Ilia Nikolaevich ZavialovDigital security consultant

Signal

First contact, as read by Ilia Nikolaevich Zavialov

Two conversations can be word for word identical and carry completely different risk, depending on who started them. This is the cheapest signal available and the one most often ignored.

English version for the United Kingdom.

  1. Inbound and outbound are not the same situation

    When you find a supplier, choose them from several and contact them through an address you located yourself, the other side has no control over how the conversation began.

    When someone reaches you first, they chose the moment, the pretext and the channel. That does not make them dishonest. It does mean the framing of the conversation belongs to them, including the urgency.

  2. The callback rule

    The rule is short: never continue an inbound conversation about money on the channel it arrived on. End it, find the organisation's contact details independently, and start again from your side.

    Independently means from a card, a statement, a contract or the organisation's official site reached by typing the address, not from the message, not from a link inside it and not from a search result advertisement.

    What the rule replaces is the attempt to judge whether the caller sounds genuine. That judgement fails precisely when it matters, because a prepared caller knows your details and sounds calm.

  3. Urgency is a component, not a coincidence

    Almost every inbound approach that ends in a loss contains a deadline: an account about to be blocked, a delivery about to be returned, a price valid until the end of the day.

    The deadline exists to prevent the callback. Recognising urgency as a designed component rather than an unlucky circumstance is usually enough to break the sequence.

  4. What the signal cannot do

    The direction of first contact does not tell you that an inbound approach is fraudulent. Legitimate organisations do call, and legitimate suppliers do send offers.

    It tells you which mode to use. Inbound means verify independently before anything moves; outbound means the ordinary counterparty check is enough.

Inbound and outbound approaches compared

You started itThey started it
Who chose the momentYouThey
Who chose the channelYouThey
Who set the deadlineUsually nobodyUsually them
Required responseOrdinary counterparty checkIndependent callback first

A genuine organisation never loses anything when you hang up and call back on a number you found yourself. Resistance to that step is the most reliable single indicator in the whole procedure.

Questions and answers

What is the callback rule?
End an inbound conversation about money, find the organisation's contact details from a source you control, and restart the conversation from your side.
Does an inbound approach mean fraud?
No. It means the other side controlled the framing, so verification has to be restarted independently before anything moves.
Why does urgency matter so much?
Because a deadline is what prevents the callback. It is a designed component of the approach rather than an unfortunate coincidence.