Spot AI Deepfakes Before It’s Too Late
Scammers use AI to mimic real people – their voice, face, or writing – to trick victims into sending money or sharing sensitive information. The rise of deepfakes poses significant threats to businesses, as cybercriminals exploit AI tools for impersonation and fraud.
How Scammers Trick You
- Deepfake CEO and Executive Fraud (Fake Boss Scam): AI-generated voice or video of a CEO or executive requesting an urgent wire transfer. Often used in business email compromise (BEC) attacks.
- Deepfake Customer Support Scams: Scammers create AI-generated video calls of fake customer support agents. The fake representative looks and sounds real, convincing customers to give them access to their computer, share credit card information, passwords, or access codes. A legitimate technical support person will never ask you for your credentials.
- AI-Generated Emergency Scams (Fake Family Members): Scammers clone a loved one's voice from a social media account to request money in an emergency. Common phrases may include, “Mom, I'm in trouble!” or “I was in an accident, and I need money now!”
- Fake Employee Scams: Fraudsters pose as legitimate job seekers, contractors, or vendors to infiltrate organizations to gain access to sensitive information, steal money, or disrupt operations. Using AI, they create convincing profiles, including forged identities, fake resumes, and deepfake videos.
- Romance and Celebrity Scams: AI deepfakes use images stolen online to draw in victims by mimicking celebrities to trick them into purchasing a fake product or cryptocurrency, sending money or personal information.
New World, New Rules
While it is important to keep an eye out for bad grammar and spelling errors, today’s AI scams appear more polished, professional, and nearly perfect. Generative AI takes what it has learned from examples input by the user and synthesizes something entirely new based on that information. These tools assist with content creation and correct human errors that would otherwise serve as warning signs of fraud.
Spotting the Fakes
- Urgent and Unusual Requests: “Send payment NOW,” “I need your login details ASAP.” AI scams create panic to stop you from thinking critically.
- Unexpected Voice Calls: The voice may sound familiar, but something may feel a bit off. No small talk? No details? AI lacks human touch. Always verify with a callback to a known number or ask a question only the real person could answer. AI can clone voices instantly.
- Email or Text from Leadership: It looks right, sounds right, but is it? Always follow established policies and procedures. Double-check the request using a different communication method.
- Money Movement Requests: Wire transfers, gift cards, cryptocurrency. Any surprise payment request should raise red flags.
- Odd Communication Changes: A sudden switch to new email address, phone number, or messaging application should raise alarms.
Discern and Defend
AI fakes are designed to make you act fast. Therefore, it is important to pause, verify, and confirm details. Slowing down and double-checking is your best defense.
- Verify the Source: Always call back using a verified number (not the phone number in the email).
- Use Multi-Factor Authentication (MFA): A cloned voice cannot fake a security code. Enable MFA and cross-check with a secondary contact method. Use a code word system with family and close friends.
- Set Up Payment Safeguards: Require dual approvals for large transfers or unexpected money requests.
- Stay Educated and Alert: AI scams evolve fast. Regular training keeps you and your employees one step ahead.