#quality blog right here | Explore Tumblr Posts and Blogs

tonycries · 6 months

Text

One More? Please? - G.S.

Synopsis. A kiss always solves everything! But when a kiss turns into something more…well, it’s only a desperate attempt to unseal yourselves from this damned prison realm, right? Right?

Pairing. Gojo Satoru x Reader

Content. MDNI, fem! reader, unprotected, coworkers to lovers, being stuck in that damn box, oral (female), mutual másturbation, spitting, fáce-sítting, máting press, Satoru is down bad for you, chóking, overstim, multiple rounds, créampie, pet names (sweetheart), swearing.

Word count. 4.4k

A/N. Happy belated two months to this blog! Concept inspired by this post by @kingkonoha.

“Maybe we should kiss and see if the box opens?”

“That’s the dumbest fucking thing to ever come out of your mouth.”

“Hey- it works in the movies! True love’s kiss and all-”

You heave out a heavy sigh that makes even the skeleton at your shoulder shake its head in pity. Goddamn, if these curses weren’t going to kill him then you will.

“I take it back. That’s the dumbest fucking thing to ever come out of your mouth.”

Satoru hooks a thumb over his blindfold to gaze at you with mock seriousness. Oh, how the mighty have fallen - and how you were teetering dangerously close to a stroke with each dramatic bat of his long lashes.

“C’monnn~” he whines, with the flair of someone that was not sealed in an inescapable prison, “Don’t tell me that in all these years you’ve never once been at least a little tempted to kiss me, sweetheart.”

“I’d rather kiss that dusty skull.” Shooting him a pointed look that makes even the skulls at your feet recoil. It would almost be hilarious if it wasn’t for the fact that you were trapped. In the prison realm. With Gojo Satoru of all people. Possibly forever.

Shit, is this karma for all those times you ditched Satoru with Nanami instead of dealing with him yourself?

Now, Satoru might be going about it with the subtlety of a sledgehammer, but just a few minutes ago when his life flashed before his very eyes at the mere sight of Suguru - or at least, the monster wearing his body - he’d expected some of his favorite memories to be the ones with you in it.

You - his lil’ coworker - in all your gorgeous, smart-mouthed glory. And maybe if he was lucky, he even expected a couple glimpses of you in his future. Preferably with a giant rock on your finger.

But that’s a story for another time, what he certainly did not expect was for your stupidly heroic (and quite beautiful) ass to jump right in the middle of the prison realm’s ensnarement.

Although, honestly, right now he doesn’t think he’d want to be locked up in here with anyone but you - and that withering glare you send him.

Undeterred, Satoru has the audacity to throw his head back and laugh. Laugh. A sound you’ve come to realize over the years, as innocent as it sounds, does not bode well for you or your sanity.

A sanity that’s been slowly dwindling since your first day of meeting Satoru. Back then, a brash, cocky new teacher that waltzed into the halls of Jujutsu Tech in those pretentious sunglasses like he owned the place.

Well, not that he was any different right now. Lounging over some disgruntled skeletons, you half-expected him to pull out a deck chair and start sunbathing amidst the bones. Your begrudging coworker - and occasional bane of your existence - seemed right at home.

You, however, were decidedly not having the time of your life.

“I swear, you’re enjoying this, aren’t you?” you grumble, wincing at the bones prodding you from almost every angle.

“Can you blame me?” he hums, now fully tugging down his blindfold to hang around his neck, “It’s not every day I get to spend quality time with my favorite person in the world.”

You scoff, strangely self-conscious as those striking blue sweep your figure from head to toe. “Lucky me. Well why don’t you spend this quality time helping me figure out how the hell we can get out of here.”

“I already told y-”

“Anything but that.”

With a sulky huff, Satoru peers down at you, “Then we just wait till someone gets us out of here. I’m sure Megumi-chan is just tearing his emo hair out trying to unseal this thing.”

“...”

“You’re absolutely correct, Yuji then. Or…” he tilts his head towards a sad pile of bones, “We end up like our little friend over there. Though I’d make a far better looking skeleton-”

You don’t hear the rest of Satoru’s rant over the small noise of concern that falls from your lips. Something hot and prickly pooling in your stomach at the fact that yes you really were stuck in the prison realm with Gojo Satoru. Possibly forever. And no this wasn’t some strange dream like when you and Shoko accidentally raided the wrong brownie box in the kitchen.

Shit.

And perhaps it showed on your face, because you’re jolted out of your reverie by warm fingers intertwining with yours. Grounding. Satoru’s eyes now searching yours with an intensity that made you squirm uncomfortably.

“Hey, we’ll figure this out, okay?” he mutters softly. “Remember that time we accidentally set the training ground on fire?” leaning in closer now, “Or that mission we got chased by that cursed vending machine?”

You roll your eyes, a reluctant smile tugging at the corners of your lips despite yourself. “Yeah, and then you nearly got us killed trying to order a sweet tea. ”

Satoru chuckles, squeezing your hand reassuringly. “See? It worked out, didn’t it? It always does, sweetheart.”

And if your heart does a strange little lurch, well, then you just blame it on the femur jabbing into your side.

All is quiet in your little hell. That is, until.

“Hey, Satoru…does kissing really work in the movies?”

You barely catch the way Satoru’s breath hitches ever-so-slightly as he leans in closer. eyes sparkling with mischief. And oh you knew that look - one that was usually accompanied by a lecture by Yaga, one that sent shivers down your spine. He grins, “Well, there’s only one way to find out, hm?”

Embarrassment and amusement bubbles inside you, tumbling out in the form of a barely-audible, “A peck. One.”

“Awww. Eight?”’

“No.”

“Five?”

“Satoru.”

Minty breath fanning your face, “Okay okay, one peck and a kiss to your forehead. C’mon, it’s a bargain~”

Pinching your nose, you sigh out a weary, “This is so stupid. Fine, but if it doesn’t work then I’m strangling you.”

And it’s all that is said before his lips are on yours.

Soft. Satoru’s lips were so soft. And he tasted so unfairly of caramel apples and sweet, sweet mischief. Just like him. Feather-light and fleeting - yet the kiss burns into your brain with an intensity that you strangely didn’t mind.

It’s over before you know it. The cold air hits your lips as Satoru’s words ring in your ears, a disappointed little, “Aw, that didn’t work.”

Barely even risking a glance at the still very sealed realm, your body reacts before your mind - the expensive cotton of his uniform collar soft against your fingers as you pull Satoru towards you with a sense of urgency you can’t quite explain.

And then you’re kissing him. And he’s kissing you because shit this is all that Satoru’s been dreaming about since he turned 23 and suddenly realized that oh you were frighteningly everything that he ever wanted.

“S-Satoru,” you whisper, breathless against his lips.

“Shhhh, my girl. One more. Didn’t work.”

His lips are searing on yours. Urgent and greedy, because fuck if it took getting trapped in the prison realm to finally kiss you then God knows when he’ll be able to again.

Which is why he breathes you in like he doesn’t have enough time, and probably never will - even in this godforsaken box where time never passes.

“Shit. O-one more.”

Drinking in your sweet gasps as he intertwines his tongue with yours, tasting how sinfully delicious you were. Satoru’s hands wander the expanse of your body, cupping your head to kiss you deeper, snaking down to squeeze your ass - and everything in between.

Pulling away ever-so-slightly with a playful bite to your bottom lip, he leaves a trail of hot, open-mouthed kisses down your neck. The disappointed whine that leaves your pretty mouth makes all the blood in Satoru’s body rush to his cock.

“Sweetheart.” he grunts into the crook of your neck, lips ghosting over your racing pulse. “Y’think I kissed the wrong lips?”

Oh?

Satoru’s words send a jolt of electricity running down your spine - all the way down to your heated cunt. “W-what?” you managed to choke out, cheeks flaring as he raises his eyes to meet yours and-

Oh.

Oh, shit. If the curses weren’t going to kill you then Satoru sure might.

You’re snapped out of your thoughts by Satoru carefully jostling the two of you so that he’s lying on his back, your body manhandled to straddle his pretty face.

“Satoru, when you mean ‘wrong lips’...here?” you trail off, still reeling from him and the abrupt change in position and him.

“Exactly what I mean,” he chuckles, the sound rumbling through his chest and vibrating beneath your dripping cunt. “Now, spread ‘em wider f’me. Let me taste you- Need it s’bad.”

Body moving as if on autopilot, your knees part wider to let him greedily take in the sight of your soaked panties. Beads of slick seeping through the thin fabric each time his hot breath meets your cunt.

But not for long - the cool air hits you before you realize what’s happening. Because Satoru is ripping your flimsy panties off with one hand. Throwing it behind to God-knows-where with the urgency of a madman.

“Shit, so wet f’me already.” he groans, mouth watering at the obscene sight of you clenching around nothing. “S’gorgeous. You really are perfect everywhere, huh?” he mutters through lazy, languid kisses along your thighs. Tongue darting out just so to leisurely trace circles along the heated skin.

Strong arms wrap around your thighs, the stretch nothing with the two long fingers spreading your swollen folds apart. Your face burns from just how adoring Satoru looks below you.

You buck into his touch, “Hngh- Please. Wan’ your mouth on me.”

And perhaps the great Gojo Satoru decided to be merciful for once in his life, because without another word, he’s surging forward. Tongue flicking out to tease your sloppy entrance, pooling your juices before tipping his head back, back, back to let it slide down his throat so sinfully.

Shit, Satoru could just cum in his pants right now, of course you taste heavenly. Better than he could’ve ever imagined on any lonely night.

You shudder as he flattens his tongue across your folds, sliding teasingly between them, grazing your swollen clit just barely at an unhurried rhythm that almost has Satoru forgetting where he was. But quite frankly, he couldn’t give less of a fuck about it either.

“This what you wanted, sweetheart?” he hums around your clit, the vibrations making you squeal. Sucking gently, tongue rolling harshly against your bundle of nerves, over and over- “Cause it’s what I’ve been wanting for years.”

The words ring in your ears almost as much as the lewd squelches below. Years?

“F-fuck- feels hngh- What do you mean y-years, Satoru?”

Oh, Satoru thinks he could pass out just at the way you whine out his name so prettily. Eyes rolling to the back of his head, a hand hastily snaking down to unbuckle his pants. “Mhmm~ Couldn’t go a day without sparring with you where I didn’t think of bending you over and tasting you right there y’know.”

Your eyes snap down to meet Satoru’s hazy, half-lidded ones. Something dark and feral shining within them. And right now, thighs wrapped around his head, you don’t think he’s ever looked happier. White locks splayed out, a fucked-out expression on his face as his tongue bullies past your folds, you could feel the slight smile curling his lips against you.

It’s overwhelming - both his confession and the way Satoru was making out with your cunt like a man starved.

Nose-deep in your pussy, tongue alternating between its abuse on your throbbing clit and dipping in and out of your sloppy hole at a maddening pace. Mouth only speeding up ruthlessly at the way you convulse and grind involuntarily on top of him.

God, Satoru was going insane at the way your walls were sucking him up so good, clamping down with each push of his tongue.

“Shit- made jus’ f’me. You like that, don’t you?” he growls against your cunt, voice hoarse with desire. “Like fucking my face with your pussy?”

“Oh! Ngh, yes Satoru- L-love it-”

A bruising grip on your hips, encouraging you to rock against his face. Harder. Tongue more desperate. He couldn’t get enough. Meeting your every grind, tongue lapping at your cunt so obscenely.

Breaths ragged and hot against your cunt, drinking you in with the desperation of a man that wouldn’t mind giving up air for your essence. And it was Satoru - of course he wouldn’t mind.

Especially with the large hand snaking up your thigh, going from drawing reassuring patterns at your hips to rubbing tight, little circles on your pulsing clit. Hasty, and urgent - like he had no time to waste. “Tha’s right, my girl. Give it up for me,”

Every cell in your body is on fire, every nerve ending singing with pleasure at the way Satoru plays your body like an instrument.

“M’close, Satoru- Hah- s’close.” you moan breathlessly, a hand tangling in his soft strands. Using it as leverage to ride Satoru’s pretty face just the way you like it.

But you didn’t have to - because Satoru seems to already know exactly what to do. Exactly how to quirk his tongue just right to brush against all your most sensitive spots. Exactly how to match the rhythm of his abuse on your clit to the way he was tonguefucking you into delirium. Exactly how to look at you with such a hungry expression that devours you almost as much as his mouth.

“Cum f’me, sweetheart.”

Satoru didn’t even have to ask. Because you’re cumming with a strangled gasp of his name. White-hot pleasure coursing through you like lightning, body trembling as you cum all over Satoru’s pretty face.

Hands moving your limp, boneless hips across his face, forcing you to ride out peak after peak on his red lips.

As the blood roaring in your ears bates, and you blink back your vision, the first thing you see are those familiar blue eyes gazing up at you. Holding you steady, lips brushing gentle kisses along your inner thighs.

Oh, how beautiful he was like this.

“S-S’toru?” you mewl, still sensitive from your orgasm as Satoru shifts underneath you to sit you prettily in his lap.

“Mhm?” he nuzzles your neck.

“One more. It didn’t work.”

Oh, if you knew the only way to shut up Gojo Satoru was to say something like this then you would’ve done it a lot sooner.

But Satoru’s stunned silence doesn’t last for long, because he grins, low and sultry, “You’re right. It didn’t work.”

The metallic clinking of a belt echoes in the stuffy chamber as Satoru hastily pushes down his pants. Cock springing free to hit his lower abs, “What a shame.”

You blink at the sheer size of him - he was going to split you in two. It was unfair, really. Water is wet. Gojo Satoru has a big dick.

But oh was he pretty - so pretty. Prominent veins glistening in the dim lighting, fat tip flushed your favorite shade of delicate pink, leaking furiously in between your thighs.

Gulping, you reach out to wrap your hand around his achingly hard cock. So warm and heavy in your hands. “Y-yeah, what a shame.”

Both of you watch - entranced - at the way he twitches in your grasp at the mere sound of your voice. A maddening little bump! bump! bump! against your palm as you begin pumping him slowly - so agonizingly slow.

“Oh- Feel s’good, sweetheart.” Satoru hisses lowly as you swipe at the precum beading at this head. Thumbing teasingly under his sensitive slit, tracing delicately along his veins.

And by God does it do something to you to see the great Gojo Satoru falling apart for you, hair tousled, lips kiss-bitten, and eyes looking at you like he wanted to positively eat you alive. It made your cunt throb so desperately, slick forming a dark wet patch on his trousers.

Not one to be left behind, his long fingers deftly snake down to your dripping cunt. Not wasting any time before bullying his fingertips past your swollen folds, curling expertly to press down against that one spot that has your fist faltering on his cock. Hard.

Pretty little moans left your lips at the way Satoru so easily matches your pace. Thrusting knuckle-deep into your pussy in and out - hitting that spot over and over.

“Shit, Toru- s’deep inside me. I’m- hngh-”

Satoru was in heaven, really. You were so warm and wet around both his fingers and his throbbing cock.

Only two thoughts running through his mind right now - 1. He was right, your hands were softer and more sinfully delicious around his swollen cock. And 2. The hardest battle he’s ever fought was probably right now - at your mercy, trying not to spill all over your hands because he’d be damned if he finally scored the girl and came in two seconds.

Shit, he thinks fingers almost erratic now, he needs you to cum. Right now.

As if sensing his urgency, your moves become more frantic, Satoru’s brows furrowing at the way you increase your pace. His hips twitch, as if trying to thrust into your fist. matching your pace as you start stroking him harder, faster.

Ah, but alas, the great Gojo Satoru’s reputation precedes him.

“Oh, fuck- M’gonna-” And soon enough, you’re seeing stars behind your eyes - or maybe those were tears - as you cum. Hard.

Body moving before your mind, you’re clenching around Satoru’s fingers, grinding down so ferally as you edge him closer and closer. “C’mon, Toru. One more, right?” you whisper brokenly, lips ghosting his ear.

Breath coming in short, strained gasps of what sounded like your name now, “Oh- fuck ngh- so close.” he warns, voice hoarse. “If you keep doing that, I won’t be responsible for what happens next.”

You smirk, raising a brow, “Is that a threat, Satoru?”

Willing his fucked-out eyes open, they bore into yours as he utters, “No, ah- it’s a p-promise.”

Without warning, Satoru clasps your wrists, forcing you to stop pumping him. The disappointed mewl threatening to spill from your lips is cut off just as your back hits the ground.

Slam!

You think you could almost get whiplash from how swiftly Satoru had you caged and splayed out so shamefully beneath him.

You whine, “But you didn’t even get to-”

“Fuck, not now. Gotta feel you or else m’gonna cum so embarrassingly all over your fist.” He rests his throbbing erection laid out so enticingly across your stomach, leaking hot precum onto your skin. And that makes you shut up, eyes mapping where it ended and realizing that yeah, you might’ve faced more mercy with the curses outside of this box. “Besides. One more, right?”

And before you can respond, Satoru’s spitting on you once. Twice. Thrice.

You flinch as the wads of saliva hit your dripping cunt, mixing with your slick so obscenely as Satoru smears it across your swollen folds. Your mouth drops into a soft oh! of disbelief as he promptly pops his thumb into his mouth, groaning at the taste.

“Shit.” Satoru hisses lowly, “One more might just not be enough.”

Not wasting a moment longer, he’s bullying his throbbing cock into your snug cunt. Head thrown back as your plush walls desperately try to accommodate his size.

“Oh. Oh shit hah- should’ve been locked up here ngh- sooner.” he groans, words straight from his cock. “Feel s’heavenly around m-me.” Because God Satoru thinks he wouldn’t even mind staying here for the rest of his life if it meant he got to have you like this.

You moan at the positively delicious stretch of your pussy, plush walls unable to decide between pushing him out and milking the soul out of him. “Hah- Toru s’too big. I can’t-”

“You will.” he grits out, teeth clenched and brows furrowed as he focuses on letting you adjust. Pressing inch by fucking inch. Eyes rolling to the back of his head as he fights that feral part of himself that just wants to plunge into your pretty pussy till his tip kisses your cervix, and you’re drunk on nothing but his cock.

But he didn’t have to - because you’re immediately wrapping your legs around his toned waist, pulling Satoru to you recklessly until his heavy balls smack your ass. Tufts of snowy white hair - already so wet with your slick and his precum - finally meeting your cunt.

“Ah! Shit, s’full Toru.” you keen, body bowing into his.

There’s not even a hair's breadth between your bodies now as Satoru chuckles darkly. “You little minx. Thought you couldn’t handle me, but you really wanted to be split apart on my cock, huh?”

You feel almost shy under his gaze as you mumble out a quiet little, “Well you did say one more.”

Ah, Satoru thinks deliriously, if you aren’t Mrs. Gojo by the time you two get out of this then there’s seriously something wrong with him.

But he doesn’t tell you that. Instead with a satisfied smirk, he claims your lips in a searing kiss, sucking your tongue so lewdly as he did with your cunt. Parting for only a second before pressing his lips to yours again. And again. And again, as if it hurt to part.

“Mhm. Always wanted to do this, sweetheart.” he hums against your pretty lips. “Fuck ever since you hah- walked in on that first day.”

Kissing you sweetly with a tenderness that doesn’t translate to his hips as pulls back, back, back. All the way till his angry, hard tip was just grazing your sloppy entrance. “One more.”

Body moving before his mind, his hips start fucking into your dripping cunt recklessly. Satoru doesn’t fuck you with the finesse he imagined he would all these years, rough, harsh thrusts fueled by pure need and all the desperation from these last few years.

In one, fluid movement, the burn of the stretch hits you before the realization that Satoru has thrown your legs over his sculpted shoulders.

“Ah- So good, Toru. Oh my god- hah-” you mewl at the change in angle. His pulsing dick expertly hitting that one spot inside you which has your words slurring together, body arching off the floor to press so impossibly close against him.

And, well, Satoru isn’t any better - because he’s slamming his cock into you mindlessly. Hitting that spot over and over.

With one hand, he caresses your stomach. Whispering out a ragged, “Feel me inside? Feel me right…” Pressing his palm down hard, “Here.”

The other forces you to look up at him, drinking in your whines of “Yes yes yes, can feel you s-so deep hngh- inside me, Toru.”

You’re so cockdrunk and full of Satoru that you barely notice the hands groping their way down your body. Catching harshly on your swollen clit, starting to draw, quick, frenzied circles that match the cadence of his hips smacking into yours.

“Look at me.” he murmurs raspily, “Open your mouth.”

And you can do nothing but take it, tongue lolling out so lewdly for the warm stream of spit that hits it. Once. Twice.

You look up at him with teary eyes, as you take it all - anything and everything he was giving. And it makes Satoru bow his head with a fucked-out groan, cock twitching so animalistically as it keeps plunging inside you roughly. Deft fingers on your clit becoming more desperate.

Harder. Faster. Balls squeezing so painfully. Like a lamb to slaughter, he was going to eat you up - and you were going to let thim.

You squeal at the overstimulation, hips bucking up for more more more-

“God, sweetheart, you don’t know what you do to me.” he moans, voice strained with desire and the euphoria of getting everything he’s wanted for so long. It was driving him insane. “Now c’mon. One more. Give me one more like my good girl.”

“Hngh- yes- Toru!”

You don’t even know what “one more” means anymore - all you do know is that you’re cumming and cumming all around Satoru’s unforgiving cock. Walls fluttering so snugly, your body convulses as you cream around his cock. Nails dragging down the expanse of his sculpted back, Satoru’s name leaving your bruised lips and into the heady air like a prayer every time his tip kisses your cervix. His new favorite melody.

And that seems to be what makes him snap as well - because with a final, sloppy thrust, he’s painting your walls such a sinful white. Pumping thick, hot ropes of his cum into your quivering cunt.

“Shit- yeah, my girl. Take it. Take it all f’me.” Satoru shudders above you, head thrown back, chest heaving as he fucks you through your high. Movements nothing more than shallow, mindless little thrusts to get you both off so animalistically.

It was so fucking filthy - and exactly what you needed so badly. He was exactly what you needed so badly.

Now, Satoru only had to take one look as you use him so obscenely for your pleasure - eyes dazed, drool trickling down the corner of your mouth - before he thinks he might just cum again. And again. And again until he physically couldn’t anymore.

But first…

Pulling out of your heavenly pussy with a lewd pop! His long fingers delicately collects the mixture of slick and cum now gushing out of you obscenely.

Aw, what a waste, Satoru muses as it pools below you sinfully. If it was up to him he wouldn’t waste a single drop from your pretty cunt.

But no matter.

Abruptly, Satoru bullies two fingers into your mouth - forcing you to taste yourself, to taste him. Pressing right at the back of your tongue in a way that has you choking and gagging around him, teary eyes just begging up at him. Perfect - you were so perfect for him.

Kissing your forehead with a tenderness that doesn’t match his actions, he hums, faux innocence lacing his words, “What a shame, the box didn’t open yet.”

And oh does he love the excitement lighting up your exhausted eyes. Pretty thighs twitching underneath him as a slow, fucked-out little smile curls your lips.

“One more? Please?”

A/N. Plagiarism not authorized.

#gojo x reader #gojo smut #gojo x you #jjk x reader #jjk smut #jjk x you #gojo satoru x reader #gojo satoru smut #gojo satoru x you #jujutsu kaisen x reader #jujutsu kaisen smut #jujutsu kaisen x you #jjk #jjk fic #jujutsu kaisen #gojo satoru #tonywrites

12K notes · View notes

mostlysignssomeportents · 8 months

Text

How I got scammed

If you'd like an essay-formatted version of this post to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:

https://pluralistic.net/2024/02/05/cyber-dunning-kruger/#swiss-cheese-security

I wuz robbed.

More specifically, I was tricked by a phone-phisher pretending to be from my bank, and he convinced me to hand over my credit-card number, then did $8,000+ worth of fraud with it before I figured out what happened. And then he tried to do it again, a week later!

Here's what happened. Over the Christmas holiday, I traveled to New Orleans. The day we landed, I hit a Chase ATM in the French Quarter for some cash, but the machine declined the transaction. Later in the day, we passed a little credit-union's ATM and I used that one instead (I bank with a one-branch credit union and generally there's no fee to use another CU's ATM).

A couple days later, I got a call from my credit union. It was a weekend, during the holiday, and the guy who called was obviously working for my little CU's after-hours fraud contractor. I'd dealt with these folks before – they service a ton of little credit unions, and generally the call quality isn't great and the staff will often make mistakes like mispronouncing my credit union's name.

That's what happened here – the guy was on a terrible VOIP line and I had to ask him to readjust his mic before I could even understand him. He mispronounced my bank's name and then asked if I'd attempted to spend $1,000 at an Apple Store in NYC that day. No, I said, and groaned inwardly. What a pain in the ass. Obviously, I'd had my ATM card skimmed – either at the Chase ATM (maybe that was why the transaction failed), or at the other credit union's ATM (it had been a very cheap looking system).

I told the guy to block my card and we started going through the tedious business of running through recent transactions, verifying my identity, and so on. It dragged on and on. These were my last hours in New Orleans, and I'd left my family at home and gone out to see some of the pre-Mardi Gras krewe celebrations and get a muffalata, and I could tell that I was going to run out of time before I finished talking to this guy.

"Look," I said, "you've got all my details, you've frozen the card. I gotta go home and meet my family and head to the airport. I'll call you back on the after-hours number once I'm through security, all right?"

He was frustrated, but that was his problem. I hung up, got my sandwich, went to the airport, and we checked in. It was total chaos: an Alaska Air 737 Max had just lost its door-plug in mid-air and every Max in every airline's fleet had been grounded, so the check in was crammed with people trying to rebook. We got through to the gate and I sat down to call the CU's after-hours line. The person on the other end told me that she could only handle lost and stolen cards, not fraud, and given that I'd already frozen the card, I should just drop by the branch on Monday to get a new card.

We flew home, and later the next day, I logged into my account and made a list of all the fraudulent transactions and printed them out, and on Monday morning, I drove to the bank to deal with all the paperwork. The folks at the CU were even more pissed than I was. The fraud that run up to more than $8,000, and if Visa refused to take it out of the merchants where the card had been used, my little credit union would have to eat the loss.

I agreed and commiserated. I also pointed out that their outsource, after-hours fraud center bore some blame here: I'd canceled the card on Saturday but most of the fraud had taken place on Sunday. Something had gone wrong.

One cool thing about banking at a tiny credit-union is that you end up talking to people who have actual authority, responsibility and agency. It turned out the the woman who was processing my fraud paperwork was a VP, and she decided to look into it. A few minutes later she came back and told me that the fraud center had no record of having called me on Saturday.

"That was the fraudster," she said.

Oh, shit. I frantically rewound my conversation, trying to figure out if this could possibly be true. I hadn't given him anything apart from some very anodyne info, like what city I live in (which is in my Wikipedia entry), my date of birth (ditto), and the last four digits of my card.

Wait a sec.

He hadn't asked for the last four digits. He'd asked for the last seven digits. At the time, I'd found that very frustrating, but now – "The first nine digits are the same for every card you issue, right?" I asked the VP.

I'd given him my entire card number.

Goddammit.

The thing is, I know a lot about fraud. I'm writing an entire series of novels about this kind of scam:

https://us.macmillan.com/books/9781250865878/thebezzle

And most summers, I go to Defcon, and I always go to the "social engineering" competitions where an audience listens as a hacker in a soundproof booth cold-calls merchants (with the owner's permission) and tries to con whoever answers the phone into giving up important information.

But I'd been conned.

Now look, I knew I could be conned. I'd been conned before, 13 years ago, by a Twitter worm that successfully phished out of my password via DM:

https://locusmag.com/2010/05/cory-doctorow-persistence-pays-parasites/

That scam had required a miracle of timing. It started the day before, when I'd reset my phone to factory defaults and reinstalled all my apps. That same day, I'd published two big online features that a lot of people were talking about. The next morning, we were late getting out of the house, so by the time my wife and I dropped the kid at daycare and went to the coffee shop, it had a long line. Rather than wait in line with me, my wife sat down to read a newspaper, and so I pulled out my phone and found a Twitter DM from a friend asking "is this you?" with a URL.

Assuming this was something to do with those articles I'd published the day before, I clicked the link and got prompted for my Twitter login again. This had been happening all day because I'd done that mobile reinstall the day before and all my stored passwords had been wiped. I entered it but the page timed out. By that time, the coffees were ready. We sat and chatted for a bit, then went our own ways.

I was on my way to the office when I checked my phone again. I had a whole string of DMs from other friends. Each one read "is this you?" and had a URL.

Oh, shit, I'd been phished.

If I hadn't reinstalled my mobile OS the day before. If I hadn't published a pair of big articles the day before. If we hadn't been late getting out the door. If we had been a little more late getting out the door (so that I'd have seen the multiple DMs, which would have tipped me off).

There's a name for this in security circles: "Swiss-cheese security." Imagine multiple slices of Swiss cheese all stacked up, the holes in one slice blocked by the slice below it. All the slices move around and every now and again, a hole opens up that goes all the way through the stack. Zap!

The fraudster who tricked me out of my credit card number had Swiss cheese security on his side. Yes, he spoofed my bank's caller ID, but that wouldn't have been enough to fool me if I hadn't been on vacation, having just used a pair of dodgy ATMs, in a hurry and distracted. If the 737 Max disaster hadn't happened that day and I'd had more time at the gate, I'd have called my bank back. If my bank didn't use a slightly crappy outsource/out-of-hours fraud center that I'd already had sub-par experiences with. If, if, if.

The next Friday night, at 5:30PM, the fraudster called me back, pretending to be the bank's after-hours center. He told me my card had been compromised again. But: I hadn't removed my card from my wallet since I'd had it replaced. Also, it was half an hour after the bank closed for the long weekend, a very fraud-friendly time. And when I told him I'd call him back and asked for the after-hours fraud number, he got very threatening and warned me that because I'd now been notified about the fraud that any losses the bank suffered after I hung up the phone without completing the fraud protocol would be billed to me. I hung up on him. He called me back immediately. I hung up on him again and put my phone into do-not-disturb.

The following Tuesday, I called my bank and spoke to their head of risk-management. I went through everything I'd figured out about the fraudsters, and she told me that credit unions across America were being hit by this scam, by fraudsters who somehow knew CU customers' phone numbers and names, and which CU they banked at. This was key: my phone number is a reasonably well-kept secret. You can get it by spending money with Equifax or another nonconsensual doxing giant, but you can't just google it or get it at any of the free services. The fact that the fraudsters knew where I banked, knew my name, and had my phone number had really caused me to let down my guard.

The risk management person and I talked about how the credit union could mitigate this attack: for example, by better-training the after-hours card-loss staff to be on the alert for calls from people who had been contacted about supposed card fraud. We also went through the confusing phone-menu that had funneled me to the wrong department when I called in, and worked through alternate wording for the menu system that would be clearer (this is the best part about banking with a small CU – you can talk directly to the responsible person and have a productive discussion!). I even convinced her to buy a ticket to next summer's Defcon to attend the social engineering competitions.

There's a leak somewhere in the CU systems' supply chain. Maybe it's Zelle, or the small number of corresponding banks that CUs rely on for SWIFT transaction forwarding. Maybe it's even those after-hours fraud/card-loss centers. But all across the USA, CU customers are getting calls with spoofed caller IDs from fraudsters who know their registered phone numbers and where they bank.

I've been mulling this over for most of a month now, and one thing has really been eating at me: the way that AI is going to make this kind of problem much worse.

Not because AI is going to commit fraud, though.

One of the truest things I know about AI is: "we're nowhere near a place where bots can steal your job, we're certainly at the point where your boss can be suckered into firing you and replacing you with a bot that fails at doing your job":

https://pluralistic.net/2024/01/15/passive-income-brainworms/#four-hour-work-week

I trusted this fraudster specifically because I knew that the outsource, out-of-hours contractors my bank uses have crummy headsets, don't know how to pronounce my bank's name, and have long-ass, tedious, and pointless standardized questionnaires they run through when taking fraud reports. All of this created cover for the fraudster, whose plausibility was enhanced by the rough edges in his pitch - they didn't raise red flags.

As this kind of fraud reporting and fraud contacting is increasingly outsourced to AI, bank customers will be conditioned to dealing with semi-automated systems that make stupid mistakes, force you to repeat yourself, ask you questions they should already know the answers to, and so on. In other words, AI will groom bank customers to be phishing victims.

This is a mistake the finance sector keeps making. 15 years ago, Ben Laurie excoriated the UK banks for their "Verified By Visa" system, which validated credit card transactions by taking users to a third party site and requiring them to re-enter parts of their password there:

https://web.archive.org/web/20090331094020/http://www.links.org/?p=591

This is exactly how a phishing attack works. As Laurie pointed out, this was the banks training their customers to be phished.

I came close to getting phished again today, as it happens. I got back from Berlin on Friday and my suitcase was damaged in transit. I've been dealing with the airline, which means I've really been dealing with their third-party, outsource luggage-damage service. They have a terrible website, their emails are incoherent, and they officiously demand the same information over and over again.

This morning, I got a scam email asking me for more information to complete my damaged luggage claim. It was a terrible email, from a noreply@ email address, and it was vague, officious, and dishearteningly bureaucratic. For just a moment, my finger hovered over the phishing link, and then I looked a little closer.

On any other day, it wouldn't have had a chance. Today – right after I had my luggage wrecked, while I'm still jetlagged, and after days of dealing with my airline's terrible outsource partner – it almost worked.

So much fraud is a Swiss-cheese attack, and while companies can't close all the holes, they can stop creating new ones.

Meanwhile, I'll continue to post about it whenever I get scammed. I find the inner workings of scams to be fascinating, and it's also important to remind people that everyone is vulnerable sometimes, and scammers are willing to try endless variations until an attack lands at just the right place, at just the right time, in just the right way. If you think you can't get scammed, that makes you especially vulnerable:

https://pluralistic.net/2023/02/24/passive-income/#swiss-cheese-security

Image: Cryteria (modified) https://commons.wikimedia.org/wiki/File:HAL9000.svg

CC BY 3.0 https://creativecommons.org/licenses/by/3.0/deed.en

#pluralistic #social engineering #phishing #ai #swiss cheese security #infosec #finance #fraud #carding

10K notes · View notes