5 Tips to Outsmart AI Scams | USF Credit Union Cybersecurity Tips

USF Credit Union 

During Cybersecurity Month, we've been sharing practical tips and advice from the experts at USF Credit Union on protecting your money from scammers.

This time, we're looking at how artificial intelligence is changing the way scammers operate -and why some of the old warning signs no longer tell the whole story.

Not long ago, a phishing email filled with misspellings, awkward wording or obvious grammatical errors was easier to spot. Today, artificial intelligence can help scammers create polished, convincing messages that look and sound legitimate.

That makes it harder to tell what's real. But USF Credit Union Information Security Specialist Cole P. says one of the most effective ways to protect yourself hasn't changed: verify before you act.

“Verification is the biggest thing,” Cole says. “If you think you know the sender and it looks legit, might as well just follow up and ask them, ‘Hey, what is this referencing? What's this for?’ There's no harm in double-checking.”

That extra step could be the difference between protecting your information and handing it directly to a scammer.

AI is making scams harder to spot

Artificial intelligence gives scammers new ways to create believable messages and personalize their approach.

Here are a few ways these scams can show up:

• Phishing emails that look professional. Scammers can use AI to write convincing emails that imitate banks, businesses, employers or other organizations. A message without spelling mistakes or grammatical errors isn't necessarily a legitimate one.
• Fake voices and videos. AI can generate or imitate someone's voice, and even create realistic video, making it possible for scammers to impersonate a family member, executive or other trusted person. They may use that familiarity to request money or confidential information.
• Fake customer service conversations. AI-powered chatbots can pose as representatives of legitimate companies, guiding people toward fraudulent payments or requests for personal information.
• Job offers that seem real. Scammers can use publicly available information from job boards and professional profiles to make fraudulent opportunities feel personal. A seemingly legitimate recruiting process may eventually lead to a request for an upfront fee or sensitive information.
• Messages designed to create urgency. Whether the message comes by email, text, phone or another channel, scammers want you to act before you have time to question what you're being told.

The common thread isn't necessarily poor writing, a suspicious-looking message or an obvious mistake. It's the attempt to gain your trust and get you to act without verifying the details.

Don't let urgency outrun your judgment

A convincing message can catch anyone off guard, especially when it arrives during a busy day.

Cole says scammers count on people being too busy to look closely.

“They are hoping and praying that you are someone who doesn't have enough time to verify something,” he says. “They're praying that you don't look into this.”

An urgent request isn't automatically a scam, but urgency combined with a request for money, account credentials or personal information should prompt you to take a closer look.

Be especially cautious when a message asks you to click a link, open an unexpected attachment, provide a password or share financial or personal details. Even if you recognize the sender's name, don't assume the message is genuine.

5 ways to protect yourself from AI scams

You don't need to be a technology expert to recognize a potential scam. A few straightforward habits can help you make safer decisions.

• Verify who sent the message. Check the full email address, phone number or other contact information. A familiar name or profile picture isn't proof of identity. When in doubt, contact the person or organization through a trusted number, website or communication channel you already know is legitimate.
• Be skeptical of urgency. Take extra care with messages demanding immediate payment, threatening consequences or claiming you must act now to avoid missing an opportunity. Slow down, even when the request appears to come from someone you trust.
• Think before clicking. Unexpected links and attachments can lead to fraudulent websites or expose your information. Instead of following a link in a message, navigate directly to the organization's official website or use its established app.
• Never share sensitive information just because someone asks. Be cautious with requests for passwords, verification codes, Social Security numbers, account information or other personal details. Don't assume a caller, email sender or chatbot is legitimate simply because it sounds professional or knows something about you.
• Ask someone else to take a look. If a message feels unusual or you're not sure whether it is legitimate, get a second opinion before responding or sending money.

AI scams can be difficult to recognize, particularly for people who aren't as familiar with newer technology. Cole recommends asking someone you trust for another perspective when something doesn't look right.

He notes that a younger family member who is comfortable with technology may be able to help identify suspicious messages or requests.

The principle applies to anyone, regardless of age or technical experience. A second set of eyes can help you notice something you missed, question an unexpected request or decide to verify the sender before taking action.

You don't have to figure everything out on your own. And you don't need to be certain a message is fraudulent before asking for help.

When in doubt, double-check

AI is changing what scams look like, but it doesn't change the importance of slowing down and verifying what you're being asked to do.

A polished email can still be fraudulent. A familiar voice may not belong to the person you think it does. And a message that fits the circumstances of your day may still be designed to take advantage of you.

Cole's advice is simple: take the time to check.

If an email, call, text or online conversation asks you to act quickly or share something sensitive, verify it independently before moving forward. If someone claims to represent an organization, contact that organization through a trusted channel. If a family member or colleague makes an unusual request, reach out to them directly.

You don't have to catch every red flag if you make verification part of your routine.

Want more ways to protect your money and strengthen your financial know-how? Visit our Financial Wellness page for practical tips, tools and resources from USF Credit Union.