Published in MIT Sloan Management Review
AI can now trick even careful people. Here is the three-minute answer.
Think First, Verify Always is a simple protocol for the age of AI deception. Published in MIT Sloan Management Review, tested in a randomized controlled trial, and free for anyone to use.
Your phone rings and it is your daughter’s voice, crying, asking for money right now. Except it is not your daughter. It is her voice, cloned in seconds by a stranger who has never met her. This is what deception looks like now, and it is arriving faster than our instincts can catch up.
Think First, Verify Always is the answer, and it is simple enough to learn in the time it takes to make coffee. Slow down. Take a breath before you act. Then verify through a channel you already trust, not the one the message came through. That small pause is where the scam falls apart.
HCSK is a nonprofit with a two-part mission: Human-Empowered AI Cybersecurity, and Protecting Seniors From AI Scams.
The problem: AI turned deception against your own judgment.
For most of history, a scam had a tell. A stranger’s voice, an odd phrase, a story that did not quite hold. Your instincts had something to catch.
AI removed the tells. It can clone a familiar voice, write in a colleague’s exact cadence, and manufacture urgency at a scale and speed no human could match. The manipulation is no longer clumsy. It is fluent, personal, and instant. The trouble is not that people are careless. It is that the pressure is engineered to make careful people move before they think. The target is not your password. It is your judgment.
The method: three minutes, one habit.
The answer is not more fear and not more technology. It is one habit you can carry into every message, call, and request, and you can learn it in about three minutes.
Slow down. Urgency is the tool, so the answer is to take the pressure off. A real request survives a pause. A scam rarely does. When something pushes you to act right now, that is the moment to stop and think first.
Verify always. Confirm who you are really dealing with through a separate channel you choose and already trust, a number you dial yourself, a person you reach directly, never the link or the caller in front of you.
That is the whole protocol. It is short enough to teach a family over dinner and simple enough to remember under pressure, which is the only place it matters. It works the same whether the threat is a cloned voice, a fake invoice, or a message that looks exactly like it came from your bank.
The proof: tested, published, and in use.
Think First, Verify Always was published in MIT Sloan Management Review, in the article “A Three-Minute Protocol to Reduce AI Manipulation Risk” (2026). Their editors chose to run it.
It was tested in a randomized controlled trial. A single session of about three minutes measurably improved how well people resisted AI-driven manipulation, a gain of 7.87 percentage points over a control group (n=151). One short lesson, a real and measurable difference.
Since publication, the protocol has been referenced and recommended by companies and media around the world, from technology press such as DevDiscourse and ZDNet Korea to security and training firms including Global Learning Systems, CybeReady, and Cogent Info.
The invitation: take it, use it, share it.
Think First, Verify Always is openly licensed under CC-BY 4.0. It is free to read, use, teach, and adapt, whether you are protecting your own family, briefing a newsroom, or training ten thousand employees. There is nothing to buy and nothing to sign up for. Learn it in three minutes, then pass it on.
It was created by Yuksel Aydin, an AI-security researcher and the founder of HCSK, a nonprofit. Read the evidence, meet the people behind it, and start using it today.