Перейти к содержимому

Сценарии

Family scams

"Dad, I had an accident and I need money now." Ask your daughter, instead of trusting a voice that sounds like her.

The problem

The pressure is the attack

These scams work through urgency, affection and shame. The caller sounds right, insists there is no time, and asks the person not to check with anyone. By design, the victim is given no moment in which to verify — and told that verifying would be a betrayal.

What changes

A way to check that takes seconds and needs no confrontation

Instead of arguing with the caller, you send the request to the person it claims to be from. Their own phone shows what is being asked. If it was really them, they approve and you have lost thirty seconds. If it was not, you have lost nothing at all.

How this works

Checking an urgent request

  1. You receive the request A call, a message, a voice note asking for money or for help urgently.
  2. You open REAL AUTH Choose the family member the request claims to be from and enter what is being asked, including the amount.
  3. Their real device is asked The request goes to the account they registered, on the device they hold — not to whoever contacted you.
  4. They approve or reject They see the exact request. Rejecting is one tap, and tells you immediately that someone is using their name.
  5. You act on the result Large, plain wording: verified, rejected, not verified. No jargon, no ambiguity about what to do next.

Possible outcomes

Four answers, and one of them is silence

A verification request has more than two endings. Treating anything other than an explicit approval as approval is how verification systems fail people.

Verified

The registered person approved this exact request on their trusted device. You can act on it.

Rejected

The registered person saw this request and refused it. Treat it as fraudulent and report it.

Not verified

Nothing was proven, either way. Do not act on the request until you confirm it independently.

Expired

The request was not answered in time and is no longer valid. Start again if it was genuine.

No response

Nobody answered. This is not approval. Silence is the outcome an attacker hopes you will read as consent.

No response and Not verified are never shown as approval, and they never turn into approval by waiting.

Honest limits

What this does not fix

This only works if the family member has a REAL AUTH account and their device is reachable. If they are genuinely in trouble with no phone, you will get no response — and no response is not a rejection, it simply means you have learned nothing and should verify another way. It is a tool for checking, not a substitute for knowing how to reach the people you care about.

Try it against your own application

A free sandbox, real flows, and no card required.

Начать бесплатно Для разработчиков