Purdue University cybersecurity experts have raised alarms about the increasing sophistication of online scams, particularly those leveraging artificial intelligence (AI) techniques. Eugene Spafford, a professor in the university’s computer science department, highlighted that scammers are now using AI to craft convincing emails and mimic voices, making it harder for individuals to discern legitimate communications from fraudulent ones.
Scammers have evolved their tactics, moving beyond traditional methods that often featured obvious grammatical errors. “AI can write them and customize them for everybody they are talking to,” Spafford noted, emphasizing the challenge this poses for potential victims. Recent reports indicate that scammers are employing AI to replicate the voices of friends or family members, creating scenarios that pressure targets into sending money quickly. For instance, a scammer might impersonate a relative claiming to be in distress and urgently needing financial assistance.
Common Scams and Their Tactics
Among the prevalent scams are those that promise free money or threaten legal action if immediate action is not taken. Spafford cautioned that legitimate law enforcement agencies do not communicate via text messages about warrants. Instead, they would arrive in person if there were a genuine issue. Scammers often create a sense of urgency, pushing individuals to act without fully considering the situation.
CWME’s earlier coverage of human-centred defences against AI scams discusses the role of verification and awareness training. Another tactic involves building rapport over time. Scammers may engage in lengthy conversations to establish trust before making requests for money or personal information. “The more conversation you have, the less suspicious you are going to be when they ask you to do something,” Spafford explained.
Identifying and Responding to Scams
Nolyn Johnson, a senior cybersecurity awareness specialist at Purdue, provided guidance on recognizing scams. Key indicators include requests for money, gift cards, or personal information, as legitimate organizations do not ask for sensitive data via email. Johnson advised individuals to be wary of offers that seem too good to be true and to look for poor grammar as potential red flags.
Scammers often gain access to email addresses through various means, including purchasing lists or compromising accounts. The low cost of mass email campaigns makes them financially viable for scammers, even if only a small percentage of recipients respond. Spafford noted that a single successful scam can yield significant returns on minimal investment.
When encountering a suspicious email or text, Purdue’s Cybersecurity Awareness website recommends not clicking on links or opening attachments from unknown senders. Responding to such messages can confirm that the account is active, making it a target for further scams. If someone falls victim to a scam, they should act quickly—contacting their bank or credit card company can sometimes reverse unauthorized charges, especially if done within hours.
For payments made via gift cards, contacting the issuing company may help freeze the balance or recover funds. However, transactions made through platforms like Zelle or Venmo are typically irreversible due to their lack of buyer protection. In cases of financial loss, victims are encouraged to report the incident to law enforcement, as even experts can fall prey to these schemes.
As scams continue to evolve, awareness and education remain crucial in preventing victimization. Purdue University is hosting various events throughout October in recognition of Cybersecurity Awareness Month, aiming to equip individuals with the knowledge to recognize and respond to online scams effectively.
