Preventing AI Scams: Digital Defense in an Evolving Online Ecosystem

Operating in the digital age has its challenges: devices and software freeze, updates can be slow to install, and internet connections can become unstable, to name a few. Beyond these typical inconveniences, online scammers pose the greatest disruption to our online experience. Digital scams not only impact productivity but, more importantly, threaten data and identity security.

Advances in AI technology have enabled online scammers to become more creative in their methods, allowing them to craft scams that mimic human language patterns and produce persuasive, context-aware messages that bypass traditional filters on social media, websites, and in your inbox.

The National Cybersecurity Alliance recently updated its guidance on avoiding online scams. We’re drawing on it to share five examples of AI-powered scams to watch for, along with tips for staying safe and secure when working or connecting online.

Email Phishing Attempts

Scammers often impersonate members of professional institutions, using AI-generated images and text to lure users into sharing information or clicking suspicious links. Common examples include Business Email Compromise (BEC) and Password Reset scams, which involve fake messages from bosses or banks requesting sensitive information. If you receive a suspicious email, cross-check the sender’s email address and credentials against a trusted resource to confirm whether it’s a scam attempt.

Voice Scams

AI technology enables scammers to clone voices from just a few seconds of audio and generate real-time conversations. These scams can sound like relatives claiming they’ve been in an accident and need money, or like higher-ups at your company requesting wire transfers. Scammers exploit the urgency of these situations to trick users into giving them access to their data without second-guessing. Avoid these scams by calling a known number to confirm the message before sharing any sensitive information.

Social Media Scams

Social media is a hotspot for online scams. Fake profiles, often endorsed by deepfaked celebrities, promote counterfeit merchandise or giveaways that trick users into clicking hidden links. Scammers perpetuate this cycle by hacking into one account and using its network to spread the scam. If you receive a suspicious message from someone in your network, contact them on a separate platform to confirm whether their account has been hacked. Protect your social media accounts with Multi-Factor Authentication (MFA), and hover your cursor over links to see the URL destination before clicking.

Deep Fake Scams

Deepfake scams are common on social media and involve creating fake videos of real people (celebrities, politicians, etc.) to spread fraud and misinformation. Scammers exploit a user’s trust in a popular personality to get them to donate to fake businesses, charities, and cryptocurrency projects. If you encounter a promotion from an online personality that seems too good to be true, examine their profile and other profiles in their network (followers/following, tagged accounts, etc.) to verify the offer’s legitimacy. If you’ve discovered an online imposter, block and report their account to stop others from falling for an AI-powered deepfake scam.

Romance Scams

AI can be used to host long conversations between users and fake dating profiles, supported by attractive AI-generated images. Chatbots can sustain long, adaptive conversations that hook unsuspecting users into sending money over several weeks. Before sending funds or personal information, validate the identity of an online connection by examining their network, especially if you haven’t met them in person. Be on the lookout for repeated requests for money or refusals to provide any proof of existence beyond the chat. Stick to trusted platforms for online dating and report any suspicious profiles to support centers to prevent others from engaging with a romance scam.

Whether you’re making personal connections, shopping, or working online, AI scams appear across many popular areas of the internet. Although AI technology is constantly evolving, it doesn’t have to be as daunting as it may seem. Use these five examples to learn how to identify and avoid AI scams online. Stay safe and secure online, Wildcats, and remember...

You Got IT!

Review tips for protecting your data, identity, and devices on the Information Security at Northwestern website, and learn more about the latest trends in AI cyberthreats from the National Cybersecurity Alliance.