The Fake Coursera Collaboration🚨: How a Scammer Groomed Me for Weeks

Heather Smith, host of the Accounting Apps Podcast, recounts how she was systematically groomed by a cybercriminal posing as a Coursera partner over several weeks—despite having strong security habits. The scam began with a suspiciously rapid response to her inquiry about a fake 'payday super' feature, which triggered her first red flag. The real attack came via a phishing email that mimicked a Coursera partner registration, using a spoofed domain (partner.operations@learn-mail.org) and a yellow 'external' warning in Gmail that she initially overlooked. The email lacked personalization, included a seven-day urgency trigger, and led to a malicious link that compromised her Gmail account. She spent four days recovering, discovering no forwarding rules or unauthorized access, but realizing her security measures had failed to catch the sophisticated social engineering. Her recovery process included using ChatGPT to walk through security steps one by one—making it less overwhelming—and she now emphasizes the critical need for pass keys, 10-digit backup codes, and proactive cyber awareness. She also highlights free, government-backed cybersecurity courses via CyberWardens.com.au, which offer verifiable CPD credits. This episode is a stark reminder that even experienced professionals can fall victim to increasingly sophisticated scams with just one click. The core lesson isn’t about technical flaws—it’s about psychological manipulation.