I'm sharing this as a cautionary tale at the intersection of online radicalization, romance scams, and the limits of technical security. Despite maintaining robust home network security, my wife (MD/PhD) fell victim to scams totaling $57,553.83.
## Timeline
*Dec 2023*: Wife creates Twitter account, becomes involved in "white wellbeing" extremist communities
*Early 2025*: "Elon Musk" begins emailing her, validating her activism
*May 2025*: Invited to eloncommunitycenter.com after email grooming. First romance scam begins
*May-June 2025*: $55,000 sent via bank transfers. Intimate images exchanged. Communication moved to Teams/SimpleX/Session
*July 2025*: Second scam - $2,553.83 in Bitcoin to meet "Elon Musk." When caught, claimed she knew it was fake but sent money because "they were nice to me"
*Aug 2025*: Left home for 8 days. Returned but won't discuss
## Technical Details
*Our Security Stack*: - OPNsense firewall - Adguard DNS + blocklists - CrowdSec, Maltrail IDS/IPS - abuse.ch and ET rulesets - ~30% of DNS requests blocked
*Scam Infrastructure*: - eloncommunitycenter.com / elonprivateplatform.com (same scam) - plutusaifinance.com (fake crypto trading) - Professional-looking HTTPS sites - Leaked real IP via email headers
*What I Missed*: - Unusual DNS queries (limited log retention) - New messaging apps (SimpleX, Session) - Behavioral changes others noticed
## The Human Element
The scammers succeeded through social engineering, not technical prowess. They: - Targeted victims through extremist communities - Offered validation to isolated individuals - Mixed ideology with financial opportunity - Used romance tactics
## Key Lessons
1. *Technical security isn't enough* when someone voluntarily sends money for emotional validation
2. *Extremist communities are perfect hunting grounds* - members are isolated, seeking belonging, primed to distrust authorities
3. *Warning signs*: personality changes (her brother said her Twitter "didn't sound like her"), secretiveness, new apps, seeking validation online while complaining about real relationships
4. *Financial safeguards needed*: transaction alerts, account monitoring across institutions
5. *Mental health intersection*: A brilliant physician either believed she was talking to Elon Musk's 'management' via AOL email, or felt cornered enough to claim she knowingly paid scammers
## Questions for HN
- Has anyone successfully intervened in online extremism? - Tools for monitoring family financial accounts? - How to balance privacy with security in marriage? - Early warning systems for romance scams?