AI Scams — Spot Them Before They Cost You

You do not need to become a security expert. You need to recognize the shape of these six scam categories, because most AI-enabled fraud fits into one of them.

1. Voice cloning calls: A cloned voice of a family member, boss, or coworker asking for money or a wire transfer, usually with urgency.
2. Deepfake video calls: A fabricated face on a live video call — used to impersonate executives, recruiters, or love interests.
3. AI romance scams: A chatbot or scammer using AI to build a relationship over weeks, then asking for money.
4. AI-written phishing: Emails, texts, and messages written by AI to sound personal and error-free, at massive scale.
5. Fake AI investment tools: “AI trading bots” or platforms promising guaranteed returns.
6. Fake AI job offers: Recruiter profiles, interviews, and onboarding steps that are partly or entirely AI-generated.

They rarely appear alone

A single scam often blends several of these. A romance scam may end with an “investment opportunity.” A fake job offer may ask for a photo of your ID. The common thread is not the story — it's the pattern of urgency, secrecy, and a request for money, gift cards, crypto, or personal information.

You get a call. It's your grandson's voice — panicked, saying he's been in an accident or arrested and needs money right now, and please don't tell Mom and Dad. Or it's your boss's voice, asking you to wire money for an urgent, confidential deal. The voice sounds exactly right. That is the whole scam.

How the call is built

Scammers pull a short audio clip — from a social media video, a voicemail greeting, or a public appearance — and feed it into a voice-cloning tool. Within minutes they have a voice that can say anything they type. They pair it with details scraped from social media (a real trip, a real relative's name, a real employer) to make the story convincing.

The three versions you'll see most

• Family emergency: A “relative” in a crash, arrest, or hospital, asking for bail, medical costs, or a lawyer's fee — paid by wire, gift card, or crypto.
• Boss / CEO scam: An “executive” instructing an employee to wire funds or buy gift cards for a confidential, time-sensitive reason.
• Kidnapping hoax: A caller claims to be holding a family member and plays a cloned voice of them crying or pleading in the background.

You cannot train your ear to catch a good voice clone — researchers say the best ones are already indistinguishable from the real thing. So don't trust the voice. Trust a verification step the scammer cannot fake.

Set up a family code word

Pick a word or short phrase your close family or business partners will remember, that a stranger could never guess from social media — not a pet's name, a birthday, a school, or anything you've posted publicly. Agree that anyone claiming to be in an emergency must give the code word, no exceptions, no matter how urgent it sounds.

The 60-second pause

Whether or not you have a code word set up, hang up and call the person back on a number you already have saved — not a number the caller gives you. Take sixty seconds before sending anything. The FTC's own advice is blunt: a genuine emergency can survive a brief pause; a scam usually cannot survive you checking.

For small businesses

Wire transfer requests “from the boss” are a classic target. Put a simple rule in place: any wire transfer or gift card purchase requested by phone, text, or email must be confirmed with a phone call to a known number before it happens — no exceptions, even for the owner.

Romance scams are not new, but AI changed two things: the conversation and the face. A scammer can now use an AI chat tool to hold a warm, attentive, emotionally intelligent conversation with dozens of targets simultaneously — remembering details, never running out of patience, never slipping up on a story. And if a target insists on a video call, deepfake face-swap tools can put a completely fabricated, good-looking face on the call in real time.

It doesn't start where you'd expect

Most people picture these scams starting on dating apps, but a large share now start with an unsolicited message on ordinary social media — a comment, a friend request, a “wrong number” text that turns into a conversation. Regulators have tracked well over a billion dollars in reported romance-scam losses in a single recent year, a double-digit increase from the year before.

You don't need to distrust every online connection. You need to recognize a specific pattern that shows up again and again in these scams.

Watch for this combination

• Fast, intense affection: Declarations of love or deep connection within days, before you've met.
• Won't meet, won't do a real video call: Constant excuses — overseas work, military deployment, a “broken camera” — and if a video call happens, it feels oddly scripted or the face looks slightly off around the mouth or edges.
• A story built for sympathy: A crisis that always seems to require money — medical bills, travel costs, a stuck shipment, a legal fee.
• Pressure to move off the platform: A quick push to switch to text, email, or a messaging app outside the dating site.
• An eventual “opportunity”: Introduction to a crypto platform or investment that promises returns — the pig-butchering pivot.

The rule that protects you

Never send money, gift cards, or cryptocurrency to someone you have not met in person — no matter how long you've talked or how real the relationship feels. A reverse image search on their profile photo is a five-minute check that catches many fakes.

Fake AI investment platforms promise a trading bot or algorithm that generates guaranteed, outsized returns with little risk. Some use deepfake videos of well-known business figures or celebrities appearing to endorse the platform. Regulators have already taken action against schemes of this kind that defrauded consumers of tens of millions of dollars.

The warning signs are consistent

• Guaranteed returns: No legitimate investment can guarantee a specific profit. Markets carry real risk, always.
• Manufactured urgency: “Limited spots,” “price goes up tonight,” “act before the algorithm closes enrollment.”
• Unregistered or unverifiable: No license, no verifiable business address, no way to confirm the people behind it are real.
• Payment only in crypto: Crypto payments are difficult to trace and nearly impossible to reverse — a favorite for this reason.
• A celebrity or expert “endorsement” that you cannot verify came from that person's real, official account.

Job scams have moved onto the same playbook. AI-generated recruiter profiles reach out with polished messages, and some scams go as far as a deepfake video “interview” using a face-swap filter over a real person reading a script.

Red flags in the outreach

• Unsolicited contact on the wrong platform — a recruiting message arriving by text or WhatsApp instead of a professional network.
• Vague job details with unusually high pay for the described work.
• Requests for personal data — ID photo, Social Security number, or a bank account — before any real offer exists.
• A rushed process: Same-day interviews and same-day “onboarding” over chat apps, with no formal offer letter.

Red flags in the interview itself

A recruiter or interviewer who refuses to turn their camera on, claims their connection can't handle video, or whose face glitches near the mouth or has strange blurring at the edges may be using a real-time deepfake filter. Ask an unscripted, unexpected question — AI-run interviews often can't respond naturally outside a prepared script.

Every scam in this course relies on rushing you past the moment where you'd normally think clearly. This three-step routine puts that moment back.

Stop

The instant something asks for money, gift cards, crypto, or sensitive information under urgency or secrecy, pause on purpose. Do not act while still on the call, in the chat, or on the platform where the request happened. A genuine emergency, job offer, or relationship can survive a pause. Pressure to skip this step is itself a red flag.

Verify

Confirm the request through a channel the requester doesn't control: call the person back on a number you already had saved, check a claim against the official company or agency website you find yourself, or ask your family code word from Module 2. Never use a phone number, link, or “support agent” the requester gave you to do the verifying.

Report

Tell someone — a family member, a coworker, your bank — even if you're not sure it was a scam and even if you feel embarrassed. Talking it through out loud is often what breaks the spell, and it helps protect others who may get the same call or message.

If you've already sent money, shared sensitive information, or realize partway through that something is wrong, speed matters — but so does not panicking further. Here's the order to work through.

Immediate steps

1. Stop all contact with the scammer. Do not explain, negotiate, or send “just a little more” to fix it — that is a common second-stage scam.
2. Call your bank or card company right away if money or account details were involved. Ask about reversing a transfer, disputing a charge, or freezing an account.
3. Change passwords on any account you may have exposed, starting with email and banking.
4. Freeze your credit with the major credit bureaus if a Social Security number or other identity document was shared.

Report it

File a report at ReportFraud.ftc.gov and, for internet-based crimes, at the FBI's IC3.gov. For a local incident, your county's non-emergency law enforcement line can also take a report. Reporting rarely gets money back directly, but it helps investigators track patterns and can support any dispute you file with a bank.