New-age phishing scams: Expert tips on how to stay safe, spot the red flags

Online shopping frauds are becoming harder to detect. Scammers now create fake product listings on e-commerce websites complete with professional-looking websites, deepfake-generated promotional videos, and fake customer reviews (Image: Canva)

Have you ever received an urgent email from your bank about suspicious activity in your account? Sit up and spot the red flag, because even if the logo looks perfect, the language is polished, and the sender’s name matches an actual customer service representative, you could be walking into a trap.

Clicking the link and entering your login credentials without a second thought might seem like the right thing to do, but a few hours later, unauthorised transactions could start showing up in your account. Welcome to the new era of AI-powered phishing scams, where cybercriminals use artificial intelligence to craft near-perfect impersonations of legitimate businesses, making it harder than ever to tell real from fake.

AI phishing scams: Cybercriminals are increasingly using AI tools to launch more convincing, targeted, and scalable scams. “AI is enabling fraudsters to create highly personalised and error-free phishing messages that mimic the language, tone, and appearance of trusted brands,” says Dhiraj Gupta, Co-Founder and CTO, mFilterIt. “These scams are no longer limited to poorly written emails, they now extend to voice messages, video calls, and even social media interactions,” he adds.

Also read | Google has these 6 safety tips for you to stay safe from online fraud

Phishing emails that look perfectly real: Forget the clumsy scam emails of the past. AI-generated phishing emails now look polished, professional, and personalised. These emails may come disguised as fake order confirmations, security alerts from banks, or customer service messages from e-commerce platforms. They often replicate official logos, email templates, and even writing styles, leaving little room for suspicion.

Are deepfakes making scams even harder to detect?

Would you trust a video call from your boss asking you to process an urgent payment? What if your bank’s fraud department left you a voicemail requesting immediate action? With AI-powered deepfake technology, scammers can now clone voices and faces with chilling accuracy. “Deepfakes add another layer of deception, making it nearly impossible to tell whether the person on the other end is real or fake,” adds Gupta.

Fake customer support messages:

During festive seasons or sales, scammers flood consumers with fake customer support messages, often through SMS or WhatsApp (smishing). These messages claim that there’s an issue with your order or payment and direct you to verify your details via a link. “Most people trust customer support messages, especially when they are already expecting a delivery or refund,” explains Gupta. This results in stolen login credentials and emptied accounts.

Also read | Online shopping scams: Fake websites, ‘unbelievable offers’ and other frauds that you should watch out for

Counterfeit products that look too good to be true:

Online shopping frauds are becoming harder to detect. “Scammers now create fake product listings on e-commerce websites complete with professional-looking websites, deepfake-generated promotional videos, and fake customer reviews. If a deal looks too good to be true, it probably is,” shares Gupta.

Fake websites and social media profiles:

Fraudsters are also setting up fake websites and social media profiles that mirror legitimate brands. “According to the US Federal Trade Commission (FTC), over 3,30,000 business impersonation scams were reported in 2023 alone. These scams don’t just harm consumers, they damage the reputation of real brands too,” Gupta shares and adds, “Brands must take responsibility to track fraudulent activities and educate their customers about these scams.”

He suggests tips to protect yourself from AI-powered scam

• Verify sender details: Double-check email addresses, especially when dealing with financial or sensitive information.
• Think before you click: Don’t rush to click on links or download attachments—cross-check on the brand’s official website.
• Enable two-factor authentication (2FA): This adds an extra layer of security to your financial accounts.
• Verify customer support messages: Always contact customer service through official channels before sharing any information.
• Trust your instincts: If a deal or request seems too urgent or too good to be true, it’s worth double-checking.