Kid Fakes Dad to Get a New Phone Line Installed

A future security executive describes how, as a young teenager, he used deception to get a phone company to install a second phone line at his home. He posed as his father using a forged letter and a believable technical-sounding request (“dedicated low-noise line for a modem”), successfully convincing the installer. The story is a real example of social engineering: exploiting trust and weak identity checks to get unauthorized service.

Key findings

• The attacker (as a teen) impersonated a parent to order and authorize installation of a second phone line.
• The scam relied on weak verification: the installer had “nothing to verify the signature against.”
• The pretext sounded legitimate and technical: a “dedicated low-noise line for a modem.”
• The attacker ensured they were home alone at installation time and presented a forged authorization letter.

Who’s being targeted

• Commonly targeted roles: Field Technicians, Customer Service / Call Center, Provisioning / Service Activation Teams, Operations Managers (service providers).
• Affected industries: Telecommunications, Field services / on-site technicians, Utilities and service providers (identity verification processes).
• Attack channels: physical.
• Impersonated: Customer’s parent/account holder (father).

Awareness takeaways

• Do not approve service changes or installations based only on a letter or signature, verify the requester using a known, independent method.
• Treat technical-sounding requests as a potential pressure tactic; require standard verification even when the story sounds knowledgeable.
• Be alert when the authorized account holder is not present during on-site work; confirm authorization before proceeding.

Red flags to watch for

• Authorization is only a letter/signature with no independent verification
• Account holder is not present; a minor/other person is attempting to approve work
• Request is framed with convincing technical detail to reduce scrutiny