Brad Pitt Deepfake Scam Imagine being swept into a whirlwind romance with a global celebrity—only to discover it was all an elaborate scam. That’s exactly what happened to a French woman who believed she was in a relationship with actor Brad Pitt. Scammers used AI-generated images and messages to convince her of the relationship’s authenticity, ultimately defrauding her of over $1.2 million.

This real-life incident is certainly extreme, but it shows how criminals are using generative AI to make scams more convincing and emotionally manipulative than ever before. This translates into more successful (and plentiful) attempts to compromise business email accounts, convince employees to make false payments, and so much more!

Our previous blog post, explored how scammers are super-charging their tactics using generative AI. If you haven’t read it yet, we recommend starting there to understand the methods criminals are using. Then come back here and find out how you can super-charge your defenses!

Based on recommendations from the FBI’s recent PSA, we’ll share the top 4 actionable tips to help you identify and avoid these schemes. This guide will empower you to stay one step ahead of scammers.

Let’s dive in and ensure you’re prepared to defend against this growing threat.

Tip #1: Create a Verification System

One of the most effective ways to protect yourself and your business from AI-powered scams is to establish a robust verification system. Criminals rely on emotional manipulation and urgency to pressure victims into making snap decisions. A simple but reliable verification process can help you pause, assess, and confirm the legitimacy of any unusual request.

Why It Works

Generative AI scams often imitate trusted individuals, like family members, colleagues, or authority figures, with convincing text, voices, or even videos. Without a verification process, it’s easy to fall into the trap of acting quickly to "help" or "comply." A verification system introduces a deliberate step to confirm authenticity, reducing the risk of making costly mistakes.

How to Implement It

Grandmother

1) Use Secret Phrases or Codes

Recently, some residents of Lethbridge, Alberta fell victim to scam calls using voice-cloning technology. The AI generated voices in combination with personal information they gathered on social media, made the fraudsters very convincing – and successful!

To protect yourself, your family should agree on a confidential word or phrase to verify identity during emergencies. For example, if someone claiming to be your loved one calls for help, ask for the agreed-upon code before taking any action. This simple verification step can stop scammers in their tracks!

2) Verify Requests Through Alternate Channels

If you receive a suspicious message, don’t act immediately. Instead, contact the person or organization directly using a trusted phone number—never the one provided in the message.

For example, if the message claims to be from your bank or credit card company, use the number on the back of your card to confirm the request. If it’s from a business or other entity, visit their verified website and look for contact information under the “Contact Us” section. Taking this extra step can quickly confirm whether the request is legitimate or a scam.

3) Require Dual Authorization

Dual authorization requires two or more individuals to approve significant disbursements or account changes. The goal is to eliminate single points of failure ensuring requests are carefully scrutinized before any action is taken. Dual Authorization of Payments

A real-world example shows the value of this policy. Scammers used AI to mimic the voice of a CEO and convince an employee at a European energy company to wire €220,000 (around $243,000) to a fraudulent account. Believing the request to be urgent and legitimate, the individual complied without additional checks. Dual authorization could have halted the transfer, exposing the scam before the funds were lost.

While it adds an extra step to workflows, dual authorization is essential for protecting sensitive operations like high-value cheques, wire transfers, and updates to client payment information. Businesses should evaluate their current processes and implement this powerful measure to foster a culture of accountability and security.

4) Document Your Verification Processes

Having strong verification processes is essential, but they are only as effective as the consistency with which they are followed. Documenting these procedures ensures clarity, accountability, and adherence across your team or organization. A well-documented process acts as a roadmap, helping employees know exactly what steps to take when faced with potential scams or high-risk transactions.

Why Documentation Matters

Consistency: Everyone follows the same protocol, minimizing guesswork and reducing errors.
Training: New employees can quickly learn and adapt to established procedures.
Accountability: Clear guidelines make it easier to identify deviations from the process.
Audit Trails: In the event of a scam attempt or error, documented steps can help identify gaps and improve processes.

Having proper verification methods in place as an individual or family – like a secret word or phrase – or in a larger context such as a business using dual authorization for disbursements, is a vital step in protecting yourself, your loved ones, and your livelihood from deceptive AI-generated scams.

Tip #1 Summary: Verification systems prevent snap decisions by introducing deliberate checks for authenticity.

Tip #2: Be Critical of Digital Content

Deepfake News AI-powered scams often rely on hyper-realistic digital content to deceive victims, but subtle inconsistencies can sometimes give them away. By learning to recognize these red flags in images, audio, text, and video, you can sharpen your ability to spot scams before falling victim.

1. Visual Anomalies in Images

AI-generated images are becoming increasingly convincing, but they often contain subtle imperfections that can help expose their true origin.

Common Clues:

Hands and Fingers: Look for distorted or unnatural-looking hands. Are there too many or too few fingers?
Eyes and Teeth: Watch for asymmetry, unusual placement, or blurry details.
Background Elements: Items in the background may appear warped or nonsensical, like melting structures or disjointed shadows. Text may be unreadable or non-sensical.

Example 1:

At a quick glance, this image of horses looks fairly real, but what if we take a deeper look? Do you see some irregularities? Likely you do. For example:

Does the background and lighting look natural?
The musculature of the horses seems exaggerated and uneven.
The legs appear distorted, uncountable with their joints bending unnaturally.

Example 2:

Deepfake Image

At first glance we see a beautiful girl seated in a diner. Take a closer look – do you spot anything that seems off?

Note the oddly placed seats and tables.
The posters feature nonsensical text and imagery.
Her fingers appear misshapen and strange.

2. Video Imperfections:

Identifying AI-generated videos is becoming increasingly difficult. The best ones can require specialized analysis to detect, and advancements are coming fast and furious. However, there are some common visual clues you can watch for:

Unnatural Movements:
- Stiffness: Look at the subject's body or facial movements – are they robotic, stiff, and lacking naturalness? Do the facial expressions match the emotional tone of what is being said?
- Lip-syncing Issues: Does speech seem perfectly synchronized, or are there slight delays or inconsistencies between the audio and the movement of the lips?
- Unrealistic Eye Movements: AI models may struggle to accurately replicate subtle eye movements and blinks.

Distorted Features:
- Blurry Edges: Look around the subject's face or other body parts for blurred lines or distortions.
- Skin Tones: Are they unnatural, overly smooth or otherwise unrealistic? Is there a textural difference on the forehead?
- Strange Shadows or Lighting: Are the shadows where they belong? Does the lighting on the face match the surroundings?
Background Inconsistencies:
- Unnatural Backgrounds: The background may appear blurry, pixelated, or inconsistent with the subject's position.
- Objects That Don't Behave Realistically: Pay attention to how objects in the background interact with the subject or each other. Do they move realistically?
Audio Clues:
- Pitch Variations: Listen for unnatural fluctuations in pitch or tone.
- Lack of Subtleties: AI-generated voices may lack the subtle nuances and inflections of human speech.
- Background sounds: Are naturally occurring background noises present? What about breath sounds?

While the quality of AI-generated content continues to improve exponentially, taking a close and critical look at suspicious content is still one of your best defenses. Scrutiny can often reveal clues that will help you avoid being taken in.

Remember too that scammers often create a sense of urgency so that you will react emotionally without taking the time to objectively analyze the situation. AI-generated digital content can amplify this effect, so it’s wise to pause, take your time, and seek advice from trusted sources before taking any action.

By staying vigilant and maintaining a critical approach to digital media, you can protect yourself from falling victim to sophisticated schemes.

Tip #2 Summary: Scrutinizing AI-generated content reveals subtle flaws that can expose scams.

Tip #3: Limit Your Digital Footprint

The more personal information a scammer can gather about you, the easier it becomes to craft a convincing narrative designed to deceive you. By reducing the personal information you make available online, you can greatly increase your protection against AI-powered scams.

Reduce Your Personal Information Online:

Limit Public Content: Reduce the number of photos, videos, and voice recordings you share online, as these can be used to replicate your identity using AI tools.
Secure Social Media Accounts: Set your accounts to private and only allow followers you know personally.
Be Mindful of What You Share: Avoid sharing personal details about your family, travel plans, or daily routines. Be especially cautious with sensitive information like your full name, address, or financial details.
Location Data: Deactivate location-sharing features on apps and devices unless absolutely necessary, and delete unused social media or online accounts.

Minimize the Digital Footprint of Your Business:

Businesses are equally at risk when sensitive information is publicly accessible. Applying the same principles to your organization can protect your company and clients from AI-powered scams:

Limit Public Information: Avoid sharing sensitive data about your company or clients on platforms like LinkedIn. Overly detailed posts could provide scammers with material for targeted attacks.
Be Selective About Social Media Posts: Scrutinize social media content and photos before posting. For example, be sure photos taken in the office don’t give away sensitive information on a whiteboard or computer screen in the background of the image.
Implement Data Security Policies: Create clear guidelines on what employees can and cannot share online. Review policies regularly with the entire team.
Regular Security Audits: Work with an IT partner to identify vulnerabilities and mitigate risks. For example, audits can uncover outdated access permissions or unsecured databases.
Cyber Awareness Training: Educate employees about the risks of oversharing and how to recognize potential scams. Regular training can ensure vigilance across your team.

Protecting your digital footprint isn’t just about maintaining privacy—it’s one of the most powerful defenses against the evolving sophistication of AI-powered scams.

Tip #3 Summary: Reducing your online footprint makes it harder for scammers to gather exploitable information.

TIP #4: Avoid Sending Money or Sensitive Information

One of the simplest yet most effective ways to protect yourself from AI-powered scams is to adopt a posture of skepticism when financial transactions are requested. Scammers rely on emotional manipulation and urgency to trick victims into acting before thinking, so treating all financial requests or supposed account changes with extreme caution can significantly reduce your vulnerability.

How to Protect Yourself from a Financial Scam

Deepfake Scam Credit Card

Pause Before Acting: If a request feels urgent or emotionally charged, take a moment to pause, evaluate, and get a second set of eyes on it. Scammers often fabricate emergencies to pressure you into quick decisions.
Verify the Source: Always confirm the legitimacy of a request using a trusted contact method. For instance:
- If a family member claims to need immediate financial help, call them directly.
- If a request comes from a company, contact their official customer service using a phone number or email address from their verified website.
Be especially alert if a client, employee, or vendor asks you to change their payment account details. Always make sure the request is legitimate by confirming through official channels.
Beware of Untraceable Payments: Be especially cautious of requests for payment via gift cards, cryptocurrency, or wire transfers, as these methods are difficult to trace or recover.
Protect Personal Information: Scammers may try to trick you into “verifying your identity” by asking for sensitive details such as passwords, Social Insurance numbers, or financial account information. Never provide this information in response to unsolicited requests. Even if you think the request is legitimate – verify through official channels first!

By being vigilant and following these tips, you can significantly reduce your risk of falling victim to phishing attacks and other AI-powered scams.

Tip #4 Summary: Verifying financial requests through trusted methods stops scammers in their tracks.

Protect Yourself and Your Business from AI-Generated Scams

Avoid AI scams by slowing down and evaluating content carefully Protecting yourself, your family, or your business from AI-powered scams often comes down to controlling emotional reactions. You probably noticed how many of the tips and suggestions involve slowing down, evaluating, scrutinizing, and verifying information or requests before taking any action. This approach alone will help you avoid being fooled in most cases.

Preparation is equally important. Steps like choosing a family “secret word”, implementing well documented company policies related to data protection, and regular cyber awareness training from an IT partner fortifies your defenses against evolving cybersecurity risks and threats.
This powerful combination of vigilance and preparation creates a winning strategy so you can thrive in an increasingly complex digital world.

Want to take the next step in securing your business against AI-driven scams? Contact us to learn how our managed security services and cyber awareness training can help protect your company and employees—so you can focus on growing your business with peace of mind.

Tag: AI

4 Tips to Outsmart AI-Powered Scams: Protect Yourself Today