The most fascinating thing here is the lack of sophistication of the approach. No fake images or audio or anything.
I'm worried about the new wave of impersonation scams that's coming thanks to voice cloning.
I hired a lawyer who did advise that. Telling me not to pay any invoices they send me without first contacting them to confirm.
On the other hand, my doctor sends text messages asking for bills to be paid to an account number in the message itself. Training people to trust scam techniques!
He sounded amused by my reply, commented that my stance was quite uncommon, but I had made a fair point. He said I'd get a message via the bank's webapp, with a phone number where I could call him back.
It turned out that it was a legitimate call from the bank. But they clearly aren't training their customers to follow secure practices. The personal information that he was asking for is _exactly_ what a scammer would need to ask me too.
That at least isn’t replicable at mass scale. You’d need to have a training set for each relative you’re pretending to be.
But in general, yes, it’s going to be a mess.