AI Shield Weekly started here because this is the fraud your family will actually meet: a voice that is close enough, a face on a video call, a PDF that matches last month’s template. You do not need a nation-state. You need a payroll file and a rushed Friday.
Deepfakes are not magic. They are cheaper impersonation. The old defense — “I’d recognize my CFO” — is now a liability. Recognition is what the model is optimizing.
If money or credentials move, the second channel cannot be the same app that delivered the request.
A policy you can explain in a standup
- Vendor changes and wire requests require a call you place, on a number you already have.
- Video is not proof. A passphrase or a known-wrong question is.
- Help desk: no MFA reset on a voice that “sounds right.” Match the ticket to an in-person or existing-device check.
- Practice once. A 15-minute tabletop beats a 15-page standard nobody read.
That is the whole series in miniature: take a story from the week, strip the jargon, leave a control you can actually run. If you can teach it to a school district office or a 40-person shop, it belongs here.