The findings are based on a Consumer Reports survey of nearly 5,000 U.S. adults conducted in March and April. They highlight the widespread exposure of consumers to online threats, alongside growing concerns about the security of personal information and the possibility of unauthorized access to financial accounts.
Artificial intelligence is changing how fraudsters operate by reducing the time, expense and technical effort required to target potential victims. Criminals can use information gathered from data breaches to create personalized messages that appear credible and relevant to individual recipients.
This approach makes fraudulent communications harder to distinguish from legitimate requests, even for people who are familiar with common online threats.
Stacey Higginbotham, a cybersecurity fellow at Consumer Reports, warned that scams are increasingly affecting people across different backgrounds. She also emphasized that AI could increase both the number of fraudulent messages reaching consumers and the sophistication of those attempts. Consumer Reports CEO Phil Radford has called for stronger corporate accountability, government safeguards and coordinated efforts to address the growing problem.
Traditional phishing attempts often contain suspicious links, spelling mistakes or unfamiliar sender details. However, AI-assisted fraud can make these warning signs less obvious. Scammers who obtain personal details, including someone’s home address, may impersonate financial institutions and send tailored offers designed to gain trust or obtain sensitive information. Deepfake technology can further complicate efforts to identify fraudulent communications.
According to Higginbotham, approximately one in five scams already involves some form of personalization, a proportion expected to increase as AI tools become more accessible. Colin Ferris, a cybersecurity expert at Silverfort, explained that creating individually tailored phishing messages previously required considerable effort. AI makes it easier to customize communications for large numbers of potential victims, increasing the reach of these schemes.
Security specialists recommend strengthening account protection as these threats evolve. Two-factor authentication and other forms of multifactor authentication can provide an additional barrier against unauthorized access. Consumers should also be cautious when opening attachments, clicking links or responding to unexpected requests involving financial information.
However, individual vigilance cannot address every weakness in online security.
Brian Cute, president and CEO of the Global Cyber Alliance, has highlighted the need for cooperation among technology companies, governments and philanthropic organizations to address vulnerabilities involving insecure internet routing and maliciously registered domains.
One initiative, called Take9, encourages people to wait nine seconds before acting on suspicious messages.
This brief pause gives recipients an opportunity to reconsider a request, verify its legitimacy and take protective steps, such as changing banking passwords when necessary. As AI continues to reshape digital fraud, combining cautious online behavior with stronger security measures and broader institutional safeguards will be increasingly important.
