The Rise of AI-Powered Account Takeover Scams

Criminals are increasingly exploiting AI technology to take over people’s mobile, banking, and online shopping accounts, the UK’s leading anti-fraud body has warned. Meanwhile, a record number of scams were reported to the national fraud database last year, fuelled by AI, which allows for large-scale deception on “industrialised” levels.

However, the tactics of criminals are shifting towards account takeovers, where they take control using stolen data and make unauthorised transactions. Additionally, most of the account takeover scams reported last year were for mobiles, online shopping, and personal credit cards, according to the Fraudscape report.

How AI is Supercharging Account Takeover Scams

The Cifas chief executive, Mike Haley, said the data showed fraud was becoming increasingly advanced and organised, and operated seamlessly across borders. For example, criminals often sell kits – “fraud as a service” – that enable others to commit the crime, while fake profiles are now able to be produced on a large scale.

Furthermore, synthetic identities are becoming industrialised, with criminals building convincing long-term profiles that blur the lines between real users and AI-generated impostors. Meanwhile, more individuals are selling or sharing their identity documents under financial strain, creating increased opportunities for misuse.

The Sharp Rise in Sim-Swap Fraud

There has been a sharp rise in attempted sim-swap fraud, where criminals try to trick a mobile phone provider into transferring a number to a sim in their possession, driven by the large amount of compromised personal data that is available. However, most of the scams reported to Cifas were identity fraud, where data is stolen to impersonate a victim to open new accounts and make purchases.

Additionally, more than 22,000 cases of money muling, where people allow their accounts to be used to transfer funds by criminals, were reported to Cifas. The tactics to get people to do this ranged from job scams to being overpaid when selling items on online marketplaces.

What You Can Do to Protect Yourself

To protect yourself from AI-powered account takeover scams, it’s essential to be vigilant and take steps to secure your online accounts. For example, you can:

• Use strong, unique passwords for all your accounts
• Enable two-factor authentication (2FA) whenever possible
• Monitor your accounts regularly for suspicious activity
• Be cautious when clicking on links or downloading attachments from unknown sources

Finally, it’s crucial to stay informed about the latest scams and tactics used by criminals. By being aware of the risks and taking steps to protect yourself, you can reduce the likelihood of falling victim to an AI-powered account takeover scam.

The Future of Account Takeover Scams

We anticipate more use of AI to personalise attacks and build credible, long-term profiles – reinforcing the need for cross-sector collaboration to spot patterns earlier. Therefore, it’s essential for individuals, businesses, and organisations to work together to prevent and detect account takeover scams.

Meanwhile, a survey this week from Barclays showed a lack of confidence among consumers at spotting AI-enabled scams, with just 36% saying they could do so. However, by educating yourself and others about the risks and taking steps to protect your online accounts, you can help prevent account takeover scams and stay safe online.

Conclusion

In conclusion, AI-powered account takeover scams are a growing threat, and it’s essential to be aware of the risks and take steps to protect yourself. By being vigilant, staying informed, and working together, we can prevent and detect these scams and stay safe online.

Therefore, take action today to protect your online accounts and reduce the likelihood of falling victim to an AI-powered account takeover scam. Additionally, stay informed about the latest scams and tactics used by criminals, and report any suspicious activity to the relevant authorities.

Frequently Asked Questions

Here are some frequently asked questions about AI-powered account takeover scams:

1. What is an account takeover scam? An account takeover scam is a type of scam where a criminal gains access to your online account and makes unauthorised transactions.
2. How can I protect myself from account takeover scams? To protect yourself, use strong, unique passwords, enable two-factor authentication, and monitor your accounts regularly for suspicious activity.
3. What is the role of AI in account takeover scams? AI is used by criminals to supercharge account takeover scams, allowing them to commit large-scale deception on an industrialised level.
4. How can I spot an AI-powered account takeover scam? To spot an AI-powered account takeover scam, be cautious of suspicious activity, such as unexpected transactions or changes to your account settings.
5. What should I do if I fall victim to an account takeover scam? If you fall victim to an account takeover scam, report it to the relevant authorities immediately and take steps to secure your online accounts.