The advancement of artificial intelligence (AI) has created many opportunities for both individuals and organizations, but this technology may also help criminals develop new methods of stealing. AI voice scams are a rising threat and generally entail a perpetrator using software programs to impersonate someone in an attempt to extort another party.
Specifically, if criminals can find a recording of someone’s voice, such as through a video posted on social media, they may be able to “spoof” that person’s voice and use it for nefarious purposes. Alarmingly, fraudsters may need just three seconds of audio to mimic their victim’s voice.
Common Types of AI Voice Scams
- Bank fraud—Criminals use AI-generated voice clones to impersonate bank representatives to fool victims into sharing sensitive information such as banking details and account passwords.
- Social media impersonations—Criminals create fake social media profiles and impersonate celebrities or other well-known individuals to exploit those who interact with fake accounts.
- Technical support scams—Criminals impersonate technical support representatives from well-known security organizations to install malware or trick victims into paying for fake “computer fix” services.
- Voice phishing—Criminals pretend to be a trusted contact (e.g., an employee’s manager) and trick victims into sharing sensitive information over the phone.
AI-Voice Scam Avoidance Tips
To mitigate the risk of AI-voice scams, share the following tips with employees:
- Be social media savvy. By adjusting their social media privacy settings, employees should avoid providing scammers access to voice recordings. Additionally, they should act cautiously when choosing who to follow online, personally or professionally.
- Ask questions. Employees should ask suspicious callers questions that only the person they may be impersonating would know the answer to. Additionally, they could consider establishing a code word to use with friends, family and co-workers.
- Look for inconsistencies. Employees should consider if the supposed caller is different from how they usually act or uses words they wouldn’t normally use.
- Hang up. If something doesn’t feel right, employees should hang up and phone the caller back on their regular phone number or the one advertised on the company’s website.
Did you know that 60% of small and medium businesses don’t survive after a cyber attack? Protect your business with Cyber Insurance, call us at 780.424.2727 or click here to get a quote.