AI-Powered 'Hi Mum' Scam Targets Australian Families

Victims of the AI-enhanced 'Hi Mum' scam face immediate financial losses ranging from a few hundred to several thousand Australian dollars per incident. Because the transfers are made via bank transfer or digital payment platforms at the victim's own initiative, recovering funds is difficult and often impossible once the money has moved through multiple accounts.

Beyond the financial loss, victims report serious emotional harm. Knowing that their trust in their own child's voice was exploited leaves many feeling violated and shaken. For older Australians, the experience can erode confidence in digital communication tools, creating social isolation at a time when staying connected to family matters most.

The broader cost is a general erosion of trust in family communication. When parents and grandparents start doubting whether the voice on the phone or the message on the screen is genuinely from their loved one, it introduces anxiety into relationships that should feel secure. Consumer protection experts warn that as AI impersonation tools become more accessible, incidents of this type will grow in both frequency and financial scale.

Every variation of the 'Hi Mum' scam depends on the victim accepting, without question, that the person contacting them is who they claim to be. Trust Onion's three rotating codewords break that dependency directly. When a caller or message sender claims to be a family member, the recipient simply asks: 'What are the words?' No AI clone, however acoustically accurate, can answer that question. The current words exist only on the devices of real family members, calculated locally and never stored on a server.

In the scenario documented here, a parent receiving a call from what sounds exactly like their child's voice would have one reliable tool the scammer cannot defeat. The three codewords rotate every 60 seconds and are never transmitted over the same channel the scammer is using. Even if a fraudster intercepts a call, reads messages, or produces a flawless voice clone, they have no way to know the current words. A single question would have exposed the impersonation before any money changed hands.

A Proofie™ is a selfie signed by your passkey the moment you take it. Share the link, and anyone can check in their own browser that your key signed this exact photo, after a known moment, and that nothing has changed since. A standard P-256 WebAuthn passkey signs after Face ID, fingerprint or device-passcode unlock. The signature must carry both user-presence and user-verification flags. This is not a crypto-wallet signature. Identity is the full signing public key, not its shortened label. Save a previously trusted key to recognize later Proofies from the same key. This does not automatically verify a real-world identity or detect AI-generated images. Signed time and place cannot be changed undetected; they are not independent proof of physical whereabouts or exact capture time. Family codewords work alongside Proofies, not as an overlay or signed field. Proofie photos and signed records are stored securely on Amazon Web Services (AWS). A Proofie is public by default: anyone with its link or QR code can view the photo and signed record. You can add a password to make a Proofie private, or delete it at any time. Deleting a Proofie removes its photo and signed record from our AWS storage and takes its link offline, but cannot recall copies someone has already downloaded or saved.

Note: calling back on a number you already have saved is a useful extra step, but it is not a substitute for the three-word challenge. A scammer may be able to intercept or spoof a return call. The codewords are the layer that cannot be faked.

Public by default, under your control. Proofie photos and signed records are stored securely on Amazon Web Services (AWS). A Proofie is public by default: anyone with its link or QR code can view the photo and signed record. You can add a password to make a Proofie private, or delete it at any time. Deleting a Proofie removes its photo and signed record from our AWS storage and takes its link offline, but cannot recall copies someone has already downloaded or saved.