UAE Warns: AI-Driven Phishing Scams Account for 90% of Cyber Breaches
In a recent statement, the Cybersecurity Council of the UAE highlighted a troubling trend in cybercrime: over 75% of cyber intrusions originate from phishing emails or deceptive messages that may harbor malware, seek to steal login credentials, or facilitate identity theft. This alarming statistic underscores the pervasive nature of such fraud, which exploits gaps in user awareness and safe digital practices.
3.4 Billion Phishing Emails Daily
The Council reported that a staggering 3.4 billion phishing emails are dispatched globally each day, targeting vast numbers of individuals to pilfer personal, financial, and sensitive information. This stolen data can subsequently be weaponized for cyberattacks, extortion schemes, or ransom operations.
To combat this threat, the Council emphasized the importance of protecting personal data and provided several indicators to help identify phishing attempts. Key warning signs include emails soliciting upfront payments, messages pressuring recipients to act immediately without due consideration, requests for personal information lacking clear justification, offers that seem excessively attractive, and prompts to log in through unfamiliar links. Additionally, emails riddled with spelling and grammatical errors are common indicators of phishing attempts aimed at compromising accounts and stealing data.
Updated Guidelines to Avoid Suspicious Links
To safeguard against fraudulent messages, the Council has issued a set of guidelines for citizens and residents. These recommendations include avoiding clicks on suspicious or unknown links, refraining from scanning QR codes in public or untrusted environments, and protecting personal and login information by not sharing it with unverified entities.
The Council also stressed the necessity of securing personal accounts—such as email and social media accounts that may contain sensitive information—by enabling multi-factor authentication and regularly updating systems and applications. Users are encouraged to report any fraudulent or suspicious messages immediately, avoid engaging with them or their senders, and notify the relevant authorities for appropriate action.
The Human Factor: The Most Critical Link
The Cybersecurity Council underscored that the human element remains the most crucial component in cybersecurity. Timely reporting of phishing attempts or suspicious messages allows security teams to analyze threats and implement preventive measures swiftly, potentially averting serious security incidents.
The statement noted that ensuring safety in cyberspace has become a significant challenge. Adherence to preventive measures and sound digital behavior is essential to support ongoing government efforts to tackle digital threats exacerbated by rapid technological advancements.
The Council’s awareness campaign, “Cyber Pulse,” is part of the UAE’s broader initiative to cultivate a secure cyber environment that protects users from evolving digital risks. This initiative aims to enhance trust in the digital ecosystem while raising digital awareness among individuals and families, promoting cybersecurity best practices to safeguard the privacy and security of citizens and residents amid accelerated digital transformation.
AI-Powered Phishing Accounts for 90% of Breaches
In its latest warning, the Cybersecurity Council revealed that AI-driven phishing is responsible for over 90% of digital breaches. Cybercriminals are increasingly adept at crafting messages that appear credible, utilizing advanced technologies to eliminate typical warning signs and design highly sophisticated scams that are challenging to detect.
The Council urged users to remain vigilant before clicking on any links and to verify the sources of advertisements, messages, and any requests involving personal or financial information before disclosing sensitive data.
AI is Reshaping Fraud Tactics
The Council further noted that artificial intelligence technologies have fundamentally altered the landscape of fraud tactics and methods. Complex operations can now be executed within seconds, heightening the risks of cyber fraud—especially AI-driven scams—and emphasizing the need for heightened awareness of these evolving threats.
These technologies complicate fraud detection by enabling scammers to generate highly convincing content, including voice cloning, logo manipulation to appear official, and refinement of language and design to near perfection. Scams are often framed as urgent security requests, and fraudulent links are designed to appear legitimate, contributing to the rapid escalation of technology-enabled cybercrime.
For further insights into the implications of these developments and the broader context of cybersecurity in the region, visit gulfnews.com.
Keep reading for the latest cybersecurity developments, threat intelligence and breaking updates from across the Middle East.


