Spring Cleaning The Scam Emails

Scams have evolved. The old “Nigerian prince” emails may be gone, but today’s fraud attempts are smarter, more convincing, and increasingly powered by AI.

In this episode, we break down the modern scams targeting everyday Americans, including fake toll road texts, fraudulent bank alerts, account lockout emails, and AI voice cloning schemes designed to imitate loved ones in distress.

You’ll hear real-world examples of how scammers create panic, urgency, and emotional pressure to manipulate victims into giving up money or sensitive information.

We also explain why these scams work so well, how criminals exploit psychology instead of just technology, and why even smart, cautious people fall for them.

If you’ve ever wondered how to protect yourself, your family, or aging parents from becoming victims, this episode provides practical rules and actionable steps to help you spot fraud before it’s too late.

From verifying suspicious messages independently to creating family safe words and knowing what to do after a scam attempt, we cover the strategies that can help keep your finances and identity secure.

Whether you’re concerned about your own safety or trying to protect older relatives from increasingly sophisticated fraud tactics, this is an episode every family should hear.

Transcript

SPEAKER_00 0:00

Securities and investment advisory services offered through LPL Enterprise. LPL, a registered investment advisor member, FINRA, SIPC, and an affiliate of LPL Financial. LPL and LPL Financial are not affiliated with Iron Eagle Advisors. Content in this material is for general information only and is not intended to provide specific advice or recommendations for any individual. Any guests are not affiliated with or endorsed by LPL Enterprise, LPL Financial, or Iron Eagle Advisors.

SPEAKER_01 0:34

Welcome back to Iron Eagle's Real World Money Show. I'm your host, John Flick, and today we're talking about something that could save someone listening to this show a lot of money and even more heartache. Scams. Now I know what you're thinking. John, I'm not stupid. I'm not falling for the Nigerian Prince email. And you're right, you're not falling for that one because we all learned that lesson back in the early 2000s when we were getting those emails promising us millions of dollars if we just sent our bank account information to some guy named Prince Abdul who just needed help moving his fortune out of Nigeria. We all laughed at that. We all deleted those emails. We all knew it was ridiculous. But here's the thing, the scammers, they learn too. They're not sending those emails anymore. They've gotten smarter, they've gotten more sophisticated, and they're using technology that makes the Nigerian prints scams look like a kindergarten art project. It's April in Charlottesville, the weather's warming up, people are planning trips to Carter's Mountain, weekends at the wineries, maybe taking the kids down to Virginia Beach for spring break. Your guard is down, you're thinking about dogwoods and outdoor dining, not fraud. And that's exactly when the scammers strike. This week alone, I've had three clients get hit with scam attempts. One was a fake toll text, one was a fake bank fraud alert, and one was an AI voice clone of her own daughter claiming to be in jail. That last one, it almost worked. And frankly, I have some friends that it did work on several years ago without the AI voice. It cost them twenty five hundred dollars. And this one hits the fear button, and that's what makes it so dangerous. So today we're going to talk about the scams that are hitting people right now in 2026. Not the Nigerian Prince stuff, the new stuff, the sophisticated stuff, the stuff that's fooling smart people every day. And I'm going to give you the tools to spot them and stop them before they cost you money. So let's dig in. Alrighty, so let's start with the scam that's quite literally everywhere right now, the fake toll text. You get a text message on your phone. It says you have an unpaid toll charge of $3.75 from the Route 29 Express lanes. Click here to pay now and avoid a $15 late fee. Now, here's the thing. Route 29 doesn't have toll lanes, but you might not know that. Or you might have been driving through Northern Virginia last weekend visiting family, and maybe you did go through a toll. So you click the link. And congratulations, you just gave a scammer access to your phone, your credit card information, and possibly your identity. This scam is so widespread right now that the Federal Trade Commission, the FTC, put out a specific warning about it in January, and it's hitting people all over the country. Virginia, Massachusetts, Pennsylvania, Texas, Florida, you name it. And here's how it works. You get a text from what looks like an official tolling agency, like EasyPass, Virginia, the Pennsylvania Turnpike, Sun Pass in Florida. The text includes a dollar amount, usually something really small, something trivial like three or four dollars, and it includes a link to pay. The link takes you to a website that looks pretty much real. It's got the same logos, the same colors, the same layout as the real toll agency website. But if you look closely, the URL is wrong. Instead of ending in.gov, it ends in.xyz or dot r you or some other weird domain extension that nobody uses for legitimate websites. You enter your credit card information, you enter your driver's license number, you enter your home address. And now the scammer, they have all of that. They can use your credit card to make purchases, they can use your driver's license number to open accounts in your name, they can use your home address to send you more targeted scams. And here's the kicker. The text often comes from what looks like a legitimate phone number. It's spoofed. It's made to look like it's from the tolling agency. The caller might say, the caller ID might say Easy Pass Virginia. But it's not. It's a scammer. Now you might be thinking, well, I don't have Easy Pass. I don't use tolls, so this doesn't happen to me. Wrong. They're sending these texts to everybody. They don't know if you use tolls or not. They're just hoping that enough people click the link that they can steal a few thousand credit card numbers. And folks, it's working. According to the FBI, they've received over 2,000 complaints about this scam, this very scam in the last year. So here's how you spot it. First, toll agencies don't send text messages demanding payment. If you actually owe a toll, they will mail you a bill on paper with a return address and a phone number that you can call to verify. Second, look at the phone number. If it's coming from a random 10-digit number or an international number, it's 100% a scam. Third, look at the URL in the text. Don't click it. Just look at it. If it's not a.gov website, it's a scam. Fourth, the text will always create urgency. It will say things like you must pay within 12 hours or face severe penalties, or your vehicle registration will be suspended. That's scam tactics. Urgency, fear, panic, because when you're panicked, you don't think clearly, you just react. So what do you do if you get one of these texts? Don't click the link. Don't reply. Just delete it. And if you're worried that you might actually owe a toll, go to the tolling agency's website yourself, not through the link in the text. Type the URL into your browser. Check your account. If you owe money, it'll show up there, and you can pay it through the legitimate website. Simple as that. Alright, so the toll scam might be the big one right now, but there are three other scams that are hitting people pretty hard in 2026. So let me walk you through them. Scam number one, the fake bank fraud alert. Your phone rings, the caller ID says Chase Bank or Bank of America or Truist or whoever your bank is. You answer, and a professional sounding person says, this is the fraud department at Chase. We've detected suspicious activity on your account. Your card was just used to make a purchase at a Walmart in Los Angeles for eight hundred dollars. Did you authorize this transaction? You say, Of course not. You're in Charlottesville. You haven't been to Los Angeles in years. They say, okay, we need to verify your identity and freeze your account to prevent further charges. Can you confirm just the last four digits of your card? So you give them the last four digits. Well, can that hurt, right? Then they say, Great. And to complete the verification, I'll need the full 16 digit card number and the security code on the back. And if you give them that information, you just handed a scammer everything they need to drain your account. So here's how you spot this one. Real banks will never call you and ask you for the full card number or security code. Never. If there's fraud on your account, they'll ask you to verify recent transactions. They may ask for the last four digits, but they'll never ask for the full number. And they'll never pressure you to act immediately. A real fraud alert will say, we've placed a hold on your card, please call us back at the number on the back of your card to verify. That's the key. The number on the back of your card, not the number they're calling from, because scammers can spoof caller ID to make it look like they're calling you from your bank. They can make it look like they're calling from the number on the back of the card. So if you get a call like this, hang up. Do not give them any information. Then call your bank using the number on the back of your card and ask if there was actually a fraud alert on your account. Scam number two, the fake account verification. You get an email or a text and it says your Amazon account has been locked due to suspicious activity. I get a bunch of these every week. Click here to verify your account and restore access. Or it's Netflix or your electric company or Comcast or whatever. The email looks real. It's got the right logo, the right formatting, the right language. But if you click the link, you're taken to a fake website that looks exactly like the real one. And when you enter your username and password, the scammer now has access to your account. And if you use the same password for multiple accounts, they can now get into your email, your bank, your social media, everything. So here's how you spot this one. Hover your mouse over the link before you click it. Look at the URL. If it's not the actual Amazon.com or Netflix.com, it's a scam. And be very careful because sometimes they will use a slight misspelling in the name to make it look real if you don't look closely. Also, real companies will never send you an email saying your account has been locked and asking you to click a link. If there's actually a problem with your account, they'll tell you to go to their website and log in. So don't click links and emails, just don't. Go to the website yourself and log in. If there's an issue, you will see it there. Scam number three, the grandparent scam with AI voice cloning. This one is quite terrifying because it's quite sophisticated. You get a phone call. The caller ID shows that your grandchild's name and phone number. You answer, and you hear your grandchild's voice crying, panicked. Grandma, grandpa, I'm in jail. I was in a car accident and they're charging me with reckless driving. I need $5,000 for bail. Please don't tell mom and dad, I'm so embarrassed. And it sounds exactly like your grandchild. The voice is perfect. The emotion is real. But it's not your grandchild, it's an AI voice clone. Scammers can now take a three-second audio clip of someone's voice from a TikTok video, an Instagram story, a Facebook post, whatever, and use AI to make that voice say anything they want. According to McAfee, 77% of people who fell for one of these AI voice scams lost money. The average loss is over $2,000. And it's not just grandparents. They're targeting busy professionals too. Dad, I'm stuck in Myrtle Beach, my car broke down, I need money to get it fixed. Here's how you spot this one. If you get a call like this, hang up. Don't send money. Call your grandchild or your child directly. Use the number you have saved in your phone, not the number that just called you. If they answer and they're fine, you know it was a scam. And here's a tip from the National Cybersecurity Alliance. Establish a family safe word. A code word that only your family knows. If someone calls claiming to be in trouble, ask for the code word. If they can't give it to you, it's a scam. The AI can only say what the scammer types. It can't know a secret word that's never been posted online. So now let's address the elephant in the room. If these scams are so obvious, why do smart people still fall for them? Because these scammers sometimes are really, really good at what they do. They're not targeting stupid people. They're targeting human psychology. And let me explain. It's emotional manipulation. Scammers use fear, urgency, embarrassment, things to bypass your logical brain. The toll scam uses fear, your vehicle registration will be suspended. The bank scam uses fear, your account has been compromised. The grandparent scam uses fear and embarrassment. I'm in jail and I don't want mom to know. When you're scared or embarrassed, you don't think clearly. You react. And that's exactly what they want. Next is cognitive load. This is a fancy psychological term that basically means you're too busy to think straight. It's April. You're planning summer vacations. You're doing your taxes. You're dealing with work stress. Your kid has a school project due. Your aging parents need help with something. You're juggling a lot. Your brain is overloaded. And then you get a text about an unpaid toll and you think, ugh, I don't have time for this. It's three dollars, I'll just click the link and pay it so I can cross it off my list. Boom, you just got scammed. Scammers know that busy people make mistakes, so they time their scams to hit when people are most distracted. Spring break season, tax season, the holidays, back to school season, anytime people are stressed and busy. Next up is trust exploitation. The scams look official. They use real logos, real language, real formatting. The toll text looks like it came from EasyPass. The bank text looks like it came from your bank. It looks like the real thing. It might be an email from Amazon. Your brain is wired to trust things that look familiar. That's a survival mechanism. If something looks safe, you assume it is. Scammers exploit that. Next is perfect timing. The grandparent scam is not random. Scammers scroll through social media looking for posts like I'm so proud of my grandson who just got his driver's license. Now they know you have a grandson, and they know he's young and probably drives. So they call you pretending to be him saying he got in a car accident. Or they see a post that says heading to Virginia Beach for spring break with the kids. Now they know you're traveling, so they call you to pretend to be your kid saying they're stuck and need money. It's targeted, it's personalized, it works. And how about the Charlottesville angle? Don't think this is just happening in big cities or to people who aren't paying attention. I've got clients who are UVA professors, doctors at UVA, successful business owners, retired government employees, smart, educated people, and they've all gotten these scam attempts. One of my clients, a retired engineer, almost fell for the toll scam. He's brilliant. He's designed systems for NASA. But he clicked the link because he had just driven through Northern Virginia the day before and he thought maybe he actually did miss a toll. Another client, a doctor, got the AI voice clone call. It sounded exactly like her son. She was about to wire $5,000 before her husband said, wait, let's just call him first. This is not about intelligence, folks. It's about scammers using sophisticated technology and psychological manipulation to trick people. So if you've fallen for a scam or almost fallen for one, don't beat yourself up. You're not stupid. You're just human. And scammers are very good at exploiting human nature. Okay, so enough about why the scams work. Let's talk about how to stop them. I'm going to give you five rules. If you follow these five rules, you will very likely not get scammed. Period. Rule number one never click links in unexpected texts or emails. If you get a text or an email you were not expecting, do not click any links in it. Just don't. I don't care if it looks like it's from your bank, I don't care if it looks like it's from Amazon, and I don't care if it looks like it's from the IRS. If you did not initiate the contact, don't click the link. Instead, go to the company's website directly. Type the URL into your browser. Log into your account. If there's actually an issue, you will see it there. Example, you get an email that says your Netflix account is about to be canceled. Don't click the link in the email, go to Netflix.com. Log in, check your account. If there's a problem, it will show up there. Rule number two, never give information to someone who contacted you. If someone calls you, emails you, or texts you and asks for personal information, don't give it to them. It doesn't matter if they say they're from your bank, it doesn't matter if they say they're from the IRS or if they sound official. If you did not initiate the contact, you do not know who you're talking to. Instead, hang up, look up the company's phone number yourself, and call them back and ask if they actually need information from you. Example, you get a call from someone claiming to be your credit card company saying there's fraud on your account. Hang up. Call the number on the back of your credit card, ask if there's actually a fraud alert. I'm going to give you another case in point for this one. My wife Kimberly, who works with me here in the office, she works a lot with certain insurance companies and their clients. So when the insurance company assigns her a client that no longer has an agent, she will call them. Quite often, people just give the information that she wants over the phone. Now, fortunately for them, we're legitimate, but she encourages them to look her up online, to call the insurance company to verify who she is. Because that can be rather dangerous to just give out that information. Be cautious, folks. Rule number three, slow down. Urgency is always a red flag. Scammers create urgency to make you panic and act without thinking. You must act within 12 hours. Your account will be closed, your license will be suspended, your grandchild is in jail and needs mail money right now. All of that is designed to make you panic. So when you feel that urgency, that's your signal to slow down, take a breath, think about what's being asked of you. Real emergencies are rare and real companies don't threaten you. They give you the time to resolve legitimate issues. Rule number four, verify independently. If someone calls you and they're claiming to be your grandchild in trouble, hang up and call your grandchild directly using the number you have saved in your phone. If someone emails you saying your Amazon account is locked, go to Amazon.com yourself and log in. If someone texts you saying you owe a toll, go to the tolling agency's website and check your account. Always, always, always verify through a channel that you control, not through the contact method they gave you. Rule number five, if it feels weird, it is weird. Trust your gut. If something feels off, it probably is. If the toll text feels suspicious, delete it. If the bank call feels strange, hang up. If the email doesn't sound quite right, don't click it. Your instincts are good. Listen to them. I had a client who got a call from someone claiming to be from Microsoft, ironically with the email I just got, saying that her computer had a virus. She said, This feels weird, I'm going to hang up. Good call, it was a scam. Another client got an email from what looked like PayPal saying she had a payment waiting, but something about the language felt off, so she did not click it. It was a phishing attempt. Your brain picks up on subtle cues. If it's telling you something's wrong, listen to it. And a bonus tip, the family safe word. Sit down with your family and agree on a safe word. Pick a random word that nobody would guess, something like pineapple or skateboard or Tuesday. Share that word with your spouse, your kids, your grandkids, your parents, everyone who might call you in an emergency and agree that if someone calls claiming to be in trouble, you'll ask for that safe word before you do anything. If they can give you the word, it's real. If they can't, it's a scam. The AI voice clone cannot know a word that's never been posted online. So this is your failsafe. And all of this information may be well and good, but if you're listening to this and you think, uh oh, I may have already fell for one of these. Don't panic, but act fast. Here's what you need to do. If you gave a scammer your credit card information or bank account information, call your bank right now. Tell them what happened. They'll freeze the account, issue you a new card, and reverse any fraudulent charges. The faster you act, the more likely you're going to get your money back. Step two, file an FTC complaint. Go to ref reportfraud.ftc.gov and file a complaint. This does two things. First, it creates a record of the scam. Second, it helps the FTC track scam patterns and warn other people. Step three, freeze your credit. If you gave a scammer your social security number, your driver's license number, or other personal information, freeze your credit immediately. You can do this for free at Equifax, Experian, and TransUnion. It takes about 10 minutes. Freezing your credit means nobody can open new accounts in your name. Not you, not the scammer, nobody. When you need to apply for credit, you can temporarily unfreeze it, but while it's frozen, you're protected. Step four, change your passwords. If you gave a scammer access to any of your accounts, change your passwords immediately. And don't just change the one for the compromised account. Change the passwords for every account that use the same one. On a side note, don't use the same password for every account. Use strong, unique passwords for each and every account and use a password manager to keep track of them. Step five don't let embarrassment stop you. A lot of people People don't report scams because they're embarrassed, they feel stupid, they don't want their family to know. Don't do that. First, you're not stupid. Scammers are professionals, they do this for a living and they're good at it. Second, not reporting it makes it worse because the scammer is still out there targeting other people, and the longer you wait to freeze your accounts and change your passwords, the more damage they can do. So swallow your pride, make the calls, file the reports, and protect yourself. And here's the reality check, the hard truth, folks. If you have been scammed, you might not get your money back. If you wired money through Western Union or sent it through Venmo or Zell or Cash App, it's probably gone. If you gave them a gift card or gift card codes, it's gone. But if they charged your credit card, you've got a shot. Credit card companies have fraud protections. You can dispute the charges, you might get your money back. But the key is acting fast. The longer you wait, the harder it is to reverse the damage. If you're in Charlottesville and you've been scammed, you can also contact the Charlottesville Police Department non-emergency line at 434-970-3280. It can help you file a report. And even though most of these scams are run by overseas criminals who are hard to catch, having a police report on file can help with insurance claims and credit disputes. Okay, I want to spend a few minutes talking about AI, because this is where scams are headed and it can be quite scary. Remember the Nigerian Prince scam? That one was obvious because the email is full of typos and weird grammar. It said things like, I'm Prince Abdul and I have much money to give you. We all laughed at it. Nobody fell for it. Well, almost nobody. But now scammers have AI tools that write pretty perfect English. No typos, no weird grammar. The emails sound completely professional. And that's just the beginning. Voice cloning. This is the biggest threat right now. According to cybersecurity experts, scammers only need three seconds of audio to create a perfect clone of someone's voice. Three seconds. That's a TikTok video. That's an Instagram story. That's a voicemail greeting or a YouTube video. And once they have these three seconds, they can make that voice say anything they want. The AI learns the pitch, the tone, the accent, the speech patterns, and it generates audio that sounds exactly like the person. McAfee did a study. Seventy percent of people surveyed said they were not confident that they could tell the difference between a real voice and an AI clone. And here's the scary part. The technology is getting better every day. In 2026 we're looking at the point that even experts are having trouble telling the difference. Deep fake videos. Scammers are now using deep fake videos too. They can take a photo of someone and animate it to make it look like they're talking, or moving, or crying. So now the grandparent scam isn't just a voice call, it's a video call. You see your grandchild on the screen, crying, asking for help. Except it's not your grandchild. It's an AI generated deepfake. And because scammers can scrape all of your information from social media, they can make the scams incredibly targeted. They know your grandchild's name, they know what school they go to, they know that they just got their driver's license, they know that you're planning a trip to Virginia Beach next week. So when they call you, they have the details, and it sounds completely believable. This is not the Nigerian prince sending a generic email to a million people hoping that one person bites. This is a scammer who knows your name, your grandchild's name, your recent activities, and their voice and your voice, and they're using AI to exploit this information. So what do you do? First, be very careful about what you post on social media. Every video you post, every voicemail you leave, every public post is potential material for a scammer. Consider setting your social media accounts to private so only friends and family can see them. Second, establish that family safe word I mentioned earlier, because that's the one thing that AI cannot fake. Third, always verify through an independent channel if someone calls you claiming to be in trouble, hang up and call them back using a number that you know is real. And fourth, educate your family, especially older parents and grandparents who might not understand how sophisticated these scams have become. Have a conversation. Explain how voice cloning works. Show them examples. Make sure they know not to trust caller ID, not to trust a voice that sounds familiar, and always verify before sending money. So what's the bottom line? And here's what you need to understand the Nigerian Prince scam is dead, but it's been replaced by something much, much more dangerous. Scammers have access to AI tools that can perfectly mimic voices, create fake videos, write professional emails, and scrape personal information from social media. And these tools are cheap, they're easy to use, and they're getting better every day. So you can't rely on scams being obvious anymore because they're quite the opposite. You have to rely on process, verify independently, slow down, ask for the safe word, hang up, and call back. That is how you protect yourself. Alright, folks, so let's wrap this up. We're not dealing with the Nigerian prints anymore. We're dealing with scammers who have AI tools, voice cloning technology, and detailed personal information scraped from social media. These scams are sophisticated, they're targeted, they're fooling very smart people every single day. But you do not have to be a victim. Follow the five rules. Never click links and unexpected messages, never give information to someone who contacted you. Slow down when you feel urgency, verify independently, and trust your gut. Establish a family safe word. Be careful what you post on social media and educate your family about how these scams work. It's springtime in Charlottesville. Go enjoy Carter's Mountain, enjoy the wineries, enjoy the warm weather, just don't click that link. Don't answer that call from an unknown number, and don't send money to someone you haven't verified. If you think you're being scammed, call your bank immediately. Freeze your credit, file an FTC report, and don't let embarrassment stop you from protecting yourself. And if you want help figuring out if your financial accounts have been compromised or if you need help cleaning up after a scam, give us a call. That's what we're here for. Stay safe out there, and we'll see you next week. If you don't have someone you're working with or you feel like you're not getting clear explanations where you are, this is exactly the kind of thing we do at Iron Eagle Advisors. We sit down, we translate the jargon into plain English, look at all the moving parts, your investments, insurance, debt, retirement, taxes, goals, wants, needs, desires, the financial ones. Don't be going and getting any crazy ideas here, and we build a plan that actually fits a real person's life, not just a spreadsheet. If you'd like to schedule a conversation, you can go to www.ironegleadvisors.com and click on the Let's Get Started link, or you can call our office at four three four four six five six four eight five. Again, that's Iron EagleAdvisors.com or four three four four six five six four eight five. No pressure, no gimmicks. We talk and we see where you're at. And if we can help, great. If not, you may just walk away with more clarity than you had before. This is John Flick with Iron Eagle Advisors. Take care of your money this week so your future self doesn't have to look back and say, Well, that was dumb. Thank you for spending part of your day with me. What do you say we do it again? Say same time, same place next week.