Skip to main content
All lessons
Lesson 4Scams & Social Engineering pathway

Spot AI-Powered Phishing

Deepfakes, voice clones, and BEC

Highlighted wordsare glossary terms — tap one for a plain-language definition.

Attackers use AI to write flawless emails, clone voices, and impersonate executives. The old typo tells are gone, so verify on a second channel.

New AI tactics to know

emails mimic an exec's tone perfectly. fakes urgent phone calls. AI scrapes your socials to personalize a lure. Business Email Compromise (BEC) targets payments and wire transfers.

  • Treat urgent money or credential requests as suspicious by default.
  • Confirm wire transfers via a known phone number — not the one in the email.
  • Set a family/team code word for high-stakes voice requests.

Shrink what AI can scrape

The more personal detail you post, the easier you are to impersonate. Limit what you share about your role, schedule, pets, schools, and family on public profiles.

  • Audit what's public on LinkedIn and social media.
  • Avoid using real answers for security questions.
  • Be cautious sharing org charts, vendor names, and travel plans.

Brought to you by NorthBridge

Unfamiliar term? Open the Digital Safety Glossary