Shi Zha Tong visual guides 02 / Scam operations

How fragments of your data support an impersonation

Knowing your name and transactions does not make someone genuine customer support.

Knowing your name and transactions does not make someone genuine customer support.
Conceptual illustration, not real people, a crime scene or investigative evidence.
  1. 1

    Obtaining data

    Leaks or deceptive forms expose personal information.

  2. 2

    Combining records

    Names, bank details and purchase information are linked.

  3. 3

    Targeted impersonation

    Real details are quoted to gain trust.

  4. 4

    Requesting action

    Someone posing as support asks for verification codes or a transfer.

Warning signs

A caller who knows your details may still be an impostor.

Protective action

Hang up and contact the original retailer or bank yourself.

Open sources and scope

Based on official advice and cases. The four stages are simplified for teaching; roles and order differ between cases and do not establish wrongdoing by any particular person or service.

First Special Police Corps: common scam tactics and prevention (new tab)

Survey and livestream scenarios include risk analysis. Citations do not mean official approval of every statement. Edited: 1 October 2026.