“They Knew My Coach’s Name”: How AI Makes a Stranger Sound Like Someone You Trust

For Teens (13–18)

Here’s a scenario that’s become common enough to have a name in cybersecurity circles: someone in a group chat or gaming lobby who seems to just get it — they know the slang, they reference the same streamer, they somehow already know a detail about your school or your team. It feels less like meeting a stranger and more like meeting a friend of a friend. That comfort is the entire product being sold to you, and it’s now mass-produced.

Old-school social engineering — tricking people through fake trust rather than fake code — required real effort. A con artist had to research you, rehearse a story, and hope it landed. Now, AI tools can scrape public profiles, build a convincing script with real names and real details in seconds, and hand that script to anyone willing to run the con, skill optional. The research that used to take a scammer days now takes a program a few minutes.

Think of it like a costume shop that used to sell one generic mask, and now sells a perfect replica of your specific best friend’s face — printed on demand, same-day, for anyone who orders one. The mask isn’t smarter. It’s just tailored now, and tailored fakes are much harder to spot on instinct alone.

This short animation walks through how these targeted, trust-based tricks are built and spotted: Phishing and Spear Phishing (CPNI)

Steps that actually work:

1.          Treat “knowing details about you” as proof of research, not proof of trustworthiness. A stranger who name-drops your coach isn’t necessarily connected to your coach — they may have just found your coach’s name on a public team roster online in ten seconds.

2.          Never let a conversation move you toward secrecy. “Don’t tell your parents,” “keep this between us,” “this is just for you” — these phrases are doing real work. They’re not intimacy. They’re isolation, and isolation is step one of nearly every version of this scam.

3.          Slow down anything urgent that showed up through a screen. A real emergency involving someone you know can survive you texting a different, already-saved number to double check. If someone objects to that pause, that reaction is itself the information you need.

4.          Talk about this stuff before it happens, not after. Agree with friends or family on what you’ll do if something feels off — who you’ll tell, what you’ll say. Rehearsed plans beat panicked decisions every time.

The internet rewards confidence and punishes hesitation — that’s just how fast-moving platforms are built. Scammers know this and lean on it hard. Being the person who says “let me check that first” isn’t awkward. It’s the actual skill.

______________________________________________________________________

This post is part of a series inspired by and meant to complement AI Safety for the Everyday User (In 10 Easy Steps) by Terrence “TerrenceTech” Williams — a plain-language guide covering sixteen classic scams and the ten concrete habits that stop them. The full book goes deeper into the “why” behind each one and lays out a complete, step-by-step action plan.