How to Spot and Avoid AI Scams

Article overview

In this article, you'll learn:

• How AI scams work: See how criminals use LLMs, voice cloning and deepfakes to make fraud more believable.
• Which warning signs matter: Recognize urgency, unusual payment demands, suspicious links and requests for sensitive information.
• How to verify a message: Use a trusted phone number, official website or separate channel before taking action.
• How AAA can help: Activate free ProtectMyID from Experian to add identity monitoring and support.

Artificial intelligence is making everyday tasks faster and more convenient, but it's also giving scammers powerful new tools. Today's fraudsters use generative AI, large language models (LLMs), voice-cloning technology and deepfake videos to create convincing messages that can be difficult to spot.

Understanding how AI-powered scams work is the first step toward protecting your identity, finances and online accounts.

What are AI scams?

AI scams are “familiar fraud” schemes that are made faster, more polished and more personal with artificial intelligence. Generative AI can help criminals write natural-sounding emails and texts, translate scripts, imitate a person's writing style and even create realistic audio, images or video. LLMs can also turn details gathered from public social media, data breaches or public records into highly targeted messages.

That means today, old clues such as awkward grammar or generic wording are less reliable. A scam message may sound professional, mention real details and appear to come from a person or organization you know. 

What are the most common AI scams?

AI voice-cloning and family emergency scams

A caller or voice message may sound like a child, grandchild, friend, executive or public official, like a police officer, who urgently needs money or information. To avoid being scammed, the Federal Trade Commission recommends calling the person back at a number you already know. A family code word can provide another quick check, but it should not replace independent verification.

Deepfake video and impersonation scams

Scammers can create or alter an existing video called “deepfakes” to impersonate a trusted person, government official or business representative. The FBI has warned that criminals use AI-generated videos and spoofed websites to make impersonation schemes appear legitimate.

Treat an unexpected video call or social post as a claim to verify, not proof of identity.

AI-written phishing, smishing and vishing

LLMs can generate polished, personalized emails, text messages and call scripts at scale. The message may claim there is a missed payment, traffic ticket, account problem, delivery issue, job offer or security alert.

Do not use the link or phone number in the message. Open the organization's app, type its known web address yourself or call a verified number.

Fake customer support and recovery scams

Fraudsters may pose as tech support, a bank, law enforcement or a service that can recover money lost in an earlier scam. They may ask for remote access, cryptocurrency, gift cards, a wire transfer or personal information.

Legitimate organizations never need your password, one-time security code or payment to “unlock” recovered funds.

Synthetic profiles and investment scams

AI-generated profile photos, messages and documents can support romance, job and investment scams over weeks or months. Be cautious when someone you have not met asks for money, requests access to an account, promotes guaranteed returns or pushes the conversation to an encrypted messaging app.

How can you tell if a message is an AI scam?

No single visual or audio clue can reliably prove that content is fake. Instead, look at the behavior behind the request:

• It creates panic, secrecy or pressure to act immediately.
• It asks for cryptocurrency, gift cards, a wire transfer or payment through an unfamiliar method.
• It requests a password, verification code, Social Security number, banking information or copy of an ID.
• It sends you to a shortened, misspelled or unfamiliar web address.
• It asks you to move to another messaging app or avoid contacting anyone else.
• It discourages you from hanging up, researching the claim or speaking with a trusted person.

How can you protect yourself from AI scams?

1. Pause before responding. Urgency is meant to bypass your judgment. Do not click, pay or share information until you verify the claim.
2. Contact the person or organization separately. Use a phone number, app or website you already trust—not the contact information in the message.
3. Use a family verification plan. Agree on a private code word and a backup contact. Avoid posting the code online or reusing it as a password.
4. Protect your accounts. Use unique passwords or passkeys, turn on multifactor authentication and never share a one-time security code.
5. Limit public personal details. Review social media privacy settings and avoid publicly posting travel plans, family details, addresses or long clips of your voice.
6. Monitor for identity misuse. Review financial accounts and credit activity, and act quickly on alerts you do not recognize.

How can ProtectMyID help AAA Members?

Your AAA Membership includes free access to ProtectMyID from Experian. After enrollment, identity and credit monitoring can alert you to certain changes or suspicious activity connected to your personal information. If identity theft occurs, fraud-resolution support can help you understand the next steps.

Monitoring cannot stop every AI scam or prevent every form of fraud. It works best as one layer of a broader plan that includes independent verification, secure accounts and careful review of financial activity. 

What should you do if you responded to an AI scam?

Act quickly. Stop communicating with the sender, contact your bank or payment provider, change affected passwords and review your accounts. If you shared a one-time code or login information, secure that account immediately and sign out other sessions. Save screenshots, phone numbers, email addresses, web addresses and payment records.

Report suspected fraud to the Federal Trade Commission at ReportFraud.ftc.gov. Report cyber-enabled crime to the FBI's Internet Crime Complaint Center. If your identity may have been compromised, place a fraud alert or security freeze with the credit bureaus and use your identity-protection service for guidance.

As AI technology continues to evolve, scams will likely become even more sophisticated, making verification more important than ever. The good news is that a few simple habits, such as pausing before you act, confirming requests through trusted channels and protecting your personal information, can help you avoid becoming a victim.