How to stay safe from AI scams

AI has made it harder than ever to spot a scam. To stay safe, don't give out personal information or send money if you get an unexpected call or email. Instead, contact the company directly using a trusted number or email address to confirm the request.

With the rise of hyper-realistic AI fraud, few people can confidently say they can spot a trap. In fact, a recent Citizens Cybersecurity & Fraud Survey¹ found that just 16% of consumers feel completely confident in their ability to identify a financial scam, and 90% agree that AI, deepfakes and realistic impersonation make it harder to tell what’s real.

AI has transformed scams from obvious fakes to realistic messages designed to build a sense of trust, leaving consumers feeling anxious and unsure about how to proceed. While it's true that AI has made scams harder to detect, knowledge is power. Protect yourself by knowing how AI has changed the game and what you can do about it.

4 AI scams most likely to target you

AI scams use artificial intelligence to impersonate people or companies you know in the hope of tricking you into giving up personal information, like your account numbers or passwords. AI-generated scams are more sophisticated than those of the past. These days, scam messages that look or sound legitimate have replaced the obvious spelling and grammar red flags you may be used to.

AI scams can take several forms, from email phishing attacks and voice or image impersonation to fake financial platforms.

AI voice cloning and vishing

All a scammer needs are three seconds of audio to accurately clone a voice. They can then impersonate that person on voice calls, attempting to convince their targets to reveal personal data or give them money. The scammer may impersonate a family member or friend who claims to need immediate help.

Setting up a code word or phrase, like a family password, can help you stop an AI voice scam in its tracks. Ask the caller to give you the code word. If they can't or you're suspicious, hang up immediately. You can call back on a verified number, but remember not to trust the caller ID, as it's easy to fake a phone number.

AI-generated phishing emails and texts

Fraudsters have embraced AI, which is used to create over 82% of phishing emails and can make scam creation up to 40% faster. AI-generated phishing emails or texts use your name and the company's writing style and may reference recent activity, making it hard to identify the scam.

A surefire tell that a message is a phishing attempt is the sense of urgency it conveys. The sender wants you to click or provide your information ASAP. The link in the message takes you to a fake website that looks identical to the real one.

The best way to protect yourself is to never click on a link in an unexpected message. If you're curious, type the company's website address manually. It is also helpful to know how a company or your bank will contact you so you can recognize if it looks different.

Deepfake video and image impersonation

An AI deepfake is a photo, video or audio recording that looks real but is entirely AI-generated. Using deepfake technology, a scammer can make a voice or video call to you, pretending to be someone you know. The deepfake may ask you to send money to help the caller in an urgent situation or provide personal information.

Deepfakes, AI and realistic impersonation make it more difficult to determine what's real and what isn't, say 90% of Citizens survey respondents.

Fortunately, there are ways to spot a deepfake. While they're trying to look real and natural, you'll usually notice something uncanny about them. On a video, a telltale sign is mouth movements that don't match what the person is saying, like in a poorly dubbed movie.

Pay close attention to the eye movements, especially unnatural blinking, and look out for weird shadowing or lighting. Your best bet is to end the call, then contact the person through a trusted channel.

Fake AI investment platforms and financial scams

Many legitimate trading platforms use AI to develop investment strategies. Of course, that means that scammers can also claim to use AI to generate investment returns. Think of it like an AI-generated Ponzi scheme. You hand over your money, and it looks like it's growing, but when you want to cash out, you find you have nothing.

Be extra cautious of any new trading platform that pops up, especially if it makes big promises or boasts about AI making you lots of money. Independently verify the platform with the SEC or FINRA BrokerCheck before you hand over any money.

How to build a personal AI scam defense system

With a personal AI scam defense system, you can protect your accounts and yourself from being a victim of AI scams. These six steps outline the behavioral habits and digital tools needed to fortify your personal security against AI-driven fraud.

1. Create a family verification code word. Any time you get an unexpected call involving money, emergencies or personal data, ask for the code word, regardless of how convincing the caller sounds.
2. Set up multi-factor authentication (MFA) on all financial and email accounts. With MFA, you have to complete a second verification step, which blocks 99% of account takeover attempts. An authenticator app is more secure than text messages.
3. Never act on urgency. Speed is the name of the game for scammers. Slow down, pause and confirm unusual requests before you act. A legitimate bank or company will never ask you to make a decision immediately.
4. Verify through independent channels. Rather than spending time determining if a message is real, the safest immediate response is verification. Use a trusted number or email address to confirm who contacted you. Type URLs directly into your browser, and do not click links.
5. Be proactive about monitoring accounts. Sign up for real-time transaction alerts through your bank's mobile app. The sooner you spot something off, the more options you have to minimize damage.
6. Limit your voice and image footprint. Any publicly available photos, videos or audio clips of you can be source material for cloning tools and identity theft. Be cautious about what you post and where you post it.
7. Know your bank’s contact methods. Being aware of how your bank contacts you can alert you to potential scams. For example, if you know your bank will never call, text or email you asking for sensitive information, you can recognize a scam right away if you get a text request to share your password.

If you think you've already been targeted

If you think you've been the victim of an AI scam, stay calm and don't panic. Stop all contact with the scammer right away and contact your bank or financial institution to report the fraud if you've shared any personal information or sent money.

If you can get in touch quickly, you have a better the chance of recovering your funds, so report scams through your bank’s or the Citizens mobile app*. Change your passwords immediately and run a security scan on any affected devices.

While not obligatory, you can also report the fraud to the FBI's Internet Crime Complaint Center and the Federal Trade Commission.

Protect yourself from AI scams

Scammers are always coming up with new ways to scam, and AI is making it easier than ever. True security isn't a safety net you deploy after a crisis hits; it's a foundational habit woven directly into your daily financial routine.

As fraud tactics evolve, being proactive about fraud protection and staying informed is your strongest shield. Explore the latest prevention strategies, recovery tools and expert insights by visiting the Citizens Fraud and Security Center and report fraud by calling Citizens at 1-(800) 922-9999.