Established by a former federal prosecutor · 20+ years prosecutorial experience · $12.5B lost to fraud in 2024 (FTC)
The Fraud CodexScam Intelligence
Live Threats
NewPig-butchering scams estimated to have stolen $75B globallyAlertIRS impersonation scams surge this 2026 filing seasonNewFake Coinbase support calls reported nationwide
● HIGH RISK

AI-Enhanced Phishing

Phishing used to give itself away with broken grammar. AI fixed that. The emails are now clean, personalized, and plausible, which means the old "look for typos" advice is dead. Verify any request through a channel you control, not the one that contacted you.

Losses: Part of $3 billion in business email compromise (2024)
Targets: Employees, executives, anyone with email
Updated: 2026-01-06
Also known as: Spear Phishing · AI Email Scam · Personalized Phishing
01

How It Works

AI makes phishing emails dramatically more convincing by eliminating the telltale signs of traditional scams. **Old phishing:** "Dear Customer, Your account have been suspended. Click link to verify." **AI phishing:** Perfectly written, personalized email referencing your real job title, recent company news, and mimicking your CEO's writing style. **How AI improves phishing:** 1. Perfect grammar and spelling (no obvious errors) 2. Personalization using scraped data from LinkedIn, social media 3. Mimics writing style of known contacts 4. Creates sense of legitimacy with accurate details 5. Automated at scale — thousands of unique, personalized emails
How Scammers Make Contact
EmailLinkedIn messagesText messages
02

Warning Signs & Red Flags

  • Unexpected request for urgent action
  • Request to change payment details or wire money
  • Pressure to bypass normal procedures
  • Email asks for login credentials
  • Links that don't match the displayed text
  • Sender address slightly different from official domain
  • Request comes at unusual time or seems slightly out of character
03

Real-World Example

"I received an email that looked exactly like it was from my CEO, referencing a board meeting that had actually happened. It asked me to wire $47,000 to a new vendor as an urgent payment. The writing style was perfect. I sent the money before realizing his email had been spoofed."

— FBI Business Email Compromise Report
04

How to Protect Yourself

  • Verify unexpected requests through a different channel (call the person)
  • Hover over links before clicking to see actual URL
  • Be suspicious of urgent requests to bypass normal procedures
  • Use email authentication (SPF, DKIM, DMARC) at company level
  • Enable two-factor authentication everywhere
  • Train yourself to be suspicious even of well-written emails
  • When in doubt, call the sender using a known number
05

What To Do If You're a Victim

  1. 1If you clicked a link, change your password immediately
  2. 2If you entered credentials, enable 2FA and monitor accounts
  3. 3If you sent money, contact your bank immediately
  4. 4Report to your IT department if it's a work account
  5. 5Report phishing to Anti-Phishing Working Group: reportphishing@apwg.org
  6. 6Report to FTC at ReportFraud.ftc.gov
Report This Scam
FTC Report Fraud FBI IC3 Identity Theft
?

Frequently Asked Questions

What is AI-Enhanced Phishing?

Phishing used to give itself away with broken grammar. AI fixed that. The emails are now clean, personalized, and plausible, which means the old "look for typos" advice is dead. Verify any request through a channel you control, not the one that contacted you.

What are the warning signs of AI-Enhanced Phishing?

Unexpected request for urgent action. Request to change payment details or wire money. Pressure to bypass normal procedures. Email asks for login credentials. Links that don't match the displayed text.

How do I protect myself from AI-Enhanced Phishing?

Verify unexpected requests through a different channel (call the person). Hover over links before clicking to see actual URL. Be suspicious of urgent requests to bypass normal procedures. Use email authentication (SPF, DKIM, DMARC) at company level.

What should I do if I'm a victim of AI-Enhanced Phishing?

If you clicked a link, change your password immediately. If you entered credentials, enable 2FA and monitor accounts. If you sent money, contact your bank immediately. Report to your IT department if it's a work account.

How serious is this threat?

We rate this high risk. Reported losses: Part of $3 billion in business email compromise (2024). Most exposed: Employees, executives, anyone with email.

Can I get my money back?

Recovery depends on how you paid. Credit card payments may be reversed through chargebacks, while wire transfers and cryptocurrency are rarely recoverable. Report immediately to your bank and file complaints with the FTC at reportfraud.ftc.gov and the FBI IC3 at ic3.gov.

How do I report AI-Enhanced Phishing?

Report to the FTC at reportfraud.ftc.gov. For internet crimes, file with the FBI IC3 at ic3.gov. For identity theft, visit identitytheft.gov. You should also contact your local police and your bank.
Sources & References
  1. 01FBI: Business Email Compromise
  2. 02CISA: Phishing Guidance
Related Scams

AI Voice Cloning Scam

With a few seconds of audio — often lifted from social media — a scammer can clone a loved one's voice and call you mid-"emergency," needing money immediately. Your ear believes it. Agree on a family code word now, and when the panic call comes, slow down and verify on a number you already trust.

Think you've encountered this scam?

Use the free AI scanner to analyze suspicious messages, websites, or phone numbers.

Scan Now — It's Free