Mathew PaquetChecklist · 4 min read

The Two Doors Check

Lock the door criminals are learning to open with AI, then sort every AI use in your business into helps, replaces or stays human.

01 What Gates's warning means for a business

In 2023, Bill Gates wrote that AI's risks were real but manageable. On October 11, 2026, on CNN, he called AI the most dangerous technology humans ever invented. He also said AI getting out of control is years away. The danger he names is smaller, and closer:

People using AI to threaten a business for money. He expects cyberattacks first, with "a lot of negative surprises" over the next year. A tax code that, he argues, pays you to replace people.

His advice is aimed at governments, not business owners. This is my read of what it means for yours. And you don't have to trust him for any of it. The lock works either way.

The scam already works

In 2025, the FBI's internet crime center logged about $20.9 billion in reported losses, up 26% in a year. The most-reported crime was phishing: a message that pretends to be someone you trust so you click, log in or pay. Extortion, where someone threatens to do something unless you pay, drew 89,129 complaints.

The FBI doesn't count how much involved AI. What the numbers show is that the scam works. Now hand the scammer a writer that never makes a typo, in any language, at any hour.

The attack gets cheaper, and the defense is still the basics.
02 Door 1: lock out the scammers

CISA, the U.S. government's cyber agency, keeps a short list called Cyber Essentials. None of it is new. That's the point.

Turn on two-step sign-in everywhere. A second check after the password. CISA says start with admin accounts and remote access.
Back up automatically, and keep one copy offline. Offline means not connected, so an attacker who gets in can't reach it.
Let updates install themselves. CISA: enable automatic updates whenever possible.
Teach whoever pays your bills what a fake invoice looks like. CISA names phishing and business email compromise: a fake email from a boss or supplier asking to move money.
Call back before any bank change. My rule: on a number you already had, never one in the request.
Call-back rule for the team
If anyone asks us to change bank details, by email, text or phone,
we do not change anything until we call them back
on a number we already had: [WHERE OUR SAVED NUMBERS LIVE].
Who makes the call: [NAME]. Who approves the change: [NAME].
03 What the AI tax argument is about

Gates's essay: if you hire someone, you pay payroll taxes on their earnings. If you buy a robot, you can usually write it off right away as a business expense. Wages are a business expense too. The gap he means is the payroll tax that sits on top of a person and not on a machine.

His fix: define a unit of labor, and whether a human or a robot delivers it, pay the same payroll tax. He has also proposed taxing AI tokens, the units AI usage is measured in.

What exists Where it stands
Gates's proposal No rate, no start date
AI Tax and Work Protection Act Introduced in Congress in August 2026, no action since
The critics Larry Summers in 2017: protectionism against progress. Critics of the bill: it taxes job losses that haven't happened

The bill names companies that use big AI models to reduce their workforces. Not using AI. Replacing people with it. That's the line in every version of this idea. And the pressure is real: in a June 2026 Pew survey, 71% of U.S. adults said they expect AI to mean fewer jobs over the next 20 years.

04 Door 2: decide what AI replaces

Gates calls it Human Reserved: like a nature reserve, but for work. Jobs society keeps for people even when AI could do them, such as caring for children or the elderly. You don't have to wait for governments to decide. Make your own version.

List every place AI touches your business, or will this year. Put each one in exactly one column below. Circle what sits in "replaces." Every tax idea on the table is aimed there. Read your "keep a person" column. It might be what your customers come back for.
My three-column sort
HELPS A PERSON DO THE JOB BETTER:
[TASK] / [TASK]

REPLACES THE WORK ENTIRELY:
[TASK] / [TASK]

A PERSON, ON PURPOSE:
The call with an upset customer
The final yes on a hire
[WHATEVER MAKES PEOPLE TRUST US]

Both of the first two can be fine. The point is knowing which of your plans sit where. Gates isn't asking anyone to stop. His word for it is a middle ground, like the one we found for cars, planes and medicine.

Which job in your business would you keep human, even if AI could do it for free? Write it in the third column first.

Sources

Mathew's LibraryLibrary card
Free access

Keep reading free with your library card

One email opens this checklist and all 3 resources in Mathew's library. No account, no password.

It opens right here, and a copy goes to your inbox. You'll also get The Operator Notes. Unsubscribe in one click.

Thanks
You finished it
Now do one thing

Turn on two-step sign-in for your admin and remote access accounts today, and tell whoever pays your bills about the call-back rule.

Saving works best in your phone's browser. A copy is also in your inbox.