And somewhere, on a server in a country he couldn’t pronounce, a session token with his name on it was still very much alive.

On page 4, buried under 47 deleted posts, one user named c0d3r_d00m had written:

He factory reset the phone. Changed every password. Cancelled his debit card. But every night, for a week, his YouTube history showed a single watched video at 3:00 AM: “How to spot a scam – Social Engineering 101.”

Body: “The buffer was better, wasn’t it?”

He tapped Yes.

Not from YouTube. From his bank.