AI lets scammers use your own data to build a personal trap

According to CBS News, a new report from Consumer Reports, Aspen Digital and the Global Cyber Alliance finds that nine in ten Americans have been targeted by a digital scam or cyberattack. Seventeen percent of consumers say they have lost money to a digital security breach.

The report polled nearly 5,000 U.S. adults in March and April. It points to artificial intelligence as the reason fraud is spreading so fast. AI lets scammers take data stolen in a breach, such as a home address, and turn it into a message built around that one person.

The old tell does not apply anymore

For years, people were told to watch for spelling errors and strange links in messages from strangers. That advice assumed the scammer did not know much about the target. The sequence in this report runs differently. A breach happens first, somewhere the person never sees. The scammer then uses that stolen information, a physical address, for instance, to build a message that looks like it comes from a real financial institution, offering something plausible, like a mortgage rate.

Stacey Higginbotham, a Consumer Reports cybersecurity fellow, said most people still picture scams as messages from strangers. The data behind this report shows the opposite: the message can carry details that make it look like it came from someone who already knows the recipient, because in a sense, it did.

This is what the scam depends on. It does not rely on fooling someone with bad grammar. It relies on a prior breach supplying real facts, which the scammer then launders into a personalized, convincing approach. Higginbotham said AI lowers the cost of reaching more people this way and makes better use of the data criminals already hold.

What this means for a careful reader

Being alert to typos and suspicious links is no longer enough. A message can be well-written, specific to the recipient's circumstances, and still be a trap, because the information it uses was never meant to be public in the first place.

Phil Radford, president and CEO of Consumer Reports, said in a statement that the scale is no longer a fringe problem: nine in ten Americans targeted is, in his words, almost everyone the organization serves. He said AI is making fraud faster, cheaper and more personal, and argued that companies and governments need stronger accountability and guardrails, because individuals cannot be expected to out-think this alone.

The report does not say which companies suffered the breaches feeding these scams, or which specific AI tools are being used to build the personalized messages.