Think You'd Recognize a Scam? AI is Changing the Rules.

Artificial intelligence is changing the way cybercriminals create scams, making some of the warning signs we’ve relied on in the past much harder to spot.

According to the National Credit Union Administration (NCUA)*, artificial intelligence is an emerging cybersecurity threat for financial institutions. Criminals are using generative AI to create more convincing phishing messages; impersonation attempts and social engineering scams. AI can also help scammers gather information from multiple sources to create highly personalized attacks.

In other words, the scammer doesn't necessarily have to know you personally. AI can help them make it feel that way.

What Can an AI-Powered Scam Look Like?

AI can help scammers create content that looks, sounds and feels legitimate.

You could receive:

• A text message that appears to come from your financial institution
• An email that uses your name and other personal details
• A phone call using a voice that sounds like someone you know
• A video that appears to show a real person
• A fake website that closely resembles a legitimate business
• A message that creates a sense of urgency and asks you to act immediately

The FBI has also warned about scammers using AI-generated videos, spoofed websites and other technology to make fraudulent communications appear more credible.

That means spelling mistakes and awkward wording aren't always going to give a scam away anymore.

Don’t Let Familiarity Lower Your Guard

One of the most important things to remember is that something looking or sounding legitimate doesn't necessarily make it legitimate.

A scammer may know your name. They may know where you work. They may know the name of your financial institution. They may even know information you've shared publicly online.

That's why it's important to slow down when a message involves your money or personal information.

Ask yourself:

Was I expecting this message?

If someone contacts you unexpectedly about your account, take a moment before responding.

Is there a sense of urgency?

Scammers often want you to act before you have time to think. Messages such as “act now,” “your account will be closed” or “your money is at risk” are designed to create fear.

Am I being asked to share sensitive information?

Never share your password, Secure Access Code, one-time passcode or other sensitive account information because someone contacted you unexpectedly.

Can I verify this another way?

Instead of clicking the link or calling the number included in the message, contact the company directly using a phone number or website you already know is legitimate.

Remember: Stop. Verify. Then Act.

AI may be changing the tools scammers use, but one of the best defenses is still something you control: taking a moment before you respond.

If a message, phone call or video makes you feel rushed, stop.

If someone is asking for sensitive information, verify who you're dealing with.

And if something doesn't feel right, don't be afraid to hang up, close the message or walk away.

At UK Credit Union, Your Security Matters

We're committed to helping protect our members and their financial information.

Remember, if you receive an unexpected call claiming to be from UK Credit Union, never share a one-time password or Secure Access Code. If you called UK Credit Union directly using a verified number, we may ask for a code to verify your identity.

If you receive a suspicious message claiming to be from UK Credit Union, don't click first. Verify first.

Cybersecurity isn't just about keeping up with new technology. It's about knowing when to pause, ask questions and protect your information.

When in doubt, slow down and verify.

This Cybersecurity Month, we're sharing information about some of the newest threats facing consumers and financial institutions. Stay connected with UK Credit Union for more ways to protect yourself from scams and fraud.

*The NCUA identifies AI-enabled attacks as a current and emerging threat to credit unions, including highly tailored phishing and social-engineering attacks. The FBI has also documented AI-generated videos and spoofed websites being used in impersonation schemes.