Case Studyvoice cloning
Ireland's 'Hi Mam, Hi Dad' Text Scam Targets Parents via Fake Child Messages
In April 2026, fraudsters texted Irish parents posing as their children, claiming a new phone number and demanding urgent bank transfers. The campaign ran alongside bank impersonation texts targeting the same population through the same channel.
Filed to the News Deskvoice cloning Originally reported by TechBuzz Ireland
- When
- April 2026
- Who
- Family
- Outcome
- Ongoing
I.How it happened
A text arrives: 'Hi Mam' or 'Hi Dad', followed by a claim that the sender is their child, reaching out from a new or temporary number. Once the parent replies, the scammer introduces an urgent financial need, a broken phone, an unpaid bill, an emergency, and asks for a bank transfer to an account under a plausible alias. The messages go out in bulk with generic openers and require no prior knowledge of the child's name; volume does the work.
The campaign ran alongside bank impersonation texts circulating in Ireland at the same time, mimicking notifications from financial institutions to harvest login credentials or card details. Together, the two attack types targeted both emotional and financial vulnerabilities in the same population through the same channel.
Timeline
-
The Setup
Scammers obtained mobile numbers belonging to parents and guardians, likely through data breaches or purchased contact lists. They wrote messages that mimicked the informal tone of a child texting a parent, opening with 'Hi Mam' or 'Hi Dad' to establish immediate familiarity.
-
The Attack
Fraudsters sent unsolicited SMS messages claiming to be a recipient's child contacting them from a new phone number, creating urgency by stating the child needed money quickly. Parents were asked to save the new number and send funds via bank transfer.
-
The Impact
An undisclosed number of Irish families received the messages. Some parents, believing they were communicating with their own child, transferred money to scammer-controlled accounts before realising the contact was fraudulent.
-
The Discovery
TechBuzz Ireland identified and reported the scam wave in early April 2026 after multiple consumer reports. Warnings spread through consumer protection channels and media coverage across Ireland.
-
The Fallout
Irish consumers were advised to contact their banks immediately if they had transferred funds and to report the messages to relevant authorities. The scam continued to circulate alongside parallel bank impersonation texts targeting the same population.
II.The damage
Aggregate financial losses from this scam wave were not publicly disclosed. Individual victims who transferred funds before spotting the fraud faced immediate monetary loss with limited recovery options, since bank transfers to scammer-controlled accounts are difficult to reverse once the receiving account is emptied.
Parents who believed they were helping a child in crisis and later discovered the deception reported embarrassment, anxiety, and a lasting wariness of SMS communications. Some became reluctant to respond quickly to genuine urgent messages from their children, which strained normal family communication.
III.What would have stopped it
Our analysis: prevention guidance, not part of the reported facts
The 'Hi Mam, Hi Dad' scam depends entirely on a parent being unable to confirm in the moment whether they are speaking with their real child. When a message arrives claiming to be from a child with a new number, a parent using Trust Onion can reply with one question: 'What's the word?' A real child knows the current codeword and can answer instantly. A scammer cannot. Trust Onion codewords rotate every few hours, are calculated locally on each device, and work offline, so there is no central database a fraudster could breach to obtain the current word.
For an extra layer of assurance, a child can send a Proofie™, a selfie signed by their passkey the moment they take it, so the parent can verify in the Trust Onion app that the exact original photo is unchanged and that the full signing key matches the one in their shared family group. A failed callback to a number you already hold does not by itself prove the original message was fraudulent, so the family's private codewords remain the decisive check.
Public by default, under your control. Proofie photos and signed records are stored securely on Amazon Web Services (AWS). A Proofie is public by default: anyone with its link or QR code can view the photo and signed record. You can add a password to make a Proofie private, or delete it at any time. Deleting a Proofie removes its photo and signed record from our AWS storage and takes its link offline, but cannot recall copies someone has already downloaded or saved.
Frequently asked questions
What is the 'Hi Mam, Hi Dad' scam?
Scammers text parents claiming to be their child contacting them from a new phone number. After a brief exchange, they claim to need money urgently and request a bank transfer. The messages go out in bulk and require no knowledge of the child's actual name.
How much money was lost in this scam wave?
Aggregate financial losses from this specific April 2026 wave were not publicly disclosed. Individual victims who transferred funds before identifying the fraud faced immediate losses that are typically difficult to recover through bank reversal processes.
How could this scam have been prevented?
A pre-agreed family codeword stops it cold. When the message arrives, the parent asks: 'What's the word?' A real child using Trust Onion knows the rotating codeword and answers immediately. A scammer cannot. Codewords rotate every few hours, work offline, and are calculated locally, so no fraudster can obtain or guess the current word.
Why do these scams work if they use generic greetings?
They succeed through volume. Only a small percentage of recipients need to respond for the campaign to be profitable. The greeting 'Hi Mam' or 'Hi Dad' is emotionally resonant, and the urgency of a child claiming to be in trouble overrides the skepticism many people would otherwise apply to an unsolicited message.
What should I do if I receive one of these texts?
Do not transfer money or click any links. Contact your child using a number you already have saved, not the one in the suspicious message. If you have already transferred funds, contact your bank immediately. Report the message to your national consumer protection authority.
Help Your Group Verify Calls
Friends, family, teams, and clubs can share three rotating words. Ask the caller to give them first; compare privately in your app.
Cite this page
Ireland's 'Hi Mam, Hi Dad' Text Scam Targets Parents via Fake Child Messages — Trust Onion, October 11, 2026. https://trustonion.io/case-studies/ireland-s-hi-mam-hi-dad-text-scam-targets-parents-via-fake-child-messages
