THE DECODE · SALES × SCAMS · PART 3July 7, 202611 min read

Why the badge, the screenshot, and "everyone's doing it" work on smart people.

A salesman never sells naked. I arrive wrapped in a company name, a case-study deck, a wall of client logos — borrowed credibility, the oldest tool in the honest trade. In part one I mapped the scam onto the sales pipeline; in part two, the manufactured warmth. This is the setup stage — the props department. The scam borrows the same three props I use. The difference is not how they look. It's what happens when you touch them.

$3.5B
reported lost to imposter scams in 2025 (FTC)
1 in 3
of all 2025 fraud reports were imposter scams (FTC)
+40%
jump in government-imposter reports in 2025, driven by fake toll texts (FTC)
65%
of Milgram's volunteers obeyed a lab coat to the final 450-volt switch (1963)
The short answer

Scam calls and messages sound official because the setup stage of every scam runs on three props: a badge (the bank's fraud department, the police, a government agency), a screenshot (a trading dashboard, a payment confirmation, a profit chart), and a crowd (reviews, testimonials, group chats where everyone but you is winning). A prop's job is not to survive your verification — it's to stop verification from starting. The FTC logged $3.5 billion in reported imposter-scam losses in 2025; nearly one in three fraud reports. The tell: real authority is indifferent to being checked. Fake authority rushes, guilt-trips, or threatens the moment you try. Don't grade the prop — break the channel, run the check, and grade the reaction.

"Society trains people to not question authority. Hustlers exploit this 'suspension of suspiciousness' to make us do what they want."

— Frank Stajano & Paul Wilson, "Understanding Scam Victims," University of Cambridge / Communications of the ACM. They call it the Social Compliance principle — and note what it indicts: not your intelligence. Your citizenship.

Start with the comfortable lie this piece exists to kill: "a fake police call would never work on me." In 1963, Stanley Milgram sat ordinary volunteers in front of a shock generator at Yale and had a man in a gray lab coat tell them to continue. Twenty-six of forty — 65 percent — obeyed to the final switch, the one labeled 450 volts. They weren't cruel and they weren't stupid; they were socialized. Deference to legitimate authority is the contract that makes society run — you produce your documents at the border, you pull over for the siren, you type your password when the bank asks, and 364 days a year, every one of those is the correct move. That training is not your flaw. It is, as the Cambridge researchers put it, the thing hustlers shamelessly exploit — because a reflex that good is worth stealing.

Now the professional's view, because I use the honest version of this machinery every working day. No salesman walks in as a bare stranger: the company name opens the door, the case study carries the argument, the reference list closes the doubt. Robert Cialdini catalogued the two levers underneath — authority and social proof — more than forty years ago, and every legitimate sales floor drills them. So does the other kind of floor. In the leaked training material from OCCRP's Scam Empire investigation, an instructional manual orders agents to sell a senior colleague to the victim by "presenting them as a figure of authority." Same lever. Same drill. One difference: my props are real, and theirs are manufactured — which means mine survive inspection and theirs must prevent it.

That difference is the whole post, so let me say it precisely. A prop is never asked to survive scrutiny; its job is to stop scrutiny from starting. The badge makes checking feel like disobedience. The screenshot makes checking feel unnecessary. The crowd makes checking feel lonely. Walk through the props department with me — one prop at a time, how it's staged, why your brain buys it, and the one check each cannot survive.

PROP N° 1THE PROPS DEPARTMENT

The badge — borrowed authority

The curtain opens the same way every time. The FTC's description of the costliest imposter scams of 2025: they "start with a fake security alert, often from a bank." A caller announces the fraud department; your money is being taken right now, and he is the one helping you. The government version runs the identical scene in a different costume — the officer with a warrant, the tax agent, the unpaid-toll text that, per the FTC, drove government-imposter reports up 40 percent in 2025, with messages spoofing real toll programs by name to seem credible. At the theatrical extreme sits the digital arrest: a uniformed "officer" on a video call, case files on the desk behind him, keeping a victim on the line for hours. And people reported losing about $920 million to government impersonators in 2025 — up from $789 million the year before — with business imposters taking nearly a billion more, bank badges costliest of all.

Why it works is not a mystery; it's the Milgram result wearing a headset. The badge doesn't argue with you — it reassigns the roles. One sentence in, you are no longer a customer who can hang up; you are a subject being processed, and subjects who question the process feel like they're doing something wrong. Stajano and Wilson traced this exact wire: "Social Compliance is the foundation for phishing," they write — our banks, which hold all our money, order us to type our password, "and, naturally, we do." Note what the prop never does: prove anything. The display name on your screen is a costume a caller chooses; the tone of procedural boredom is rehearsed. The badge exists so that asking for proof never occurs to you — and so that when it does occur to you, it feels like insubordination.

Here is the honest mirror, from my side of the trade. My company name and title open doors too — and any prospect, at any moment, can hang up and dial the switchboard, and I will still be there, employed, findable, the same person. The legitimate badge is built for the callback. That's not a bug the honest version tolerates; it is the entire difference between a credential and a costume.

The check it can't surviveBreak the channel. Hang up, then call the institution on a route you chose — the number on your card or statement, the official app. A real fraud case survives your absence, and nobody real is offended. A fake badge only exists inside the channel it chose, which is why it will fight to keep you there. Our free Impersonation Index lists what 27 major organizations say, in their own published words, they will never do.
PROP N° 2THE PROPS DEPARTMENT

The screenshot — manufactured evidence

The second prop arrives once you're in the room: proof you can see. OCCRP's Scam Empire leak caught it running, on tape. An agent calling himself Anthony watches a victim named Annika through AnyDesk as she opens the fake "Golden Currencies" platform. "All right, here we are," he announces. "You see on the bottom there? $6,288. So we made an amazing profit. We made approximately $2,700 on a Tesla deal." OCCRP's finding, in one line: none of her money had been invested in Tesla at all. The balance she was looking at was a stage set. The same prop family is everywhere the con needs evidence: the fake payment confirmation sent to sellers, the profit chart your online match "generously" shares from the platform their uncle runs — the screenshot of gains I flagged in part two's turn.

The mechanism is quieter than the badge's, and more dangerous for smart people, because it hijacks the very habit that makes you careful: you asked for evidence, and evidence appeared. Seeing feels like verifying. It isn't. A dashboard number is a text field controlled by whoever runs the website; a screenshot is a picture of a claim, not the claim's truth. The prop satisfies your diligence reflex so the reflex switches off — you did check, after all. Except you checked a painting of the thing instead of the thing.

The honest mirror: sales floors run on case studies and numbers too — and a real case study names a client you can call, cites figures someone audited, and points at results that exist outside the seller's own deck. Evidence in the legitimate trade is designed to be traced. Evidence in the other trade is designed to be looked at.

The check it can't surviveApply the independence test: evidence only counts if it survives leaving their stage. Numbers going up on their screen prove nothing; money coming out proves everything — a withdrawal that lands in your own bank account is the one figure nobody can typeset. It's the same stress test we apply to task platforms: if the profit can't leave the platform, the profit never existed.
PROP N° 3THE PROPS DEPARTMENT

The crowd — rented consensus

The third prop isn't a person or a picture — it's a murmur. The Telegram or WhatsApp "investors group" where members post gains daily and celebrate each other's withdrawals, and where every member but you is staff. The testimonial wall. The five-star reviews. The manufacturing of consensus runs at such industrial scale that the FTC announced a final rule in August 2024 banning fake reviews and testimonials outright — naming reviews by people who don't exist (including AI-generated reviewers), bought reviews, insider reviews with undisclosed connections, and company-controlled websites dressed up as independent review platforms. Read that list again as a props inventory. A federal agency had to write a rule against a stage crew.

Cialdini's social proof is the lever: when we're uncertain, we look sideways at what people like us are doing — a heuristic so reliable that evolution baked it in. Stajano and Wilson's fraud version is the Herd principle: "Even suspicious marks let their guard down when everyone around them appears to share the same risks. Safety in numbers? Not if they're all conspiring against us." The crowd doesn't argue either. It makes doubt feel like a social defect — everyone here can see it works, so the problem must be you. Skepticism gets reframed as the one thing standing between you and what the whole room already has.

The honest mirror one last time: references are a pillar of legitimate selling — and a real reference is a person you can call, off the seller's stage, ideally one the seller didn't hand-pick for you. The legitimate crowd exists in the world. The rented one exists only in the room they built.

The check it can't surviveMeet the crowd off the stage. Search the platform's name plus "scam" and "reviews" somewhere the seller doesn't control; try to reach one enthusiastic member independently. A crowd you can only meet on their stage is a cast — and an audience of one is exactly what the room was built for.

The verification asymmetry — one law under all three props

Line the three props up and the law underneath comes into focus. Real credentials, real evidence, and real customers share one property: they exist outside the conversation. The bank is still the bank after you hang up; the audited number is still in the register tomorrow; the genuine customer answers a call the seller never arranged. Which means the honest version of every prop survives checking at zero cost — and the manufactured version survives nothing, so the con's entire engineering budget goes into making sure the check never happens. That's why the prop never travels alone. It ships bundled with a reason not to verify: urgency ("your account is being drained as we speak"), secrecy ("this investigation is confidential — tell no one," the spine of every digital arrest), or intimacy's offended face ("don't you trust me?"). Pressure is not a separate trick that rude scammers add. It is the prop's life-support system — and it's the next stage of the pipeline, the close, which gets this series' next part to itself.

So stop grading props. You will lose that game: the badge sounds procedural because procedure is rehearsable, the dashboard looks real because pixels are free, the crowd feels warm because the crowd is paid to. There is exactly one thing in the scene the operator cannot fake, and it isn't the prop — it's his reaction to your check. Announce a verification step and watch what happens. Indifference is what real looks like. Resistance is a confession. In part one I showed why the direction money moves is the one unfakeable signal at the close; this is its twin at the setup: the reaction to verification is the one unfakeable signal before a cent is on the table.

The check protocol — five moves, ten minutes, no prop survives

01Break the channel first. Never verify inside the contact that reached you — the channel is the prop's home turf. Hang up or close the message, then reach the institution through a route you chose: the number on your card or statement, the official app, the address you already had. Our free Impersonation Index lists what 27 major organizations say they will never do.
02Grade the reaction, not the prop. Say you'll call back, check the register, or ask someone — then watch. Real authority is indifferent to verification; it survives your absence. Pressure, guilt, threats, or a 'confidential — tell no one' the moment you reach for the check is not a warning sign among others. It is the verdict.
03Apply the independence test to evidence. A dashboard, screenshot, or payment confirmation only counts if it survives leaving the sender's stage: a withdrawal that lands in your own account, a company that appears in the official register, a case number the real institution recognizes when you call it yourself. Evidence that exists only on their screen is set dressing.
04Meet the crowd off the stage. Search the platform or person's name plus 'scam' and 'reviews' somewhere the seller doesn't control. Try to contact one enthusiastic member of the group independently. If the crowd exists only inside their room — their group chat, their testimonial wall, their review page — you are looking at a cast, not customers.
05Watch what the authority wants moved. No real institution protects your money by moving it. Gift cards, crypto ATMs, wire transfers to a 'safe account,' or 'verifying funds' by sending them — whatever the badge, the ask is the unmasking. Hang up. If money has already moved, go straight to our emergency triage and act by rail, fast.
The whole post in one sentence: no legitimate institution on earth objects to being verified — so verification-hostility is not a red flag among others, it is the verdict, delivered by the scammer himself.
From the field. Milgram's twenty-six were not weak people, and neither is your mother, your accountant, or you. Deference to authority is not a defect — it's the social contract, and honoring it is the right call almost every time anyone asks. The fraud industry knows this better than its critics do: it doesn't hunt for fools, it hunts for good citizens, because citizenship is the reflex its props are machined to fit. So aim the anger correctly — not at the person who trusted a badge, but at the industry that mass-produces badges, types profits into dashboards, and staffs applause. And if you're reading this after obeying: you did what 65 percent of everyone does under trained authority. Report it, tell one person today, and know one more thing about the props department — it keeps your file. The next act arrives wearing a recovery badge, offering to get back what the first badge took.

Someone official is asking you for something? Check what the real one says it never does.

The Impersonation Index collects the published contact rules of 27 banks, agencies, couriers, and payment apps — what each will and will never do — sourced to their own pages. Free, no signup.

Open the Impersonation Index →Money already sent — triage

One closing thought from the sales floor. In an honest sale, the props are shortcuts to something real — the company exists, the case study happened, the references pick up the phone. In a scam, the props are the whole building: there is no bank behind the badge, no trade behind the screenshot, no people behind the crowd. So never grade the prop. Break the channel, run one check, and grade what the check provokes — the real thing is indifferent, and the fake thing cannot afford to be.

Common questions about fake authority and manufactured proof

Why do scam calls sound so official?

Because the caller is performing a role your brain is trained to obey, and the performance is scripted. Cambridge researchers Stajano and Wilson call it the Social Compliance principle: society trains people not to question authority, and hustlers exploit that 'suspension of suspiciousness.' Stanley Milgram demonstrated the raw mechanism in 1963 — 26 of 40 ordinary volunteers obeyed a man in a lab coat all the way to the shock generator's final 450-volt switch. A scam call borrows the same reflex: the moment you accept the caller as your bank's fraud department or a police officer, you stop being a customer who can hang up and become a subject who must comply. The FTC logged $3.5 billion in reported imposter-scam losses in 2025 — nearly one in three fraud reports.

Will a bank or the police ever ask you to move your money to protect it?

No. The FTC's 2025 imposter-scam data shows the costliest versions open with a fake security alert and end by convincing the victim to move money 'to protect it' — and that ask is the unmasking, because it is the one thing no real institution does. A genuine fraud department freezes a card, reverses a charge, or reissues an account; it never relocates your balance, and it never collects anything by gift card, crypto ATM, or wire to a 'safe account.' The same rule covers government badges: no police force, tax office, or court collects fines or 'verifies funds' over the phone. Whatever the badge on the call, the moment money is asked to move, the verdict is in.

Can trading dashboards and profit screenshots be faked?

Trivially — the number you see on a scam platform is a text field controlled by whoever runs the website. OCCRP's Scam Empire investigation published a recorded call in which an agent watches a victim through AnyDesk, walks her to the fake 'Golden Currencies' platform, and narrates her $6,288 balance and an 'amazing profit' on a Tesla deal — and, as OCCRP reports, none of her money had been invested in Tesla at all. The dashboard was set dressing. The only evidence that cannot be typed into a webpage is money leaving: a withdrawal that lands in your own bank account. If the profit cannot leave the platform, the profit never existed.

How can you tell if reviews and testimonials are fake?

Assume the seller's own stage proves nothing — the practice of manufacturing consensus is widespread enough that the FTC announced a final rule in August 2024 banning fake reviews and testimonials outright: reviews by people who don't exist (including AI-generated reviewers), bought positive reviews, insider reviews without disclosed connections, and company-controlled sites dressed up as independent review platforms. So run the checks the rule can't run for you: search the platform's name plus 'scam' and 'reviews' away from its own pages, look for the same enthusiasm in places the seller doesn't control, and try to reach one member of the crowd independently. A crowd you can only meet on the seller's stage is a cast.

How do I verify a call from my bank is real?

Never inside the call that reached you — the channel itself is the thing you can't trust. Hang up, then contact the bank through a route you chose: the number printed on your card or statement, or the official app. If the call was real, the case is still there and nobody is offended; banks publish exactly this call-us-back guidance. If the caller resists — insists you stay on the line, gives you a 'direct number' to use instead, or warns that hanging up will let the fraud happen — the resistance is your answer. Our free Impersonation Index lists, for 27 major organizations, what each one says it will and will never do, in its own published words.

What is the fastest way to spot a fake authority?

Announce a verification step and watch the reaction — grade the reaction, not the badge. Real authority is indifferent to being checked: a genuine officer lets you call the station, a genuine bank expects you to use the number on your card, a genuine broker appears in the regulator's register. Fake authority cannot afford the check, so it must prevent it — with urgency ('your account is being drained right now'), secrecy ('this investigation is confidential — tell no one,' the spine of every digital-arrest scam), or offense ('don't you trust me?'). Verification-hostility is not one red flag among many. It is the verdict.

Sources & further reading

Every figure and quote in this piece links to the primary source. Click any to verify.

FTC — $3.5B imposter-scam data 2025: 1-in-3 reports, ~$920M government / ~$1B business impostersFTC consumer alert (May 2026) — government-imposter reports up 40%, spoofed toll programsStajano & Wilson (Cambridge/CACM) — the Social Compliance and Herd principlesOCCRP — Scam Empire: the 'figure of authority' manual and the Golden Currencies callFTC — final rule banning fake reviews and testimonials (Aug 2024)Milgram (1963) — Behavioral Study of Obedience: 26 of 40 to the final switchFBI IC3 2024 — government impersonation $405M, tech-support fraud $1.46B, record $16.6B total

Keep reading