01
Fake voices
Three seconds of clear audio is enough to work with, and most families have hours of it sitting online.
A family security night for frum households
Shmira is a one hour program that runs in a living room or a shul. People look at scam messages together, set up basic protection on their own phones, and agree on a family code word before anyone goes home.
The first night runs in Passaic this month, during Cybersecurity Awareness Month.
The call
The FBI has been warning about this since 2023. A criminal takes a few seconds of audio, often from a video somebody posted, and clones a relative's voice. Then the phone rings: an accident, an arrest, a hospital, and a request for money that has to stay secret.
The bureau's advice is to hang up and call the person yourself, at the number you already have for them. A code word agreed in advance helps too. A clone can copy a voice. It was never told the word.
The night opens with a call like the one on this phone, played out loud. People say what they would have done, and the answers are usually honest enough to make the rest of the hour easy to run.
incoming call
Yossi
mobile
01
Three seconds of clear audio is enough to work with, and most families have hours of it sitting online.
02
The messages that work borrow a name the reader already trusts: a shul office, a school, a tzedakah campaign with a deadline attached.
03
A lot of these arrive late on Friday, when the person who would check is about to go offline for Shabbos and the pressure comes with a built in deadline.
04
Scam messages used to give themselves away with bad spelling. The ones written with AI do not, which makes the old advice to look for typos mostly useless.
This is one of the twelve messages used in the session.
B"H, this is the shul office. Due to a billing error, membership payments must be updated today. Please use this link to avoid interruption: beis-shmuel-payments.com/update
Questions? Reply here. Please do not call the office, the lines are down.
4:47 PM ✓✓
This one is fake.
Two of the twelve messages in the full session are real. Those tend to take longer to argue about than the fakes.
| 0-5 | We play the call, then take a quick show of hands. |
| 5-20 | Passwords and two step login, starting with the accounts people actually open every day: email first, then the bank. |
| 20-40 | Twelve messages on a screen, real and fake mixed together, voted on one at a time. |
| 40-55 | Setup on your own phone, with help in the room: a password manager, two step login, automatic updates, WhatsApp settings. |
| 55-60 | The code word gets picked out loud, and everyone fills in the fridge card. |
✓ The code word, agreed in the room
✓ A rule for money requests that arrive with a deadline
✓ Two step login switched on, not written down as a plan
✓ The fridge card, printed, with first steps if money already went out
Eight to fifteen people is the size that works. A host needs a room and a screen; a laptop and a TV are enough.
The same hour fits a weeknight slot after maariv. A parents' evening works too.
There is no fee, and nothing is sold at the session. The materials behind it are public.
People should bring their phones, charged. The setup part does not transfer well to notes taken home. Shmira is registered as a 2026 Cybersecurity Awareness Month Champion with the National Cybersecurity Alliance, and the session is built around this year's Champion toolkit.
The setup part is done in pairs for this reason. In any given room a few people are ahead and a few are behind, and both groups are useful.
Part of the session is about voice calls and text messages, which reach a basic phone fine. Two step login works differently on a filtered phone, so there is a separate walk through for it.
Nobody collects anything and nobody needs to see your screen. If a step asks for a password, you type it yourself, or skip that step and finish it at home.
Bring them. The code word only works if everyone who might get the call has heard it said out loud at least once.