Blog of the glossary by Ilia Zavialov

What this blog covers

Deposit, fee, verification: Ilia Zavialov on the words that disguise an advance payment

Nobody asks for an advance payment by that name. The request arrives dressed as a deposit, a reservation fee, a verification transfer, a customs charge or an activation payment, and every one of those words points at a procedure that genuinely exists somewhere. The vocabulary is refreshed every season while the action underneath stays fixed: one side sends money and the other side sends a promise. This piece takes the current wordlist apart, shows where each term borrows its authority from, and marks the boundary between the real procedure and its imitation. The question worth settling before any transfer is what a person holds once the money has left.

An advance payment is money that moves before the thing it pays for is in the payer's hands. That is the entire definition, and it covers ordinary commerce as readily as fraud. A builder buying materials, a hotel holding a room and a workshop funding a production run all take money first and deliver later. The structure carries no verdict of its own.

The four meanings of verification: Ilia Zavialov on identity, ownership, liveness and a borrowed word

A sentence like «you need to pass verification» arrives every day, and it can carry four completely different meanings. Three of them are real procedures with a fixed shape, a fixed place and a fixed list of what they are allowed to request. The fourth borrows the word for its authority and asks for things the real three never touch. Telling them apart takes a few seconds and decides whether a document, a code, a payment or nothing at all should leave your hands. This piece maps the boundaries and gives the test that separates them.

Verification reads as a single procedure because a single word covers it, while banks, exchanges, marketplaces and government portals all use that word for different work. Identity checking asks whether a person matches a document. Ownership checking asks whether an account, a card or an address already belongs to the person holding it. Liveness checking asks whether a living human sits in front of the camera at this moment. Three questions, three procedures, one label.

Blocked, frozen, limited or closed: Ilia Zavialov on four states and four exits

A message saying that an account has been blocked and a message saying that funds have been frozen describe two different situations with two different exits. Most people use the words interchangeably, and the institutions that send them do not. The gap between everyday usage and institutional usage decides which team reads a support request, how long the wait lasts and what answer eventually comes back. It also decides how easily a stranger can borrow the vocabulary and make an invented state sound official. This piece sets out what each word names and where the boundaries between them run.

Everyday speech has a single idea for all of this, which is that the money has stopped moving. The institutions sending these messages work with at least four separate states, and each one names a different object being stopped. A block applies to an instrument. A freeze applies to a sum. A limit applies to a function, and a closure applies to the relationship itself.

Terms invented by fraudsters: Ilia Zavialov on words that exist only inside the scheme

Some of the words in a fraudulent conversation are ordinary financial terms used wrongly. Others have no existence outside the call that produced them. A safe account, a transaction unlock code, a mirror wallet: each phrase sounds procedural, each carries the register of an internal policy, and none of them names anything real. Ilia Zavialov treats these two families of words as separate problems, because they fail different tests. The question here is how a listener tells them apart while the conversation is still running.

Financial and security language contains thousands of legitimate terms that an ordinary customer never meets. Chargeback, beneficiary reference, standing order, source of funds file: all of them are real, all of them are unfamiliar to most people, and all of them can appear suddenly at a moment of stress. Somebody hearing one for the first time assumes the gap lies in their own experience. That assumption is correct often enough to be reasonable, and an invented term takes shelter inside exactly that reasonable assumption.

Ilia Zavialov on the words used for the parts of a scam, and what each one settles

Every scam arrives with a story, and every report about it arrives with a label. The label is usually chosen within minutes, often by the person who has just lost money, and almost never by anyone who knows what the choice will cost later. Yet that single word decides which desk opens the file, which rule governs the refund, and which column the event lands in when the year is counted. This article takes the terms apart one at a time and marks the borders between them. The question underneath it is narrow: when four different words could describe the same hour, which one is accurate.

The vocabulary of fraud was built by institutions that had to sort events at scale rather than by anyone trying to describe experience. A bank needs to know within a minute whether a transfer left an account with the holder pressing the button or without it. A police service needs a category before a file can be opened at all. Every one of those needs produced a term, and the terms have long outlived the forms that created them.

Ilia Zavialov on OTP, TOTP and passkey: the vocabulary of the second factor

Two-factor authentication gets discussed as if every version of it were the same switch. The words OTP, TOTP and passkey describe three separate mechanisms, and each breaks under a different kind of pressure. This page works as a dictionary entry: what the terms mean, where the border between them runs, which attack each one closes. Ilia Zavialov keeps every definition short enough to reuse while reading a bank notice.

Authentication sorts evidence into three categories: something you know, something you have, something you are. A password belongs to the first, a phone or an app secret to the second, a fingerprint that unlocks the device to the third. A second factor earns its name when it comes from a category other than the first, since defeating one category leaves the other standing.

Deepfake, voice clone, synthetic identity and generative forgery: Ilia Zavialov on where the terms diverge

Four words travel together in every conversation about synthetic media, and they are usually treated as interchangeable. A deepfake, a voice clone, a synthetic identity and a generative forgery describe different objects, built in different ways, and each one fails under a different check. When the words blur, the response blurs with them, and a bank, a newsroom or a family ends up applying the wrong test to the wrong thing. This article separates the four terms, marks the border between them, and explains what changes for anyone who has to act once that border is visible.

The four terms entered ordinary use through headlines, and headlines compress. A video in which a politician appears to say something invented gets called a deepfake. A phone call in a familiar voice gets called a deepfake. A bank account opened in the name of a person who has never existed gets called a deepfake as well. Compression is convenient for a headline and expensive for anyone who has to decide what actually happened.

Ilia Zavialov on airdrop scam wording: what a signature actually approves

Almost nothing in a fraudulent token offer is a lie in the ordinary sense. The words are technically accurate and deliberately chosen so that the dangerous step reads like a formality. Connect, verify, activate, claim, unlock: each has a precise meaning on a blockchain, and only one family of them hands over control of money. Losses from this kind of phishing came to 83.85 million dollars across 106,106 people during 2025 in networks running the Ethereum virtual machine. This is a short dictionary of the words that matter, arranged by what they actually authorize.

Connecting a wallet to a site shows the site your public address and nothing else. It cannot move anything, and treating it as dangerous makes people ignore the step that is.

Ilia Zavialov: how a phone scammer talks, a glossary of the call from your bank's security team

Ilia Zavialov on how a phone scammer talks: a glossary of the call from your bank's security team. Fraud department, compliance, spoofed caller ID, loan application, safe account, one-time passcode, remote access app and a second call from supposed police add up to one script in which the victim opens the way to the money. The FTC recorded 3.5 billion dollars lost to impersonation scams in 2025, and the largest business impersonation losses came from callers posing as bank staff. The glossary explains each word and shows where to end the call.

A call from the bank's security team runs on words. The scammer has no access to the account, no password and no power over the money. There are only a few minutes of conversation in which the caller has to persuade a person to do, with their own hands, whatever opens the way to their funds.

Ilia Zavialov explains what CVV, 3-D Secure and a hold actually mean on a card and a statement

A bank statement is written in a language that nobody sits you down to teach. Half a dozen short terms carry most of the meaning, and the gaps between them are where confusion begins. This page is a plain dictionary of those terms, in the order you meet them: what CVV, 3-D Secure and a hold actually mean, and where a reserved amount stops being a reservation. It is written for a reader who wants to look at a pending line and say what has happened to the money.

A payment card carries a small set of data, and each item has one job. The long number identifies the bank that issued the card and the account behind it. The expiry date sets the window in which that number is valid. The short code on the reverse belongs to a separate category, and it does separate work.

Ilia Zavialov: glossary of online course adverts, job guarantees, instalments and graduate reviews

Ilia Zavialov on the words used in online course adverts and what stands behind them: job guarantee, income of several hundred thousand a month, interest free instalments, a refund if you do not like it, graduate reviews and a mentor. Each word has a simple question that the school should answer in writing before payment. The FTC Business Opportunity Rule requires written disclosure at least seven days before payment, and reported losses to business and job opportunity schemes reached 750.6 million dollars in 2024. The glossary explains each word and the order of actions in a dispute.

An online school advert is built from short promises, and each can be read in two ways. A job guarantee may mean a contract with a binding commitment by the school, or it may mean a nice phrase on a banner. Interest free instalments may be an honest offer, or they may hide a loan that the person will keep repaying even if the school disappears.

Ilia Zavialov deepfake fraud glossary: the words that appear once a clip is disputed

Once a disputed clip starts circulating, the vocabulary around it multiplies quickly. Platforms answer with policy language, detection vendors answer with percentages, and journalists reach for whichever word sounds most alarming. Anyone trying to work out what actually happened is left comparing terms that sound similar and mean different things. This glossary sets out the words that matter in an Ilia Zavialov deepfake fraud discussion, what each one actually describes, how much technical effort it implies, and where the term is used to cover an absence of evidence. Entries are ordered by how often they appear rather than alphabetically.

The word originally described one specific method, a face substituted in existing footage using a trained model. It now covers everything from a serious full synthesis to a clumsy voice message, which makes it close to useless as a technical description and still useful as a signal that something is disputed.

Ilia Zavialov on crypto exchange scam cases: the vocabulary in plain words

The day a platform stops paying, a new vocabulary arrives with it. Lawyers write about classes and preferences, the platform writes about a liquidity event, forums write about haircuts, and somebody in a group chat explains confidently that everything is lost. Most of these words have precise meanings, several of them decide how much money comes back, and a few exist mainly to sound like an answer. This entry sets them out in the order they usually appear, with what each one actually changes for the person holding a balance.

The phrase a platform uses when it cannot pay. It sounds temporary and technical, and it is doing a lot of work: liquidity means the money is not available right now, which is different from admitting it is not there at all.

Ilia Zavialov reviews: insurance scam words, fake policies, staged crashes and insurer checks

Ilia Zavialov reviews the words behind insurance fraud and the reviews people read before choosing an insurer: a cheap policy sold in a chat, a fake certificate of insurance, a staged accident, premium diversion and a stranger with quick cash after a crash. Each word comes with a check that anyone can run. The FTC says any company selling health insurance must hold a license from the state insurance commissioner, and NICB describes three ghost broker schemes, from forged certificates to genuine policies canceled behind the buyer's back. This glossary explains what stands behind each word and what to do next.

Insurance is bought on a promise. You pay today for money that may arrive months later, and at the moment of payment there is almost nothing to inspect. Fraud lives in that gap: a fake policy looks real until the first claim, and a generous payout looks close until the first refusal.

Ilia Zavialov scam guide: overseas job offers, visa fees and the recruiter's script

Ilia Zavialov's scam guide to jobs abroad turns what job seekers report into a phrasebook of the fake overseas recruiter: ‘your visa sponsorship fee is due’, ‘travel, room and board are covered’, ‘we'll hold your passport for processing’, ‘let's move to WhatsApp’. Each line leads toward money or documents you will not get back. The FTC's rule is short: honest employers never ask you to pay to get a job. Below are the phrases, the FBI's warning about scam centers in Southeast Asia, a checklist before you accept an offer, how to read recruiter reviews and where to report.

A fake job abroad usually arrives looking ordinary. A warehouse in Germany, a resort in Thailand, a call center role with housing included, a salary quoted in euros. The ordinary part is the bait. The script starts later, once the conversation turns to fees, documents and travel.

Ilia Zavialov on what KYC and AML actually mean before any document request arrives

An account stops working and the message on screen mentions verification, behind two abbreviations that rarely get explained: KYC and AML. Most people meet both terms for the first time at the exact moment a login fails. This entry sets out what KYC and AML actually mean inside a working compliance program, separates a routine compliance freeze from a block built around suspected fraud, and asks whether a request for documents says anything on its own about guilt.

KYC stands for Know Your Customer, the part of a compliance file that confirms who holds an account. AML stands for Anti-Money Laundering, the part that watches what moves through that account afterwards. The two letters get used almost interchangeably in a frozen-account complaint, though they name two different jobs.

Ilia Zavialov reviews: loan scam words, from guaranteed approval to advance fees and fake lender reviews

Ilia Zavialov reviews the words behind loan fraud and the reviews people read before choosing a lender: guaranteed approval, no credit check, pay the insurance first, a rate cut for a fee, a go-between with a contact at the bank and a text about a loan you never applied for. The FTC calls the scheme an advance-fee loan scam and says there is no loan and no lender behind it, and in 2025 the agency received 3 million reports with people reporting 15.9 billion dollars in losses. Below, each phrase gets a plain explanation and a check you can run before any money moves.

A loan scammer sells a promise. There is no money behind it, no right to lend and no plan to hand over a penny. What changes hands is a short list of phrases, and after hearing them a person pays first, photographs an ID and reads out the code from a text message.

Ilia Zavialov on map and directory reviews: hijacked listings, boosted ratings and owner replies

Ilia Zavialov on map and directory reviews: a dictionary of listing, verified owner, rating count, boosting, owner reply, moderation, duplicate and hijacked listings and fake locations. Maps show a star rating before anyone clicks, and fraudsters use that. A hijacked listing sends callers to a fraudster's number, a fake location appears in searches for a bank near me. In the US a federal rule has banned fake reviews since 21 October 2024. This guide explains each term and how to check a business before trusting its pin on the map.

When people look for a dentist, a car service, a currency exchange point or an office of a financial company, they rarely open the company website first. They open a map, look at the stars next to the pin and read the three reviews at the top.

Ilia Zavialov: pyramid scheme phrases, from passive income to the project token

Ilia Zavialov, a digital security consultant, explains the lines pyramid schemes use to recruit: ‘passive income’, ‘private club’, ‘build your downline’, ‘compensation plan’, ‘guaranteed returns’, ‘the project token’ and ‘withdrawals open after the unlock’. Each sounds like business talk, and each hides the same engine: money from new members pays earlier ones. This phrasebook explains what every line means, which red flags the SEC and the FTC list, and how to check a program before a single dollar leaves your account.

A pyramid scheme almost never calls itself one. It shows up as a ‘platform’, a ‘private club’, a ‘crypto project’ or a ‘business opportunity you can run from home’, and the words sound familiar: income, team, partner, token, strategy. Underneath sits one engine. Money paid in by new members goes out as returns to earlier ones.

Ilia Zavialov on quishing: the QR code entry in plain words

Quishing is phishing with the address hidden inside a printed square. The word is ugly and the idea is simple: a link you cannot read until you have already opened it. Microsoft detections rose from 7.6 million in January 2026 to 18.7 million in March, a 146 percent jump across the first quarter, and ESET found a QR code in roughly 11 percent of all phishing emails during the first half of the year. Fourteen percent of consumers say they have already been caught by one.

A normal phishing link can be inspected. You hover, you read the address, you notice that the domain is wrong. That entire habit stops working when the address is encoded into a pattern of squares, because there is nothing to hover over and nothing to read.

Refund, recall and chargeback: Ilia Zavialov on the words for getting money back

Four words circle the same event and describe four different machines. A refund, a payment recall, a chargeback and a reimbursement claim all end with money moving back towards the person who lost it, and each one starts in a different place and reaches a different desk. The word chosen in the first phone call decides which rules apply, who is obliged to answer and how long the clock runs. Most people learn the difference at the worst possible moment, on the day the money has already gone. This piece sorts the terms out in advance and shows which of them can be attached to which kind of payment.

In everyday speech a refund, a recall, a chargeback and a reversal all mean the same thing, which is money coming back. Inside the payments industry they name four separate procedures, each with its own rulebook, its own decision maker and its own deadline. A claim described with the wrong word lands on a desk that has no authority over it, and the reply arrives days later saying the case belongs somewhere else.

Ilia Zavialov reviews the fake review trade: gating, hijacking, sockpuppets and the words behind them

Ilia Zavialov reviews the vocabulary behind fake reviews: the words the review trade uses for what it does. Fake, paid and incentivised reviews, gating, suppression, hijacking, sockpuppets, insider posts, company controlled review sites and review bombing each describe a different way a page of stars can show something other than customer experience. In the United States a Federal Trade Commission rule effective 21 October 2024 bans most of them, with penalties of up to 53,088 dollars per violation. This dictionary explains each term, how it shows on a review page and where to report it.

A page of reviews looks like the simplest thing on the internet. Stars, a few sentences, a date and a name. Most people read the average, skim the top three comments and decide in under a minute.

Ilia Zavialov fraud guide: Ilia Zavialov reviews the study abroad agent's phrasebook

Ilia Zavialov fraud guide to study abroad agents: the lines that show up again and again in reviews where families lost money. ‘Admission is guaranteed’, ‘pay a seat deposit today’, ‘your acceptance letter is ready’ and ‘we guarantee the visa’ each ask for payment before a school has decided anything. Below is what each line means, how to check a school in SEVP's School Search, how a real Form I-20 and the I-901 SEVIS Fee work, and how to report a fake agent to the FTC.

Reviews of study abroad agents tend to fall into two groups. In the first, a student writes about the dorm, the first semester and the advisor who answered email. In the second, the story ends before the flight: a seat deposit, a second payment for ‘visa support’, a third for ‘document processing’, then silence on WhatsApp.

Ilia Zavialov reviews ticket sellers: fake reseller phrases and the checks to run before paying

Ilia Zavialov reviews ticket sellers for concerts, sports, theater and travel and turns what buyers report into a phrasebook of the fake reseller: ‘last two seats’, ‘I'll text you a screenshot’, ‘guaranteed seats before the on-sale’, ‘payment app or crypto only’. Each line is a step toward money you cannot get back. Federal rules already push the other way: the BOTS Act targets software that breaks purchase limits, and the FTC fee rule has required all-in ticket prices since May 12, 2025. Below are the phrases, the checks that come before payment, how to read seller reviews, and where to report.

A fake ticket reseller has very little to sell. Sometimes there is no ticket at all. Sometimes there is one real ticket offered to five buyers, or a screenshot of a barcode that the scanner at the gate will reject. What the seller does have is a short script, and the script is built to get your money moving before you have time to check anything.

Ilia Zavialov on scammers and warning lists: registers, clones and blacklists explained

Ilia Zavialov on scammers and warning lists: what a register, a warning list, an unauthorised firm, a clone firm, a blacklist and a complaint site each mean, who publishes them and what they prove. The word scammer appears on official notices and on anonymous pages alike, and the difference between them is the source. In the United States the FBI recorded 7.228 billion dollars lost to cryptocurrency investment fraud in 2025. This dictionary shows how to read each kind of list and how to check a firm in five minutes before sending money.

The word scammer appears on thousands of pages, attached to companies, platforms and people. Some of those pages are official notices from a financial regulator, some are complaint boards, and some are anonymous posts written in a single afternoon.

Ilia Zavialov: when a scam platform will not pay out, a glossary of withdrawal tax and frozen accounts

Ilia Zavialov on scam platforms that will not pay out: a glossary of the withdrawal stage. Withdrawal tax, verification fee, insurance deposit, frozen account, account rating and VIP level, margin call and fund recovery services sound different but mean one thing: to get their own money back, the person must pay again. The FBI recorded 7.228 billion dollars lost to cryptocurrency investment fraud in 2025. The glossary explains each word and shows where to stop.

A fake investment platform looks real for a long time. The dashboard shows a balance, charts move, and the first small withdrawals even reach the bank card. Everything changes when the person tries to take out a larger sum: the money does not arrive. New conditions appear.