Episode
05 March 2024 Official episode · Official transcript
cybercrime
Jim Browning describes scambaiting, remote-access abuse, gift-card and refund scams, and investigations into scam call centers using compromised systems, CCTV, recorded calls, and victim data.
Topics: Technical-support scams and refund scams, Scambaiting and social engineering, Remote-access software and unauthorized remote control, Malvertising and malicious JavaScript, Text-to-speech and AI-assisted scam content, Browser HTML manipulation to fake financial transactions, Gift-card laundering and money-mule payment flows, Default credentials and weak system configuration, CCTV and call-recording system compromise, Investigating scam call centers through compromised infrastructure and victim data
Links published on the Darknet Diaries episode page. Not LLM output.
Qualified statements from this episode, not graph facts.
Jim Browning USES scambaiting
Jim deliberately baits scammers, observes their operations, records the interactions, and exposes them.
Explicit Confidence 99% · Jack Rhysider EP 143 Details
“he tries to bait scammers to scam him, and he records it for YouTube”
technical support scam USES remote access software
Technical-support scammers ask victims to provide control of their computers through remote-access software.
Explicit Confidence 98% · Jack Rhysider EP 143 Details
“they’ll ask for control of your computer to fix it”
technical support scam USES social engineering
The scam relies on convincing victims that their computers are infected and manipulating them into following the scammers’ instructions.
Derived Confidence 94% · Jack Rhysider EP 143 Details
“They’ll try to convince you that your computer has a virus and they can help”
technical support scam USES gift-card laundering
Technical-support scammers use gift cards as a payment method and launder the card numbers through secondary markets.
Explicit Confidence 98% · Jim Browning EP 143 Details
“As soon as you read out that number, that’s as good as them taking the value of that card because they can launder that almost immediately”
technical support scam USES money mule
Some bank-oriented scams instruct victims to mail cash to an address controlled through a money mule arrangement.
Explicit Confidence 98% · Jim Browning EP 143 Details
“mail your cash to an address, and it’s a money mule address”
refund scam USES text-to-speech software
Refund scams are described as using text-to-speech software in their robocall or voicemail lures.
Explicit Confidence 97% · Jack Rhysider EP 143 Details
“They’re clearly using some text-to-speech software, right?”
refund scam USES remote access software
Refund scammers ask to view and control the victim’s computer through a screen-sharing or remote-access application.
Explicit Confidence 99% · Jack Rhysider EP 143 Details
“The scammer will say that they want to make sure the money goes into the proper bank account and will ask to see the victim’s screen by using some screen-sharing application, and then they’ll ask to take control of the victim’s computer”
refund scam USES HTML manipulation
Refund scammers fake an overpayment by editing the bank webpage displayed in the victim’s browser.
Explicit Confidence 99% · Jack Rhysider EP 143 Details
“the scammer just faked the whole transaction by editing the HTML on the victim’s screen”
refund scam USES gift-card laundering
In the described refund scam, the victim is pressured to return the supposedly excess refund using gift vouchers.
Explicit Confidence 98% · Jim Browning EP 143 Details
“He spends the next few minutes explaining that he’s going to need $5,000 worth of Apple gift vouchers”
Jim Browning USES social engineering
Jim says that much of his method for accessing scammers’ computers relies on social engineering rather than exploiting a zero-day vulnerability.
Explicit Confidence 99% · Jim Browning EP 143 Details
“a lot of it is social engineering as opposed to some zero-day compromise of the remote access software that I’m using”
scam call center operation INVOLVES TeamViewer
The scam operation is described as using TeamViewer for remote access, although TeamViewer temporarily banned connections from India because of scam abuse.
Explicit Confidence 98% · Jim Browning EP 143 Details
“if the scammers were using a bit of remote access software called TeamViewer”
scam call center operation INVOLVES malicious JavaScript
A malicious advertisement associated with the scam operation used JavaScript to create a fake computer-lock warning and lure victims into calling support.
Explicit Confidence 98% · Jack Rhysider EP 143 Details
“it had some malicious JavaScript in it which maximized the browser, showed this giant warning, played this audio on repeat”
scam call center operation INVOLVES malvertising
The scam operation was reached through a malvertising campaign presenting a malicious advertisement on a website.
Explicit Confidence 98% · Jack Rhysider EP 143 Details
“someone told Jim about a malvert. This is an ad on a website which has malware on it”
Jim Browning EXPLOITS default password
Jim gained access to the scam operation’s CCTV system by trying its unchanged default password.
Explicit Confidence 99% · Jim Browning EP 143 Details
“they were still using the default password? I guess you could call that hacking, but I could see the IP address, the username, and I just tried the default password, and I was straight in”
default password AFFECTS CCTV system
The CCTV system remained protected by its default password, allowing access to the system.
Explicit Confidence 99% · Jim Browning EP 143 Details
“For the particular CCTV system that he was using, I did a Google search of what is the default password for this system, and would you believe they were still using the default password”
scam call center operation INVOLVES CCTV system
The scam call center used a CCTV system that its supervisor could monitor and that Jim accessed.
Explicit Confidence 97% · Jack Rhysider EP 143 Details
“this scam call center had a lot of cameras”
scam call center operation COMPROMISES CCTV system
Jim’s access to the supervisor’s computer led to access to the call center’s CCTV system.
Explicit Confidence 98% · Jack Rhysider EP 143 Details
“from there was able to get into the CCTV system”
scam call center operation ATTRIBUTED_TO Amit Chauhan
The BBC investigation identified Amit Chauhan as the man behind the fraud operation.
Attributed Confidence 99% · Reporter EP 143 Details
“We’ve identified the man behind the fraud, Amit Chauhan”
Jim Browning ASSOCIATED_WITH Karl Rock
Jim describes Karl Rock as a partner in connection with drone footage and related activities.
Explicit Confidence 97% · Jim Browning EP 143 Details
“I’ve spoken with Karl Rock, sort of my partner-in-crime when it comes to all the drone footage and so on”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T08:19:08.477676+00:00