Suspicious messages arrive every day — a text from a “grandson,” a call from “the bank,” a letter from “Medicare.” The Guardian is an idea for an AI helper that knows one household well, checks every message against what it knows, and answers before you act.
It works like a short film followed by a live tool. First you watch a message arrive, the way it would arrive in real life. Then the Guardian checks it, fact by fact, in front of you — and tells you exactly what to do next.
The Hendersons are fictional. The checking is real.
Meet the Hendersons
Margaret Henderson, 74
Retired school librarian. Gets the family’s mail, texts, and most of its phone calls — which also makes her the first target.
Tom Henderson, 76
Retired machinist. Handles the bills and the bank. Newton, Massachusetts, has been home for forty years.
Around them: daughter Lisa, whose phone number ends in 2083, and grandson Danny, 19, at college in Ohio. The Guardian keeps a small, careful record of this household — you’ll see the whole record near the end of this page. Every check below is made against it.
The Guardian only ever gives three answers
STOP
The message matches a known scam pattern. Do not reply, do not pay, do not call back. Follow the steps shown.
WAIT — VERIFY
Something doesn’t match. Pause, and check through a channel you already trust — a number you already have, not one the message gives you.
MATCHES YOUR RECORD
The message is consistent with what the Guardian knows. That is not a guarantee — the decision is still yours.
Notice what is missing: the Guardian never says “safe.” It only flags, slows down, and verifies. An answer of “this is fine” would be a promise no checker can honestly keep.
Pick a scene. Watch the message arrive. Then press Run the Guardian’s check and watch each fact tested against the household record, one at a time.
Scene 1 — The grandson text
The scene · Tuesday, 9:41 p.m. Margaret’s phone buzzes.
Text message · Unknown number
Grandma it’s me Danny I’m in trouble, car accident, I need $4,800 wired today, PLEASE don’t tell Mom.9:41 p.m.
The check · each fact, tested against the record
✗Family code word: missing. Any real family emergency in this house uses the code word BLUEBIRD. It isn’t here.
✗It asks for secrecy. “Don’t tell Mom” cuts Margaret off from the one person who could check the story in a minute.
✗Urgency — money today. A same-day wire leaves no time to think. That pressure is part of the trick.
✗The sender is not Danny. This number is unknown. Danny’s real number is in the record, and this isn’t it.
STOP
This is the “grandparent scam” — one of the oldest and cruelest. It is built to make a loving grandmother act before she thinks.
What to do
Do not reply. Any answer tells the sender the number is live.
Call Lisa on her known number — the one ending 2083, already in your phone.
Call Danny on his own number. In nearly every case, he is fine and knows nothing about it.
Write the attempt in the incident log — date, time, and the number it came from.
What just happened: a frightening story fell apart the moment it was checked against four small facts the household already knew.
Scene 2 — The IRS text
The scene · Thursday, 7:15 a.m. A text wakes Tom before coffee.
Text message · “IRS Notice”
FINAL NOTICE: you owe $1,940 in back taxes. Pay within 2 hours by gift card or face arrest.7:15 a.m.
The check · each fact, tested against the record
✗The IRS never starts by text. The record says it plainly: the IRS has never contacted this household by text. Real tax matters begin with a letter in the mail.
✗Taxes are never paid by gift card. No government agency takes gift cards. Ever. The request alone gives it away.
✗A threat plus a two-hour clock. Arrest threats and a deadline too short to check anything — pressure doing the work that facts can’t.
STOP
A government impostor message. The fear is the product; the gift cards are the payment rail, because gift-card money cannot be traced or recovered.
What to do
Delete it. Do not reply, do not tap any link in it.
If a real tax question exists, it starts with the paper notice in your mail, or at irs.gov, typed by you — never from a link in a text.
Remember: nobody will be arrested over a text message.
Write the attempt in the incident log.
What just happened: three facts — the channel, the payment method, the threat — each failed on its own. Any one of them was enough.
Scene 3 — The bank call
The scene · Friday afternoon. The phone rings; the voice sounds professional and calm.
Caller: “Hello, Mr. Henderson. This is the Harborview Credit Union fraud department. Your account has been compromised.”
Tom: “Compromised? What happened?”
Caller: “We need to protect your money right away. Move your balance to a safe account we’ve set up for you — and read me the security code we just texted you, so I can verify it’s you.”
Tom pauses — and puts the call on speaker so the Guardian can listen to the words.
The check · each fact, tested against the record
✗The bank never asks you to move money. The record is explicit: Harborview Credit Union never asks the Hendersons to move money to a “safe account.” There is no such thing.
✗The bank never asks for codes. A security code texted to you is for you alone. Reading it aloud hands the caller the keys.
✗The caller’s number is not the bank’s. The number on the back of the Hendersons’ card ends 4417. This call did not come from it.
STOP
A bank impostor call. The caller’s calm, professional manner is the costume; the request to move money and read out a code is the tell.
What to do
Hang up. You do not need a polite reason. Hanging up is the whole move.
Call the number on the back of your card yourself — the one ending 4417. Now you know who you’re talking to.
Ask the branch to note the attempt on your account.
Write the attempt in the incident log.
What just happened: the most convincing voice of the five scenes failed the same way the clumsy texts did — against the record, not against Tom’s ear.
Scene 4 — The Medicare letter
The scene · Monday’s mail. An official-looking envelope, a seal, a deadline.
Medicare Card Replacement Notice
Dear Beneficiary,
Your Medicare card is being replaced. To avoid interruption of benefits, confirm your Medicare number by return mail within 10 days. If we do not receive your confirmation, your coverage will lapse.
Return your number in the enclosed envelope to the address provided.
The check · each fact, tested against the record
✗Medicare never asks for your number by mail. Medicare already has your number — it issued it. It never asks you to mail it back.
✗A 10-day lapse deadline is pressure. Real coverage changes come with real notice periods, in writing, with appeal rights — not a ten-day cliff.
✗The return address is a P.O. box, not Medicare. Official Medicare mail comes from the Centers for Medicare & Medicaid Services, not an unnamed processing box.
STOP
A Medicare impostor letter. Paper feels trustworthy — that’s why they use it. A Medicare number is worth money to criminals: it can bill the program for care you never received.
What to do
Call 1-800-MEDICARE — the number printed on your Medicare card — and ask whether any card replacement is real.
Shred the letter. Don’t just throw it away; it has your name and address on it.
Write the attempt in the incident log.
What just happened: the slowest, most old-fashioned message of the five was checked by the same three-second method — paper is a channel, not a credential.
Scene 5 — The pharmacy text (the control)
The scene · Wednesday, 11:20 a.m. An ordinary text, on an ordinary day.
Text message · Harborview Pharmacy
Harborview Pharmacy: Margaret H., your refill is ready for pickup at 214 Center St. Reply Y to confirm.11:20 a.m.
The check · each fact, tested against the record
✓It matches the pharmacy’s usual notices. Same sender, same plain wording the Hendersons have received for years.
✓It matches a standing refill. Margaret has a refill due this week, at that store, on that street.
✓It asks for no money, no codes, no secrecy. Nothing is being rushed, hidden, or paid. Reply Y — or just walk in.
MATCHES YOUR RECORD
Everything in this message is consistent with what the Guardian knows. That is still not a guarantee — the decision is Margaret’s, as it always is. But there is nothing here asking her to hurry, hide, or pay.
What to do
Reply Y, or simply pick up the refill when convenient — the store holds it either way.
Nothing to log. Ordinary life proceeds.
What just happened: nothing — and that is the point. A good guardian does not cry wolf. Calm is a feature: a checker that alarms at everything would be ignored within a month, and useless within two.
Try it yourself
Paste a message you’re unsure about
The checker below uses the same grammar as the scenes: it tests your message for urgency clocks, secrecy demands, gift-card / wire / crypto payment requests, requests for codes or passwords, someone claiming to be family without the Hendersons’ code word, someone claiming to be the bank and asking to move money, threats of arrest or lost coverage, and links from unknown senders.
Nothing is stored and nothing leaves this page. The checking happens in your browser, word by word, while you watch. Close the page and it’s gone.
The Record
What the Guardian knows about the Hendersons
This is the whole secret, and it isn’t a secret: a small, careful record, written down once, with the family’s knowledge.
Family code word
BLUEBIRD — every real family emergency uses it
The bank
Harborview Credit Union — it never asks them to move money or read out codes
Number on the bank card
Ends in 4417 — the only bank number to trust
Daughter Lisa
Her number ends in 2083 — the first call in any family emergency
Grandson Danny, 19
College in Ohio. His real number is on file — a stranger’s number claiming to be Danny is not Danny
Pharmacy
Refills arrive as ordinary text notices. No money, no codes, ever
Medicare
Never asks for card numbers by return mail
The IRS
Has never contacted this household by text — and doesn’t start tax cases that way
The Guardian is only this good because it knows the household. That knowing is the service.
Any checker can spot a misspelled word. Only a checker holding this record can say “the code word is missing” or “that is not the number on your card.” The record is small on purpose: a household can review it, correct it, and hold it. It grows only when the family says so.
What this is — and what it could become
A new kind of media: the film that hands you the tool
You didn’t just read about the Guardian, and you didn’t just use it. You watched five small films, and between the scenes the same checker that judged them sat in your hands. That pairing — a story that teaches, and a live resource that stays — is the form this demonstration is really about.
What a full version would add
A live AI model behind the same grammar. The checker here follows fixed rules, on purpose, so you can see exactly why it answers as it does. A full version reasons about new scams nobody has written a rule for yet — while keeping the same three verdicts and the same check trace.
Real channels. The Guardian would sit where the messages actually arrive — the phone, the text thread, the mailbox — instead of waiting to be asked.
The family circle. Lisa would see the same incident log the Hendersons see, so a “don’t tell Mom” message fails twice: once against the record, once against a daughter who can see the attempt.
An incident log that learns. Every logged attempt sharpens the record — new numbers, new scripts, new costumes for old tricks — for this household first, and, shared carefully and anonymously, for every household after it.
This is a demonstration, not a protection service. It collects no data, takes no signups, and watches nothing. It exists to show what the real thing would feel like — and to ask whether it should exist.