AI-Powered Scams Target Consumers

Author: Jeff Weeks, Senior Vice President and Chief Information Security Officer

AI is now pervasive in our lives. In many cases it makes our work and lives easier. At the same time, it can make cybercriminals' lives easier, too. Using artificial intelligence, cybercriminals are building ever more complex frauds that play on trust, pass for authentic, and evade traditional detection techniques.

In this article, we explain how AI is being misused in three common fraud schemes and what you can do to avoid becoming a victim.

1. Voice Cloning Scams

   Imagine your grandchild calling you terrified and seeking help. You instantly recognize the voice. But suppose it is not your grandchild?

   Using just a few seconds of audio — often taken from web videos, voicemails, or even social media — voice cloning frauds use generative artificial intelligence to imitate human voices. Once cloned, con artists call victims posing as a loved one in crisis, claiming they've been kidnapped, arrested, or injured. The emotional intensity is meant to eclipse logical thought.

   Red Flags

   • The call comes from a blocked caller ID or an unidentified number.
   • The "family member" tells you not to call others or requests anonymity.
   • You are asked to transmit money using untraceable means (such as gift cards, bitcoin, wire transfer).

   Safety Tips

   • Arrange a family "safe word" to confirm actual identity in case of crisis.
   • Hang up and dial the individual back on a known number.
   • Document events for the Federal Trade Commission and local law enforcement.

2. Phishing Emails Created by AI

   Phishing has always been a problem, but artificial intelligence makes it much more effective. Thanks to tools like big language models, fraudsters can now create perfect emails specifically for certain recipients. These communications frequently have realistic context, proper grammar, and tailored information gleaned from internet profiles or data breaches.

   These messages defy the clunky patterns of conventional scams, thus even sophisticated spam filters find it difficult to spot them. Rather, they copy corporate branding, spoof reputable domains, and choose tones fit for their intended audience.

   Red Flags

   • Emails generating urgency (such as account lockouts or past-due invoices).
   • Slightly changed domain names, such paypa1.com rather than paypal.com.
   • Calls to download attachments or open links.

   Safety Tips

   • Verify suspicious messages by reaching out to the sender through a known, reliable channel.
   • Hover over hyperlinks to search for false URLs.
   • Turn on multi-factor authentication (MFA) for all your accounts.

3. Fake Customer Support

   Have you ever Googled the phone number of a company and called the first phone number that showed up? You might have unintentionally dealt with a con artist. Another fraud tactic is using artificial intelligence chatbots and voice assistants to pass for reputable businesses – especially tech support services, airlines, and financial institutions.
   
   These fake business listings usually start on search engines or social media and use AI-driven contacts that seem shockingly human. Victims are directed via apparently business-like procedures that may involve disclosing sensitive information, enabling remote access, or offering payment details.

   Red Flags

   • You make contact via a phone number or link not from the official website.
   • The representative presses you to download programs or grant remote access.
   • The representative presses you to provide personal information such as logon credentials or credit card information.

   Safety Tips

   • Always use contact details from an official corporate website.
   • Exercise caution when the person you are speaking with requests remote access, especially in cases where you did not initiate a support call.
   • Browser extensions and security tools can point out dubious listings and websites.

In essence, artificial intelligence scams are smart and AI-driven scams are a reality of today. Although the methods differ, the use of AI in fraud often relies on human trust and emotion. Digital literacy combined with healthy skepticism and validation methods are the best defense. Our awareness must change as technology changes.

Share this blog with friends and relatives to increase awareness, especially among those less tech-savvy. Remember, report these fraud schemes so that businesses and law enforcement can take action to prevent further losses.

About the Author

Jeff has been with First National Bank of Omaha for more than 26 years and is currently the Senior Vice President and Chief Information Security Officer. The executive leadership and oversight provided by Jeff in the development, management, and execution of information security for FNBO enables the company’s ability to posture and protect private, personal information, and assets of the company’s clients, employees, and business partners.