OpinionTechnical

If You Do This You WILL Get Scammed

Boston Card Hunter

A video warning about common security mistakes when sharing information online, particularly regarding order numbers, addresses, and shipping details. The speaker emphasizes that AI tools can easily recover redacted information and that seemingly harmless posts can provide criminals with enough data to commit fraud or theft.

Summary

The speaker opens by criticizing people for being careless with personal and financial information online. He uses Elon Musk's canceled LEGO order as an example, where someone simply contacted customer support with the public order number and claimed to be Musk to cancel it. The speaker warns that PSA and other support services aren't secure enough to trust with publicly shared order numbers, as AI chatbots can be easily manipulated.

A major focus is on the false sense of security from redacting information. The speaker demonstrates that simply scribbling out addresses or sensitive data with black marker is no longer effective protection, as ChatGPT and Meta AI can quickly recover the underlying information—a technique that's become trivial even with older software like Microsoft Paint. He emphasizes never showing packages unwrapped in videos or waving shipping labels around, as tracking barcodes and QR codes reveal when packages arrive and geographic information about sender and recipient.

The speaker advocates for complete blurring or removal of sensitive information rather than redaction, sharing his approach of going frame-by-frame through videos to ensure no data leaks. He warns about targeted harassment, mentioning he's adopted a private lifestyle because people dislike him and can use exposed information maliciously. He addresses the broader ecosystem of fraud, noting that bad actors can purchase items from sellers just to obtain addresses, and he's witnessed people making explicit threats to buy from stores to get customer data.

On the topic of PSA certificate numbers, the speaker presents both sides—showing them proves ownership and ties cards to registries, but it also risks photoshopping and potential certification disputes. He concludes by reiterating core principles: never share tracking numbers publicly, avoid showing barcodes and QR codes, don't post order numbers on social media, and never disclose information about high-value orders, as they present major fraud targets.

Key Insights

  • The speaker claims that someone contact support with Elon Musk's publicly posted order number, claimed to be Musk, and successfully canceled his order through an AI chatbot without additional verification
  • The speaker argues that simply drawing black marker over addresses in photos or videos no longer protects information because ChatGPT, Meta AI, and even old software like Microsoft Paint can easily recover the underlying text
  • The speaker explains that tracking barcodes reveal not just the tracking number but also geographic information about sender and recipient locations, timing of delivery, and potentially what's in the package—data criminals can exploit especially if the recipient is away
  • The speaker reports witnessing explicit threats from buyers who threatened to purchase items specifically to obtain seller addresses, representing a serious targeted harassment risk in the trading card community
  • The speaker advocates for complete blurring or frame removal of sensitive content rather than redaction, and goes frame-by-frame through videos checking for data leaks to the millisecond level

Topics

Order number and tracking information securityLimitations of redaction and scribbling out dataAI-assisted recovery of hidden informationShipping label and barcode exposure risksPrivacy concerns for content creatorsFraud prevention and targeted harassmentPSA grading certificate number disclosureCustomer support security vulnerabilities

Transcript

[0:00] So you guys are being ridiculous with information. You are not taking care of the security of your card data, and this needs to stop. I'll show you some of the stupid mistakes I've seen, and I hope you do n't make them again. Here's a great example from the last few weeks, when Elon Musk decided to post his order number on Twitter. So what happened? Someone contacted the AI chatbot, entered the order number, introduced themselves as Elon Musk, and canceled it. Well, I mean, it doesn't matter , right? It's like his Lego order was canceled. Someone just decided to play a joke on him. He should have [0:30] known better. If you think about your…

Full transcript available for MurmurCast members

Sign Up to Access

More from Boston Card Hunter

Get AI summaries like this delivered to your inbox daily

Get AI summaries delivered to your inbox

MurmurCast summarizes your YouTube channels, podcasts, and newsletters into one daily email digest.