Phishing, Porting, and the Romance Hook
Three Ways Trust Gets Harvested
Scams do not only shout. Some whisper through the inbox. Some steal the number that receives your codes. Some borrow the language of love. This page names three of those quieter thefts—and how they connect to the louder phone costumes already inventoried.
1. Phishing / email scams
Scammers use email phishing to hook people who are busy, hopeful, or afraid. The handwritten rule is blunt:
Treat all unsolicited email and spam as suspicious. Do not open or reply.
Further discipline from the notes:
- To avoid loading malware, never click a link—even from a name you trust—until you have verified authenticity out-of-band (official app, bookmark, known phone number).
- Be especially wary when an account may have been hacked: a familiar sender is not a safe sender if the account behind the name is compromised.
- Scammers impersonate government agencies in email as readily as they do on robocalls.
Phishing succeeds when familiarity substitutes for verification. The due-process article’s lesson returns: slow enough to check is the private analogue of fair process. A red banner and a countdown timer are not process; they are theater.
Rule of thumb: Hover is not enough. Navigate yourself. If the IRS, a bank, or a hospital “needs” you, use the channel printed on a statement you already own.
2. Porting (stealing the number)
Porting abuse, as the notes describe it:
- The scammer obtains your name and phone number.
- They gather other identifiable information useful for identity theft.
- Pretending to be you, they contact your mobile provider, report the phone lost or stolen, and ask for the number to be ported to a device they control.
Once the number moves, the attacker often owns the SMS one-time codes that “prove” you are you. Banks, email recovery, and social resets collapse into a single hijacked channel. This is the operational twin of SIM swapping in the cellular-fraud section of article 20—same prize, slightly different carrier script.
Carrier PINs, port-out freezes, and “call me back on a known number before any port” habits are not optional extras. They are the locks on the door the inbox depends on.
Rule of thumb: Unexpected “your phone will be deactivated” messages + sudden loss of service = treat as a port/SIM emergency. Contact the carrier from a different line using a verified number.
(Principal annotation on the source page: “Test passed (A+)”—kept here as a personal milestone marker beside this topic.)
3. Romance scams
Romance scammers contact targets through dating apps or social media, then work to establish a romantic relationship in order to reach money or personal information. They use fake identities and backstories to manufacture trust.
The product being sold is not a product. It is attachment. Urgency appears as emergency plane tickets, customs fees, medical crises, crypto “investments,” or secrecy from friends—“don’t tell anyone; they won’t understand us.” Isolation is the method; the wallet is the harvest.
This sits beside social bullying and reputation attacks in the textbook-bullying article: both conscript intimacy (or the hope of it) as leverage. One uses fear of shame; the other uses hope of love. The extraction rhyme is the same.
Rule of thumb: Anyone who loves you and needs money only through secrecy and irreversible payment rails is auditioning a script. Talk to a trusted human offline before you send anything.
Shared grammar
| Vector | Trust costume | What gets stolen |
|---|---|---|
| Phishing email | Official seals, familiar names, hacked friends | Credentials, malware foothold, panic clicks |
| Number porting | “I’m you” at the carrier desk | The phone number + OTP kingdom |
| Romance scam | Intimacy and destiny | Money, data, silence from allies |
Across 18–21, the pattern holds: control the channel, compress time or deepen attachment, extract. Defense is correspondingly boring and powerful—verify out-of-band, harden the number, refuse irreversible payment under emotional pressure, and treat unsolicited links as hostile until proven otherwise.
Closing
The inbox, the SIM, and the dating profile are three doors into the same house. Phishing picks the lock with seals. Porting steals the key that opens every other lock. Romance rebuilds the house as a love story and asks you to hand over the deed.
Keep the taxonomy where you can see it. Teach it without shame. The goal is not to stop trusting people. The goal is to stop trusting unverified channels when money, identity, or silence is the ask.
Draft for principal / counsel review. Source: handwritten page on phishing, porting, romance scams. Not legal advice.