Sunday Coffee & Conversation: The Week You Learned to Keep the Receipt

Disclaimer: This is general guidance only. If you are in immediate danger, a crime is in progress, or your safety is at risk, stop reading and call 911. This article discusses common fraud, privacy, and evidence-preservation concerns. It is not legal, banking, law-enforcement, or accounting advice. Rules differ by location and situation. Independently verify important information with your bank, local law enforcement, a qualified attorney, or another appropriate professional.

The parking-lot light at FindASpy headquarters has developed a strong opinion about clouds.

Every evening, it comes on about twenty minutes before sunset. That part is predictable. But when a cloud passes over headquarters in the middle of the afternoon, the light switches on, stays lit for four minutes, and then turns off as if it has reconsidered the evidence.

A client asked last week whether the building was signaling someone.

I checked twice. It is not signaling anyone. It is simply a light with a dramatic relationship to weather.

Riplee finds this reassuring in a way he cannot explain. We are on the porch with a cold-brewed iced coffee and a splash of oat milk, and I have a My Father Le Bijou 1922 burning down slow beside the notebook. I admit this is the first iced coffee I have ever ordered on purpose.

This week had one clear lesson: the difference between what you are told and what you can prove matters.

A tracking device under a car, a cashier’s drawer short ten dollars, a bag of bricks, a counterfeit money order, a police report nobody wants to take, and a laptop in a coffee shop all came down to the same question:

What record did you keep, and who can check it?

Nothing this week was solved by being clever. Every story was solved by being prepared.

Monday, October 19: How to Tell if You’re Being Tracked

“Am I being tracked?” is really three questions.

Is a company tracking me? Almost certainly, through ordinary app, advertising, and location settings. That is usually manageable through account and privacy controls.

Is a person tracking me? That requires checking devices, accounts, vehicles, and routines.

Is a stranger tracking me? That requires caution, documentation, and sometimes professional help.

The self-sweep starts with the phone. Look for apps you did not install. Review Device Administrator and Accessibility permissions. These are settings that can give an app unusual control over a phone. Check for a configuration or management profile you did not add, an unknown VPN, location access set to “Always,” and unfamiliar account-recovery contacts.

Next, check the car. Look at the OBD-II port first. That is the diagnostic socket usually found beneath the dashboard. Then inspect bumpers, wheel wells, seats, and trunk lining in daylight. If you find something unusual, photograph it in place. Do not open, destroy, or discard it. Call the non-emergency police line.

For accounts, review signed-in devices and email-forwarding rules. An email-forwarding rule automatically sends messages somewhere else, and it can allow monitoring to continue even after you change a password.

At home, make an object list and look for physical changes. Remember the honest limitation: a hidden camera recording to a memory card transmits nothing, so a radio detector will not find it.

Three field habits help: agree on a one-word safety trigger with someone you trust; document a found device so it becomes a witness rather than a souvenir; and deliberately break one routine each week to see what follows.

No gadget certifies a room clean. When the stakes are real, use a qualified professional sweep. Also, do not factory-reset a phone or computer that may contain stalkerware, which is software used to monitor someone secretly. A reset destroys evidence and may alert the person watching.

Click to read the full article

Tuesday, October 20: The Coffee That Cost Ten Dollars

A seven-dollar-forty-cent coffee is paid for with a twenty-dollar bill. The correct change is twelve dollars and sixty cents.

Then the customer asks for a different combination of bills. Another request follows. Then another. The cashier’s attention moves between bills, coins, the register, and the customer’s conversation.

Finally, the customer asks for the twenty-dollar bill back and returns some of the change. The original bill and the money already handed over become confused. The customer leaves with the twenty dollars plus two dollars and sixty cents. The drawer is short ten dollars, including the unpaid coffee.

This is called a quick-change scam, or change raising. The thief does not touch the wallet. The thief touches the employee’s attention.

It works on good employees because speed defeats accuracy. Every request sounds reasonable, and refusing a customer can feel rude.

The defense is a rule, not intelligence: complete one transaction at a time with the drawer closed. Keep the customer’s original bill on the ledge outside the drawer until the sale is complete. Say the denomination aloud and count the change aloud. If you lose the count, stop, put the money down, and restart from zero.

If the customer pushes, return the money and call a manager. A real customer waits. A change-raiser leaves.

The same trick happens afterward, when someone returns claiming to have been shortchanged and pressures staff to pay out immediately. Recheck the receipt, drawer record, and manager log before making any adjustment.

Click to read the full article

Wednesday, October 21: You Bought the Watch and Went Home With the Brick

The vendor bag-switch scam begins with a genuine item. You inspect the real watch, camera, jewelry, or electronics. The theft occurs during packaging, often while someone distracts you.

One version places bricks or weights beneath a sealed box so the bag feels correct. Another uses a genuine demonstration item but substitutes a cheaper lookalike in the box. Some sellers claim customs, tax, or warranty rules prohibit opening the package.

Other versions involve goods sold by weight, a promise to ship the item home, an invented customs fee, or an accomplice who bumps you as the bag is packed.

Distance is the scam’s greatest ally. You have a flight to catch. The stall may have no licensed storefront. The receipt may have no business name or tax number. Crossing a border makes recovery harder.

Watch the item go into the bag. Keep one hand for money and one for the goods. Open the package before leaving, using a simple line: “I inspect every purchase before I go.” Never accept a sealed box you have not seen. Agree on the price before anything is cut or weighed.

Insist on a receipt with the business name and address. Photograph the stall, receipt, and item together. Walk away from urgency, secret prices, and anyone who says the offer is available only to you.

Click to read the full article

Receipts, a timeline, numbered evidence envelopes, and a magnifying glass arranged on a table

Thursday, October 22: The Money Order That Bounced

“Accepted” is not the same as “settled.”

A money order or cashier’s check can be counterfeit or altered and still appear in your account. A counterfeit is a fake instrument. An altered instrument begins as genuine paper but has been changed, such as a low-value money order modified to show a larger amount.

The bank may accept the deposit and provide provisional credit. That means money is made available while the bank collects the payment. Federal funds-availability rules exist so banks cannot hold every deposit indefinitely. They do not certify that the instrument is genuine.

The item travels through the collection system. The paying bank may later reject it as counterfeit, altered, or drawn on an account that does not exist. Your bank reverses the credit, leaving you with the loss. The result may include overdraft fees, returned-payment fees, credit damage, a frozen account, an internal bank risk flag, or collections action.

Watch for disturbed ink around an amount, inconsistent printing, suspicious paper, and physical features that do not match the current design. A newer postal money order design includes security features intended to resist counterfeiting, but no visual check replaces independent verification.

Use a telephone number you find yourself, not the number printed on the instrument. Ask your bank whether the item has actually cleared, not merely whether the funds are available.

Click to read the full article

Friday, October 23: They Looked at Me Like I Was the Crazy One

A fraud report may be set aside because patrol officers are not fraud specialists, an agency has no cybercrime unit, or the situation crosses states or countries. A case with no named subject competes poorly against a case with a lead.

The fix is preparation rather than persuasion.

Build a one-page summary. Create a chronological timeline. Number each exhibit, which is a piece of evidence such as a receipt, message, envelope, or payment instrument. Organize the evidence to match that list.

Export original files instead of photographing a screen. Screenshots may remove important file information called metadata. Do not delete embarrassing messages. Keep counterfeit instruments, envelopes, gift cards, and the bank’s fraud case number. Maintain a chain-of-custody log, meaning a dated record of who possessed evidence and when.

Florida is an all-party consent state for private communications. If you are unsure whether a recording is lawful, do not record. Write a dated summary or send a confirming email instead.

Go in person during business hours. Ask for the financial-crimes or cyber unit by name. Leave with a report number, the name and unit handling the case, and instructions for submitting more evidence.

Depending on the matter, report through the FBI Internet Crime Complaint Center, the Federal Trade Commission, the Postal Inspection Service for mail fraud, the state attorney, or the state consumer-protection office.

An attorney can distinguish a civil dispute from a criminal matter. A licensed private investigator can prepare a structured report and document evidence properly. Neither can make an arrest, compel records, or promise an outcome.

Nobody investigates a story. They investigate a file.

Click to read the full article

Saturday, October 24: Leave Like a Ghost

Assume that anything you type on a device you do not own can be seen by someone else. Assume anything you leave behind can be copied.

Low-risk browsing is one category. Email and ordinary research are more sensitive. Banking, medical portals, tax records, cryptocurrency, password managers, payment cards, and Social Security information belong in the third category: do not handle them on someone else’s device.

Before sitting at a public computer, look for an unexplained adapter between the keyboard and computer. Check camera sightlines. Sit with your back to a wall, angle the screen away, and use a privacy filter. A privacy filter is a thin screen overlay that narrows the viewing angle so only the person directly in front can read it.

If you must use a shared computer, use private browsing for local housekeeping, but understand its limit. Private mode does not defeat malware, a keylogger, or network monitoring. Decline every password-saving prompt. Sign out properly. Closing a tab is not the same as ending a session. Clear history, cookies, cached files, and form data. Check downloads, the desktop, and the printer queue. Collect every page.

Change any sensitive password later from your own device.

On public Wi-Fi, ask staff for the exact network name. A fake hotspot is called an evil twin because it imitates a legitimate network. HTTPS encrypts the connection between your browser and a website, but it does not make a compromised computer safe. Forget the network when you leave and turn off auto-join.

Avoid unknown USB charging ports. Juice jacking is the risk that a USB connection may carry data as well as power. Use an AC outlet, your own charger, or a data-blocking adapter.

A stranger’s helpfulness is not a technical credential.

Click to read the full article

Riplee’s Takeaway

Riplee adjusts his fedora and sunglasses.

“A signal with nobody behind it is just weather,” he says. “It is worth knowing the difference between being watched and being rained on.”

The parking-lot light switches off. My iced coffee is nearly gone, and the My Father Le Bijou 1922 has turned into a respectable line of ash. Riplee says next Sunday we should discuss the records people keep about themselves before they realize those records matter.

The Week’s Top Ten Spy and Cybersecurity Movies

Tracer’s Five

  1. All the President’s Men (1976)
    Two reporters build a case from documents and phone calls. A story becomes a case only when someone writes it down and checks it twice.

  2. Zodiac (2007)
    An amateur becomes the best investigator in the room because he never stops filing. It shows both the power and the cost of a timeline.

  3. The China Syndrome (1979)
    A small discrepancy in a record becomes the thread that unravels everything. The person who documents arrives prepared.

  4. Spotlight (2015)
    This is methodical verification on film: archives, interviews, cross-checking, and patience. It rewards careful work instead of dramatic shortcuts.

  5. Michael Clayton (2007)
    A fixer’s job is to make evidence disappear. The lesson is simple: one retained document can beat an entire institution.

Riplee’s Five

  1. The Sting (1973)
    The whole game is what the mark believes he has seen. A well-built lie collapses the moment someone demands proof.

  2. Catch Me If You Can (2002)
    A forger survives on confidence, timing, and paperwork. Riplee notes that every version of that trick still exists online.

  3. The Thomas Crown Affair (1968)
    Crime built on patience and precision. Preparation beats improvisation, especially when everyone assumes the room is secure.

  4. Inside Man (2006)
    The plan depends on what negotiators are allowed to see. Riplee calls it a reminder that missing information is still information.

  5. The Bourne Identity (2002)
    An amnesiac survives by refusing to trust records about himself. Riplee calls it “a documentary about paperwork, honestly.”

Community Conversation

Community disclaimer: Please do not post private names, addresses, account numbers, case numbers, passwords, or identifying details about another person. Share only what you are comfortable making public. For urgent danger or a crime in progress, call 911.

Which State are you writing from? Which of the six stories came closest to home: tracking, quick-change fraud, a bag switch, a counterfeit payment, difficulty making a report, or public-device security?

What record-keeping habit will you start this week: saving original files, keeping a timeline, photographing purchases, checking account devices, or simply keeping the receipt?

Tracer reads all posts.

Coffee Challenge

  1. Keep every receipt for one week and photograph the important ones.
  2. Review the signed-in devices and email-forwarding rules on one account.
  3. Write a one-page emergency contact and evidence checklist for your household.

Quiet giveaways are sometimes shared with the community as a thank-you for participation. Tracer’s Pick is the phrase to watch for, and you can enter in when a community activity is announced.

For discreet help finding a next step, call Patricia at 321-342-0040.

FindASpy Directory

This information is for adults age 18 and older. Use all products, tools, and information lawfully and responsibly.

Author

Morning Coffee with Tracer

Sterling Reed “Tracer” is a privacy and security professional who writes about surveillance detection, fraud awareness, evidence preservation, and practical protection for families, professionals, and organizations.

Meet Sterling Reed – "TRACER"

Reader importance rating

How important was this article?

Your vote helps determine FindASpy Insider’s Readers’ Top Picks. One rating is allowed per reader for each article.

0 reader ratings

Share this article

COFFEE WITH TRACER COMMUNITY

Today’s Coffee Conversation

Tracer shares cybersecurity stories, scam alerts, privacy tips, and investigative insights. Pull up a chair, share your experience, and help shape tomorrow’s discussion.

Pull Up a Chair & Chat with Tracer

Community protection: Comments may be reviewed before appearing to keep the conversation respectful, helpful, and spam-free.

0Conversations
0Community Likes
0Tracer’s Picks