Even careful users get hacked when attackers weaponize trust and excitement. In Inverted Podcast #19, hosts Jeroen Kemperman, Dana Kaufman, and Dario Salice talk with Olivia, a Switzerland-based travel content creator, about how a collaboration-style phishing lure led to Google and YouTube account takeover.
Olivia had layered protections, including two-factor authentication and backup recovery keys, yet still watched access slip away in real time. The episode covers creator targeting, recovery pain, emotional impact, and practical advice for both users and product teams who design security and recovery UX. For inverted products, empathy under stress is a security feature.
The hosts connect Olivia’s experience to product work: how platforms signal urgency, how recovery flows behave when every second counts, and why creator economies amplify account value for attackers. Listeners leave with both personal habits (verify collaboration requests, protect recovery material) and a sharper sense of what inverted product teams should harden next.
About the guest
Olivia is a travel content creator (olliechinny on Instagram and YouTube). She shares a firsthand account of being phished through a fake brand collaboration request and what she learned about digital vigilance afterward.
Key takeaways
- Creators are high-value targets: collaboration excitement is a reliable lure.
- Layered MFA helps but does not eliminate sophisticated phishing and session takeover.
- Recovery UX under stress often fails users when attackers move faster than support.
- Watching accounts disappear in real time has lasting emotional and business impact.
- Product teams should design for empathy: clear recovery paths and harder social-engineering surfaces.
- Verification habits beat urgency: slow down before clicking collab and credential prompts.
Topics covered
- Creator online life and baseline security practices
- Why creators are targeted
- How the phishing attack unfolded
- Losing access and recovery struggles
- Lessons learned and security advice
- Advice for creators and product builders
Chapters
00:00 Introduction & Hosts
00:30 Meet Olivia: Travel Creator & Her Online Life
01:10 Account Setup & Security Practices
02:00 Why Creators Are Targeted
03:00 The Phishing Attack: How Olivia Got Hacked
04:00 Losing Access & Recovery Struggles
05:00 Lessons Learned & Security Advice
06:00 Final Thoughts & Advice for Creators
07:00 Closing Remarks & Thanks
FAQ
Who should watch this episode?
Creators and public figures who rely on platform accounts, trust and safety PMs, recovery and IAM designers, and anyone who underestimates phishing against tech-savvy users.
Was MFA enough?
MFA raises the bar but phishing and real-time takeover can still win if users are rushed into approving prompts or handing over recovery material. Defense needs product design and habits together.
How does this connect to inverted products?
Inverted products succeed when account takeover stays rare. Olivia’s story shows why recovery and anti-phishing UX are inverted surfaces: failure is loud and personal.
Related on Inverted PM
- Podcast #23: Account Recovery
- Podcast #20: Targeted Attacks
- Podcast #27: How the World of Authentication Is Changing
- Podcast #17: Bug bounty
- Meet the hosts
- All Inverted Podcast episodes
Connect with the hosts and guests on the video or on LinkedIn to continue the conversation.
🎧 Find the Inverted Podcast on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio, or invertedpm.com.
Explore more
Browse all Inverted Podcast episodes, read the blog, or meet the hosts.
Related: Episode 23 – Account Recovery · Episode 20 – Targeted Attacks