The Gold Bar Scam and the Secret Weapon Every Family Needs to Fight Fraud

One of the most terrifying thoughts in the digital age is realizing that the detailed, digital version of you is out there—ready for criminals to piece together and exploit. And if a scammer opens an account in your name, the system is fundamentally broken: We’re still all living in a threatscape where victims of cybercrime are presumed guilty by “creditors” (new account fraud, account takeover, etc) until proven innocent. 

Tom O’Malley was this week’s guest on What the Hack? because he’s been fighting cybercrime since there was such a thing. Tom is a former federal prosecutor who traded chasing drug cartels for hunting cybercriminals, diving into the deepest swill of scams—from ham-fisted fraudsters to the bizarrely effective  “gold bar scam.” In “3 Ways to Not Lose Everything,” Tom shares the practical, hard-won defense strategies he developed after his data was breached in one of the worst ever breaches.

Tom’s journey started with a breaking story on the news: his own top-secret clearance personnel file was stolen in the massive Office of Personnel Management hack of 2015. The OPM serves as the U.S. federal government’s human resources department. The 2015 breach compromised the sensitive personal and background investigation records of approximately 21.5 million people, including current, former, and prospective federal employees, contractors, their spouses, and family members. Information like SSNs, fingerprints, and detailed security clearance forms.

Because of Tom’s work with organized crime and drug enforcement, his file contained incredibly sensitive, personal data. The government’s solution at the time: offering free credit monitoring for a few years. Tom was underwhelmed.

Relying solely on credit monitoring is, he said, “like having a burglar alarm in your house and not locking the doors and then you just get alerted the fact that stuff has been taken from your house and you may never get it back. You need to lock it.” Credit monitoring, in essence, is a notification system; it tells you after a new account has been opened in your name. It doesn’t prevent the crime from happening in the first place.

This fundamental flaw is what drove Tom to action. He knew better tools existed to protect himself, and he wanted to make them widely accessible. That was the impetus behind Frozen Pie, a website that provided direct links to the credit bureau pages where individuals could freeze their credit for free thus bypassing the expensive upsells for monitoring services. A credit freeze, unlike monitoring, is a proactive lock on your financial identity, preventing new lines of credit from being opened in your name. It’s the most powerful defense against new account identity theft.

In the new economy of fraud, the first step to almost any scam is the scammer making contact. To fight sophisticated schemes like the Gold Bar Scam—where criminals panic victims into buying gold bars for “government” couriers—the core advice is simple: Don’t answer the phone if it’s not someone in your contact list.

If a call is truly important, they’ll leave a voicemail. The same goes for unexpected texts: Never click a link you weren’t expecting or reply to messages asking to “unsubscribe” or “delete,” as this only confirms your number is active. Government agencies and banks do not make the kind of urgent requests scammers employ. Breaking the initial connection is key to defending against fraud.

The threat of losing generational wealth impacts entire families, and as AI makes imposter scams more convincing from voice clones to deepfake calls a multi-layered, family-wide defense is critical.

The ultimate advice, especially for protecting vulnerable family members, is for every family to establish a safe word.

Imagine a scammer uses AI to clone a family member’s voice, calling with an urgent plea for money. Instead of an immediate, instinctual response to help, the only defense needed is: “What’s the safe word?” If the caller doesn’t know it, it’s a scam. 

Final Thoughts: Lock Down Your Life

You can dramatically reduce your “attack surface” by constantly thinking about security. Establish clear communication protocols with the people closest to you, and lock down your digital life with a credit freeze and a family safe word. It’s not just about protecting your assets; it’s about preserving your peace of mind and generational well-being.

A quick favor: What the Hack? was nominated for a Signal Award in the Thought Leadership category! Help us win by voting. (You are required to enter an email address–Privacy Pro Tip: Use DeleteMe email masking if you don’t want to share your real email address.)