Key Takeaways
- Artificial intelligence (AI) is making scams more convincing by helping criminals create realistic messages, imitate familiar voices and produce fake images or videos.
- AI scams often rely on urgency, fear or requests for money and personal information. These warning signs matter more than how realistic a message appears.
- If someone contacts you with an unexpected request, verify their identity using a phone number or contact method you already trust.
- Strong passwords, multifactor authentication and a family verification phrase can help protect you from AI-powered fraud.
- If you suspect you’ve been targeted, contact your financial institution promptly and report the incident to the appropriate authorities.
A New Approach to an Old Problem
Imagine receiving a phone call from someone who sounds exactly like a family member. They’re upset, they need money and they’re asking you to help immediately.
Or perhaps you receive an email from a company you recognize. The logo looks right, the writing is professional and nothing about the message seems particularly suspicious.
Would you know if either was a scam?
For years, people have been told to watch for misspelled words, unusual email addresses and poorly written messages. Those warning signs still matter, but artificial intelligence is making some scams much harder to recognize.
During Cybersecurity Awareness Month, it’s a good time to understand how these tactics are changing and what you can do to protect yourself.
The good news? You don’t need to be a technology expert to recognize potential fraud. A few simple habits can make a meaningful difference.
How Are Scammers Using Artificial Intelligence?
Artificial intelligence has plenty of legitimate uses, from helping businesses work more efficiently to making everyday technology easier to use.
Unfortunately, scammers are finding ways to use the same tools to deceive people.
While the technology may be new, the objective is familiar: convince someone to share sensitive information, send money or provide access to an account.
Here are four ways AI is changing how these scams work.
1. AI-Generated Phishing Emails and Text Messages
Phishing is a type of scam in which criminals impersonate a trusted person or organization to obtain information or convince someone to take an action.
You may already be familiar with phishing emails that contain obvious spelling mistakes, strange formatting or suspicious links.
AI makes it easier for scammers to produce polished, professional messages that resemble legitimate communications.
For example, you might receive:
- An email claiming your bank account needs immediate verification.
- A text message stating that a package cannot be delivered until you update your information.
- A message appearing to come from your employer requesting sensitive documents.
- A notification claiming that a payment failed and directing you to a website to resolve the issue.
These messages may include convincing language, familiar branding and personal details intended to make them appear legitimate.
What to watch for: Be cautious of unexpected messages asking you to click a link, provide account information or act immediately. Even a professionally written message can be fraudulent.
2. Voice Cloning Scams
One of the more unsettling uses of AI involves voice cloning.
With AI-powered tools, scammers can imitate someone’s voice using a recording or audio sample. The resulting voice may sound remarkably similar to the person being impersonated.
According to the Federal Trade Commission (FTC), criminals can use voice cloning technology to impersonate family members and create convincing emergency scenarios.
Imagine a grandparent receiving a call from someone who sounds like their grandchild. The caller claims they’ve been in an accident, are in trouble or urgently need money.
The caller may insist that the situation is private or that there’s no time to contact anyone else.
These scams are designed to create an emotional reaction before the person receiving the call has time to question what’s happening.
Businesses can also be targeted. A criminal might impersonate a company executive and request an urgent payment or change to payment instructions.
What to watch for: An unexpected request for money, particularly when accompanied by pressure to act quickly or keep the conversation secret.
If something feels unusual, hang up and contact the person directly using a number you already know.
3. Deepfake Videos and Images
You’ve probably seen videos online that use AI to make someone appear to say or do something they never actually said or did.
This technology is commonly referred to as a deepfake.
While deepfakes can be used for entertainment and other legitimate purposes, scammers can also use them to impersonate individuals, promote fraudulent investments or create misleading endorsements.
For example, a video might appear to show a recognizable public figure recommending an investment opportunity. Another might imitate a business executive delivering instructions to employees.
The challenge is that some AI-generated images and videos can look highly realistic.
Although visual inconsistencies may occasionally reveal a fake, those clues aren’t always reliable.
What to watch for: Be skeptical of unexpected financial requests or opportunities presented through videos, even when the person on screen appears familiar.
Before acting, verify the information through an independent, trusted source.
4. Impersonating Banks and Other Trusted Organizations
Scammers have long pretended to represent banks, government agencies and well-known companies.
AI can make these impersonation attempts more convincing by helping criminals produce realistic messages and conversations.
A scammer might contact you claiming to be from your financial institution and warn that suspicious activity has been detected on your account.
They may then ask you to verify personal information, provide a security code or transfer money to another account.
In some cases, criminals also use caller ID spoofing to make a phone call appear to originate from a legitimate organization.
Remember, a familiar name or phone number appearing on your screen does not guarantee that the caller is legitimate.
If you receive an unexpected call about your bank account, end the conversation and contact your financial institution directly using its official website, mobile app or a trusted phone number.
How to Recognize the Warning Signs of an AI Scam
AI-generated messages, cloned voices and deepfake videos may look different, but many scams share the same underlying tactics.
Recognizing those tactics is often more useful than trying to determine whether AI was involved.
Pressure to Act Immediately
Scammers frequently create a sense of urgency.
You might hear that your account will be closed, a family member is in danger or a payment must be completed within minutes.
The goal is to discourage you from taking the time to verify the request.
Legitimate financial concerns deserve attention, but you should always have the opportunity to confirm who you’re communicating with.
Requests for Secrecy
Be cautious if someone tells you not to discuss a financial request with anyone else.
A caller might claim that involving another person will make an emergency worse or that a transaction must remain confidential.
Secrecy can prevent you from recognizing inconsistencies or getting a second opinion.
Unusual Payment Instructions
Requests to send money through gift cards, cryptocurrency or unfamiliar payment methods are common warning signs.
Similarly, be cautious if someone unexpectedly asks you to transfer money to a different account, even if they claim the transfer is necessary to protect your funds.
For businesses, unexpected changes to vendor payment instructions should always be independently verified.
Requests for Personal Information or Security Codes
Scammers may ask for account numbers, passwords or one-time verification codes.
These codes are designed to help protect access to your accounts. Sharing them with someone else may allow that person to bypass an important security measure.
Never provide a one-time security code to someone who unexpectedly contacts you.
Attempts to Prevent Verification
Perhaps the clearest warning sign is someone discouraging you from checking their identity.
They may insist that you remain on the phone, avoid contacting your bank or act before speaking with a family member.
If someone doesn’t want you to verify a request, that’s a good reason to stop the conversation.
How to Protect Yourself From AI Scams and Deepfakes
You don’t need specialized software or advanced technical knowledge to reduce your exposure to AI-powered fraud.
Many of the most effective precautions are everyday habits that help you stay in control of your personal and financial information.
1. Slow Down Before Responding
Scammers often depend on quick decisions.
If you receive an unexpected message involving money, personal information or an urgent situation, take a moment before responding.
Ask yourself:
- Was I expecting this request?
- Does the situation make sense?
- Is someone pressuring me to act?
- Can I verify the information independently?
Taking a few extra minutes can help you recognize something you might otherwise overlook.
2. Verify Requests Using a Trusted Contact Method
One of the most effective ways to protect yourself is to confirm unexpected requests through a separate communication channel.
If someone claiming to be from your bank calls you, hang up and call the bank directly using a number you know is legitimate.
If a family member calls requesting emergency funds, try contacting them through their usual phone number.
For businesses, verify changes to payment instructions using previously established contact information rather than the phone number provided in the request.
The important distinction is that you initiate the verification. Don’t rely solely on contact information supplied by the person making the request.
3. Establish a Family Verification Phrase
A family verification phrase, sometimes called a family code word, can provide another way to confirm someone’s identity.
Choose a phrase or question that family members know but that wouldn’t be easy for someone else to discover online.
If you receive an unusual call from someone claiming to be a relative, ask them to provide the phrase.
Avoid using publicly available details such as birthdays, pet names or information shared on social media.
This approach can be particularly helpful when discussing fraud prevention with older family members or relatives who may be unfamiliar with voice cloning technology.
A verification phrase is an additional precaution, not a substitute for contacting the person independently.
4. Protect Your Online Accounts
Good account security remains important, regardless of whether a scam involves AI.
The Cybersecurity and Infrastructure Security Agency (CISA) recommends several everyday cybersecurity practices:
- Use strong, unique passwords for important accounts.
- Enable multifactor authentication whenever available.
- Keep devices and software updated.
- Recognize and report suspicious messages.
- Avoid sharing sensitive account information through unexpected communications.
Multifactor authentication adds another layer of protection by requiring an additional verification step when signing in.
Whenever possible, use phishing-resistant authentication methods such as passkeys.
5. Be Mindful of What You Share Online
Social media is a great way to stay connected, but publicly available information can also help scammers make impersonation attempts more convincing.
Details about your family, employer, travel plans and personal relationships may provide useful context for someone attempting fraud.
Public audio or video recordings can also potentially be used in voice cloning attempts.
You don’t need to stop sharing online altogether. Consider reviewing your privacy settings and limiting the personal details available to people you don’t know.
6. Use Available Banking Security Tools
Many financial institutions provide resources and account management tools that can help customers monitor activity and respond to potential fraud.
At InBank, customers can explore our debit card controls and review additional fraud prevention tips.
It’s also important to understand how different payment methods work before sending money.
For example, when sending money with Zelle, confirm that you know and trust the recipient. Payments to enrolled recipients can generally be sent within minutes and may be difficult or impossible to reverse.
Taking advantage of available resources can help you make more informed decisions about your financial security.
What to Do if You Think You’ve Been Targeted by an AI Scam
Even people who take precautions can encounter convincing scams.
If you believe you’ve received a fraudulent message, phone call or payment request, the next steps depend on whether you’ve shared information or sent money.
If you received a suspicious message but haven’t responded:
Avoid clicking links, downloading attachments or sharing information. Contact the organization or person independently if you need to verify the request.
If you shared a password or security code:
Change the affected password immediately through the legitimate website or app. If the same password is used elsewhere, update those accounts as well.
Contact the organization associated with the account to discuss additional protective steps.
If you sent money or shared financial information:
Contact your bank or financial institution as soon as possible. Explain what happened and provide relevant details about the transaction.
Depending on the circumstances and payment method, your financial institution may be able to help you identify available next steps.
If you believe your identity or personal information has been compromised:
Review your accounts for unusual activity and consider whether additional protections, such as a fraud alert or credit freeze, are appropriate.
You can also report suspected fraud to the following agencies:
- Federal Trade Commission: Visit ReportFraud.ftc.gov to report scams and learn about recovery steps.
- FBI Internet Crime Complaint Center: Visit IC3.gov to report suspected internet-related crime.
Reporting fraud can help authorities identify patterns and investigate criminal activity.
If you’re an InBank customer and believe your financial information has been compromised, contact InBank promptly.
Staying Informed Is One of Your Best Defenses
Artificial intelligence will continue to change how people communicate, work and interact online.
It will also continue to influence the tactics scammers use.
That doesn’t mean every unexpected call or unfamiliar message should cause concern. It means taking a thoughtful approach to requests involving your money or personal information is more important than ever.
Remember that a familiar voice, a professional-looking email or a realistic video isn’t necessarily proof that something is legitimate.
When in doubt, slow down, verify the request and reach out through a trusted contact method.
At InBank, we believe helping customers make informed financial decisions includes providing resources to recognize and respond to potential fraud.
Visit our fraud protection and security page for additional guidance on protecting your personal and financial information.
Frequently Asked Questions About AI Scams
What is an AI scam?
An AI scam is a fraudulent attempt that uses artificial intelligence to deceive someone. Criminals may use AI to generate convincing emails, imitate voices or create fake images and videos. The objective is typically to obtain money, personal information or unauthorized access to accounts.
How do voice cloning scams work?
Voice cloning scams use AI-generated audio to imitate another person’s voice. Scammers may impersonate family members, company executives or other trusted individuals to request money or sensitive information. If you receive an unexpected request, verify the person’s identity by contacting them directly through a trusted phone number.
How can I protect myself from deepfake scams?
Avoid relying on a video or audio recording alone to verify someone’s identity. Be cautious of unexpected financial requests, particularly those involving urgency or secrecy. Confirm information through an independent source, use strong account security practices and consider establishing a family verification phrase.
Can scammers use AI to impersonate my bank?
Yes. Scammers can use AI-generated messages, voice imitation and other impersonation techniques to make communications appear to come from financial institutions. If you receive an unexpected request involving your account, contact your bank directly using its official contact information.
What should I do if I fall victim to an AI scam?
Contact your financial institution immediately if money or account information was involved. Change any compromised passwords, review your accounts and report the incident to the FTC or FBI’s Internet Crime Complaint Center. Acting promptly may help limit additional harm.