Home › Answers › Data, privacy and GDPR
How do I spot AI scams?
Short answer
AI scams look and sound more convincing than old scams, so spelling mistakes are no longer a reliable clue. Watch for pressure to act fast, secrecy and changed bank details. Check by contacting the person or firm on a number you already have. In the UK, report fraud to Report Fraud and forward scam texts to 7726.
The main types of AI scam
| Scam | How AI helps the criminal | Typical target |
|---|---|---|
| Phishing emails and texts | Writes fluent, personalised messages in perfect English | Everyone, especially small firms |
| Voice cloning | Copies a voice from a short clip on social media or voicemail | Parents, grandparents, finance staff |
| Deepfake video calls | Fakes a boss or supplier on a video call | Businesses that pay suppliers |
| Fake invoices | Copies a real supplier's style and changes the bank details | Trades, builders, anyone paying invoices |
| Fake adverts and celebrity endorsements | Makes videos of famous people "recommending" investments | Savers and investors |
| Romance and friendship scams | Runs many chats at once with AI written messages | Lonely or bereaved people |
Warning signs that still work
AI can fix grammar, but it cannot change what the criminal wants. Be suspicious when:
- You are rushed: "pay in the next hour", "your account will be closed".
- You are asked to keep it secret, even from your bank or family.
- Bank details change, especially by email or text.
- The payment method is unusual: gift cards, cryptocurrency, a "safe account".
- A voice or video sounds right but the request feels wrong.
- A message asks for a one time passcode. Banks and HMRC will not ask for it.
Checks that beat AI
- Hang up and call back on a number you find yourself, such as the one on your bank card or a past invoice. Do not use a number in the message.
- Agree a family safe word that a cloned voice would not know.
- Confirm new bank details by phone with a person you know at the supplier before paying. Pay a small test amount first for large invoices.
- Call 159 to reach your bank's fraud team safely. Most major UK banks support the 159 service.
- Take five. The UK Finance campaign "Stop, Challenge, Protect" is good advice: it is fine to refuse or ignore a request.
- Look up the company on Companies House and check the website address carefully.
A worked example
A roofer gets an email that looks exactly like his merchant's usual account email. It has the right logo, his account number and a friendly note saying the merchant has "moved banks". The writing is perfect. He calls the branch on the number on an old delivery note. They have not changed banks. The email came from a lookalike domain with one letter different. Calling took two minutes and saved a £4,000 payment.
How to report scams in the UK
| What happened | Where to report |
|---|---|
| Suspicious text | Forward it free to 7726 |
| Suspicious email | Forward it to report@phishing.gov.uk |
| Lost money or gave details in England, Wales or Northern Ireland | Your bank first, then Report Fraud at reportfraud.police.uk or 0300 123 2040 |
| Lost money in Scotland | Your bank, then Police Scotland on 101 |
| Fake advert online | The platform, and the Advertising Standards Authority |
| Someone in immediate danger | 999 |
Report Fraud replaced Action Fraud on 4 December 2025, so older guides may give the wrong name.
Protecting a small business
- Write down a payment rule: no new or changed bank details paid without a phone check.
- Turn on two factor authentication for email, banking and accounting software.
- Limit how much voice and video of senior staff is public, or at least make staff aware it can be cloned.
- Train anyone who pays invoices, including family members helping with the books.
See is AI voice cloning legal in the UK? and are deepfakes illegal in the UK?
Related questions
What is AI phishing?
Phishing that uses AI to write convincing, personalised emails or texts, often copying the style of a real company or colleague. The goal is the same as ever: a click, a password or a payment.
Can AI clone my voice from a phone call?
Voice cloning tools can work from short recordings, such as social media videos or voicemail greetings. A safe word and a call back to a known number protect you.
Will my bank refund me if I am scammed?
Since October 2024, UK payment providers must reimburse most victims of authorised push payment fraud up to £85,000, with some exceptions. Report it to your bank as soon as possible.
Can AI stop phishing?
Email providers use AI filters that catch a lot of phishing, but some still gets through. Your own checks matter most.
Sources
- Report Fraud: how to report suspicious messages, calls and websites
- GOV.UK: Report Fraud, new service from City of London Police
- GOV.UK: avoid and report internet scams and phishing
- Stop Scams UK: 159
- Take Five to Stop Fraud
- Payment Systems Regulator: APP scam reimbursement
Checked 18 October 2026. Rules and prices change, so check the source before you rely on it. This is general information, not legal, tax or financial advice.
More on data, privacy and gdpr
- Are AI detection tools accurate?
- Are AI tools secure for business?
- Are ChatGPT chats private? Can OpenAI read them?
- Are Microsoft Copilot chats private?
- Can AI agents be trusted?
- Can AI read my WhatsApp messages?
All data, privacy and gdpr answers · All answers · Guides · AI tools directory
Get one useful AI tool in your inbox each weekday
Free, plain English, five minutes to read. Unsubscribe any time.
See our privacy notice.