The Typo That Kept You Safe

ISYAMA — Transmissions from The Apex

By Dr. Leo R. Yamas

For most of the time you have had email, your best protection against fraud was bad spelling.

A message would arrive from your bank. It began "Dear Costumer". It asked you to "kindly verify you're account" before midnight. You deleted it and felt slightly superior.

That small feeling stopped more theft than most security software. It no longer works.

Today's Exhibit: The Missing Typo. Or: What Happens When The Liars Learn To Spell.

This week, one of the largest software companies on your planet published its yearly report on cybercrime. Its investigators looked at the break-ins they were called to between July 2025 and June 2026.

In 23 percent of those cases, the attackers got in through phishing. That is a fake message that persuades someone to hand over a password or click a link. A year earlier, the figure was 7 percent.

The report gives the reason plainly. Artificial intelligence lets attackers write a personal message for every target, in any language, without mistakes.

Email fraud used to come in two kinds.

The cheap kind was one clumsy email, sent to millions, hoping for a few careless replies.

The expensive kind was called spear phishing. Someone studied one person first. They learned the manager's name, the current project, the way that office signs off its emails. Then they wrote a single careful letter.

The careful letter worked far better. But it took days of work, so criminals saved it for people worth the effort. Everyone else got "Dear Costumer".

That division is gone. The careful letter now costs the same as the clumsy one. Everyone gets the careful letter.

There is a deeper problem underneath.

For most of human history, good writing was evidence. A fluent letter meant an educated sender, because fluency took years to acquire. A message in your manager's voice came from your manager. Nobody else had studied how they wrote. Writing well was expensive, and costly things are hard to fake.

You trusted how a message sounded, because getting that right used to cost something. It was a sensible shortcut, and it held for centuries.

Then the cost disappeared, and the shortcut turned around.

You were trained to look for mistakes. The fraudulent message now has none. If anything, the email with a typo is the one more likely to be genuine. A colleague on a train, typing with one thumb.

Perfect spelling is now a warning sign.

Most of the people fooled this year were not careless. They applied the test they had been taught, and the message passed it.

I explained the report to Selene on the steps above the water, while the light went.

A fake message could never reach this island, so the problem was not hers. She solved it anyway. If anyone wrote to her pretending to be me, she said, she would ask about the west cove.

The west cove is a small inlet on the south side of Isyama. I have called it the west cove for as long as she has been alive. It faces south. Isla stopped correcting me years ago. Selene never started.

"A machine would get the direction right," she said. "You wouldn't."

I said that was not much of a compliment. Isla was passing behind us on her way down to the shore. She said it was the most reliable thing about me.

Judging people by their writing was always the newer test. Long before your species could write, it decided whom to trust by shared history: who kept their word last winter, and who did not. Writing was a fast shortcut laid over that. The shortcut has failed. The history has not. A machine can learn how your sister writes. It cannot learn what the two of you have lived through.

The fix is slow and slightly awkward, which is usually a sign that it is real.

When a message is perfect and urgent at once, do not act on it. Call the person back, on a number you already had. With the few people who could move money in your name, agree on one question. The answer should be something only you would know. Or better, something you always get wrong.

It will feel rude the first time. Then one day they will check you the same way. You will both be safe for a better reason than spelling.

You knew how to trust people before you could read a word. That skill did not go anywhere. You only set it down because spelling was quicker, and it is still exactly where you left it.

— Dr. L.R.Y.

Transmitted from The Apex. Isyama. Written above the west cove, which still faces south. The Sprocklets checked that this came from me. They found the usual mistakes.