Attackers now use AI to write flawless phishing emails, clone voices, and impersonate executives. The old typos-and-grammar tells are gone — verify through a second channel.
New AI tactics to know
Deepfake emails mimic an exec's tone perfectly. Voice cloning fakes urgent phone calls. AI scrapes your socials to personalize a lure. Business Email Compromise (BEC) targets payments and wire transfers.
- Treat urgent money or credential requests as suspicious by default.
- Confirm wire transfers via a known phone number — not the one in the email.
- Set a family/team code word for high-stakes voice requests.
Shrink what AI can scrape
The more personal detail you post, the easier you are to impersonate. Limit what you share about your role, schedule, pets, schools, and family on public profiles.
- Audit what's public on LinkedIn and social media.
- Avoid using real answers for security questions.
- Be cautious sharing org charts, vendor names, and travel plans.