Family Safe Word vs. Rotating Codewords: Why Static Words Fail Against AI Scams

AI attacks what can be observed and copied: your voice, your face, your writing style. A codeword is different in kind — it's shared private knowledge that never appears in any public data an AI could train on.

That's why one question — "What are the words?" — resolves any suspicious contact in seconds, across every channel. The genuine person answers without thinking. The impersonator has exactly three moves: stall, deflect, or hang up. All three are confessions.

A single family safe word is far better than nothing, and the FBI recommends agreeing on one. But a word that never changes has four predictable failure points:

• Leaked. It gets typed into a family group chat, a note on a phone, or an email. One compromised account or forwarded screenshot exposes it.
• Overheard. It gets said out loud on a bus, in a shop, or on a call someone else can hear. A static word that is heard once can be reused for years.
• Forgotten. Under stress, people blank on a word they chose months ago and have never used. A grandparent who can't recall it may skip the check altogether.
• Socially engineered. A scammer chats up a child, poses as a teacher, or runs a "security quiz" until someone says it. Once they have it, nobody can tell.

Rotating codewords fix each of these. Trust Onion shows everyone in your group the same three words, and all three rotate every 60 seconds. They are calculated locally on each device, with no server and no message carrying them, and they keep working offline.

• A word that leaks or is overheard has already expired by the time anyone tries to reuse it.
• Nobody has to remember anything: the caller opens the app and reads the current words.
• A child tricked into revealing the words gives away something that is useless a minute later.
• There is no stored list to steal, because the words are never sent or kept on a server.

The rule for using either one is the same: the caller gives the words first. The person receiving the call compares them privately and never reads out or hints at their own words to someone who has not yet passed the check.

If you are starting with a spoken safe word, or want a backup for relatives without a smartphone:

• Use words, plural. Three words are dramatically harder to guess or socially engineer than one, and still easy to recall.
• Avoid the guessable: pet names, street names, birthdays, favorite teams — anything visible on social media is not a secret.
• Make them sayable by a scared 8-year-old and a stressed 80-year-old. Vivid, concrete, slightly absurd words stick: pickle — trombone — Saturn beats any password-style string.
• Don't rely on a word that never changes. Words shared over months of calls and texts slowly leak. Trust Onion removes the problem: its three words rotate every 60 seconds, so no single word stays useful long enough to become a skeleton key.
• Never confirm or deny a guess. If a caller offers wrong words, don't correct them — end the call and check in through a channel you initiate.

The system only works if the most scam-targeted family members actually use it. What works:

1. Frame it as protecting you, not doubting them. "If someone fakes my voice, this is how you'll know it's really me."
2. Practice one round. Have a family member call and ask the question. Thirty seconds of rehearsal makes the real moment automatic instead of awkward.
3. Set the money rule together: no transfers, gift cards, or account codes move on any emergency request until the words check out — no matter how real it sounds.
4. Include the periphery. Grandparents, teens with public social accounts, and the relative who answers every unknown number are the primary targets — start with them.

When a call, text, or video chat makes an urgent request:

1. Pause. Urgency is the scam's fuel. One breath.
2. Ask: "What are the words?" Say nothing else — don't read out your own words, and don't volunteer names, places, or hints.
3. All three current words, instantly → proceed. Anything else — stalling, anger, "there's no time", two out of three — treat as a failed check.
4. On a failed check, hang up and reach the person directly on contact info you already had.
5. Tell the family. A failed verification means someone is actively targeting your circle; the next call may go to a less-prepared relative.