write badly.”

Except they optimize everything else with the discipline of a logistics company.

Payment rails, hosting that moves before it’s seized, subject lines, the hour of sending. These people A/B test. Somewhere there is a man who has run a controlled experiment on the best hour to send a fake customs notice, and who has never once spelled customs correctly. The one thing they never fix, across four communication technologies, is the story. A choice being repeated is not incompetence surviving.

“Fine, but the hit rate is microscopic, so who cares?”

Two answers, and the second is about you.

The first: the totals run to roughly a trillion dollars a year globally by the best survey-based attempts. A number that big, assembled from self-report, deserves salt. Take a zero off. Still a country’s GDP.

The second: the cost isn’t mostly in the hits. It’s the tax the rest of us pay in twenty-second installments, forever. You don’t answer unknown numbers. You read your bank’s real messages with suspicion. Every stranger who contacts you arrives with a burden of proof attached, and you’ve stopped noticing you’re carrying it.

Nenad’s twenty replies are the revenue. The other 9,999,980 of us are the externality.

“It only works on people who wanted free money. That’s not tragedy, that’s a purchase.”

This gets real credit, because for the prince it’s true. Advance-fee framing does select for people reaching for something they didn’t earn, and if the whole industry were princes this essay would be a shrug with sources.

But greed was just the cheapest emotion to buy in bulk. The family moved. To fear, which arrives as a tax office and a court date. To love, which arrives over eight months and asks for nothing for seven. To a grandchild in a cell at eleven at night. None of those select for greed. They select for having a grandchild, which is a filter my own grandmother would have failed on the first ring, and she once refused to give her name to a census taker.

And now the one I couldn’t get around for two days.

You: Hold on. You’ve just proved I’m safe.

Me: Go on.

You: Your whole argument is that the pitch is engineered to repel me specifically. I’m the false positive, the expensive reply Nenad can’t afford. By your own math the machine is actively avoiding me. You’ve written three thousand words to tell me I’m fine.

Me: For the prince, yes. Genuinely. You’re fine, and you can keep the crown.

You: Then we’re done. You’ve spent an essay proving I’m the one person the machine is built to miss, and now you want to take it back on a technicality.

Me: Not a technicality. A count. How many times, over a life?

You: How many times what?

Me: Does something reach you that needs a judgment. Not spam you never see. Something that gets far enough that a small part of you has to decide. A text, a call, a card reader, a link, a stranger, a form.

You: A few a week?

Me: Let’s say one. Which is a lie in your favor.

  1 a week × 52 weeks × 60 years= roughly 3,000 judgmentsSay you get each one right999 times out of 1,000:= 0.999 per judgmentOdds of getting all 3,000 right:  0.999 ^ 3,000= 0.0497= 4.97%Chance you never misjudge at all:   5%Chance you misjudge at least once:  95%

Ninety-five percent. Now stop me, because I was about to sell you something.

Misjudging once is not the same as losing the money. I misjudged. I typed the card number in, all three fields, willingly. Nothing happened to me, because my bank app asked a second question, and a system I had never thanked gave me a free go.

And notice what I just did to you. I handed you 99.9%. The measured number for spotting a deliberate lie is 54%, and I put that in front of you eight sections ago and then quietly gave you an accuracy no study has ever found in anybody. It still came out at ninety-five percent.

So the honest number is smaller than ninety-five percent, and I can’t tell you what it is, and neither can anybody else. It depends on how many of your three thousand moments have something standing behind them. Which turns out to be the real question, and notice that it isn’t a question about you.

What survives the correction is Nenad’s side of it. Once is his entire specification. He doesn’t need a season. He needs a Tuesday, and he needs it to be a Tuesday when nothing else in your life happened to be watching.

Argue the input if you like, it only gets worse in a funny direction. Say you’re ten times better than that. Right 9,999 times out of 10,000, which is a claim I wouldn’t make about myself regarding anything, including my own name:

  0.9999 ^ 3,000= 0.7408= 74%Chance you still misjudge once:  26%

Still one in four. At an accuracy nobody on Earth has, against a threat with three thousand attempts that needs one, while you have to be right every time, or have something standing behind you on the occasion when you aren’t.

That’s the unfairness, and nobody designed it. It is just what arithmetic does when one side needs a perfect record and the other needs a Tuesday.

The Test You Didn’t Sit

You are not hard to fool. You are expensive to fool.

Hard and expensive are different properties. Only one of them has ever been tested on you.

For a hundred and thirty years, the only affordable way to reach a million people was to say the same thing to all of them. And the only stories cheap enough to say a million times were the thin ones. The ones that insult you on arrival.

You did not pass that test. There was no test. There was a price. Nobody was ever willing to pay it for you specifically. You have spent a lifetime reading that refusal as a compliment.

That was the price. The conditions are the part that should bother you.

Every single time you spotted a fake, you were unhurried. And not broke. And not frightened. And reading the fake in a group chat, not at eleven at night, in the middle of your own life, waiting on a parcel that was genuinely late.

You were graded on the easiest version of the paper. In perfect conditions. With the answers face-up on the desk.

You read that result as a fact about yourself. It was a fact about the conditions.

The sharpness was weather.

Weather changes.

Three Questions, and Two Things That Aren’t Questions

Not a summary. Equipment. These work on things this essay never mentions, which is the only reason they’re worth carrying.

But two of them aren’t questions, and they go first, because the formula says so. The pull is a property of your week. So the thing that stops it has to be standing outside your week.

A bank app that asked me something after I’d already decided. A woman who reads her texts out loud to somebody in the room. One thing standing behind you, one person you won’t read the thing alone. Build either of those and you have a defense that works at eleven at night, which is more than any sentence I can give you will do.

The questions are for the calm version of you, the one who still has a Thursday.

  1. Did I go to them, or did they come to me?
  2. What would my week have to look like for this to work on me?
  3. What’s already been spent to make my “no” awkward?

Number one needs no cleverness, which is why it’s first: cleverness is exactly what you won’t have at eleven at night. Inbound is a flag, not a verdict. Point it at the recruiter who found you, the clinic that rang about your results, the man at your door about your roof, the friendliest person on the dating app.

Number two is the formula turned around, and it is the only one here I had to build rather than learn. Point it at an offer that looks stupid to you and ask who it doesn’t look stupid to: the colleague three months between jobs, the friend whose rent went up in March, your father on the third bad day in a row. The pitch that can’t reach you is reaching somebody, and the difference between you isn’t cleverness. It’s the denominator. I ran this on the trading message I had laughed at and named three people it was written for before I finished my coffee, which ruined the coffee.

Number three is somebody’s four hours, a free consultation, a coffee a friend bought before mentioning the business opportunity, a recruiter who flew you out. None of it is proof of fraud. All of it is a thumb on your scale, and knowing the thumb is there does most of the job. I now do these sums out loud in car showrooms, which has made me six hundred euros richer and completely unbearable to shop with.

Back to the Parking Meter

Which brings us back to the sticker.

Here’s what I know about that QR code: nothing. Here’s what I can know, standing in the rain with eleven minutes before the warden comes: nothing.

A QR code is a lie you cannot proofread.

Every defense in this essay lives in reading.

The two spaces before the full stop. The Colonel. The company name spelled two ways. Every tell I own is a typographical tell, and every one of them needs the lie written down in front of me, where my eyes can reach it. Here there is nothing to read. A printed instruction to obey an address you’re structurally unable to see, stuck to street furniture nobody owns, in weather, under time pressure, next to a machine you already resent. If Nenad designed it he’d be too pleased with himself to shut up at parties.

And someone has to spend, what, forty cents on a laminated sticker.

Forty cents of laminate, against a whole life spent getting expensive to fool. That was the exchange rate the entire time, and I liked it better before I did the arithmetic.

Go and look at yours. It’s probably fine. So is the next one. Probably is the strongest word I have left, and I used to have better ones.

What We Still Don’t Understand

  • Does the filter survive free plausibility, or does it just die? If writing a personal, researched, perfectly spelled lie stops costing four minutes and starts costing a fraction of a cent, Nenad’s whole reason for sounding stupid evaporates.

    The optimistic read is that his costs collapse and the tells go with them. The pessimistic read is the same sentence.

  • Every number here is a floor. The mechanism is partly built out of people not reporting, so the losses are undercounts by construction and nobody knows by how much. Anyone giving you a confident global figure is showing you the visible part of a thing designed to be invisible.

  • If defense stops being a skill, what is it? A rule you follow when you don’t feel like it? A bank that refuses on your behalf? A statute? We built the 1972 answer to a man in a living room. We don’t have the 2026 answer to a sticker, and I can’t find anyone who convincingly claims to.

  • And the one that keeps me up: the machine’s best trick isn’t the story. It’s that everyone it misses walks away more confident, and confidence is its raw material. I don’t know what you do about a system that gets stronger every time it fails.

Volume 2 ended with a fee charged in the exact currency you’d need to stop paying it. This one ends with a defense that gets weaker every time it works. I’m starting to think those are the same shape. I would rather they weren’t.

Sources

  1. Scam pitches are deliberately implausible to filter out all but the most credulous respondentsCormac Herley, Microsoft Research: Why Do Nigerian Scammers Say They Are From Nigeria?
  2. Humans detect deception at about 54% accuracy, barely above chance, and experts are no betterBond & DePaulo, Accuracy of Deception Judgments (2006 meta-analysis)
  3. Off-premises sales carry a 14-day right of withdrawal in the EUDirective 2011/83/EU (Consumer Rights Directive), Article 9
  4. Member States may extend that withdrawal period to 30 days for contracts concluded after an unsolicited visit to a consumer's home. It is an option each country takes or declines, not a uniform EU ruleDirective (EU) 2019/2161 (the Omnibus Directive), amending Article 16 of Directive 2011/83/EU
  5. US buyers get three days to cancel a sale made in their home, under a Federal Trade Commission rule written in 1972FTC Cooling-Off Rule, 16 CFR Part 429
  6. The 1985 doorstep-selling directive states its own reason: the trader initiates, the consumer is unprepared and unable to compare the offer with alternativesCouncil Directive 85/577/EEC, on contracts negotiated away from business premises
  7. The implausible-story scam predates email: Spanish Prisoner letters circulated in the 1890sWikipedia: Spanish Prisoner
  8. Dafiment Bank and Jugoskandik took the savings of much of Serbia in 1992-93 on arithmetically impossible interestWikipedia: Dafiment Bank
  9. Hundreds of thousands of people are held in scam compounds in Myanmar and Cambodia and forced to run the operations under threat of violenceUN OHCHR, Online Scam Operations and Trafficking into Forced Criminality in Southeast Asia (2023)
  10. Global scam losses estimated at roughly $1 trillion a year (survey-based, treat as an order of magnitude)Global Anti-Scam Alliance, Global State of Scams Report