AI-Powered Gmail Scam: The Evolution of Cybercrime Using Emotional Manipulation

Google's Gmail AI Attack Draws on Emotional Psychology - Why We Keep Falling for Scam Calls

AI-powered scams are on the rise and have lowered the barrier of entry for cybercriminals. Gmail users have been warned to remain vigilant against a new AI-powered scam that uses "super realistic" phone calls and emails to gain full access to accounts. The scam, experienced and reported by Microsoft solutions consultant Sam Mitrovic, has highlighted how AI-powered tactics are increasingly playing on victims' emotional psychology. AI-Powered Gmail Attack Mitrovic said the AI scam began with a notification to approve a new Gmail account recovery attempt, which was quickly followed by a "super realistic" phone call. The extremely convincing call also reportedly came from a number linked to official Google documentation online. "The scams are getting increasingly sophisticated, more convincing and are deployed at ever larger scale," Mitrovic wrote in a blog post. "People are busy, and this scam sounded and looked legitimate enough that I would give them an A for their effort. Many people are likely to fall for it," he added. Anti-malware firm Malwarebytes reported that victims of the Gmail scam could also lose access to many other services and even suffer "identity theft." "None of the elements used in the attacks are novel, but the combination might make the campaign extremely effective," the firm wrote. Drawing on Emotional Psychology AI scammers are becoming increasingly adept at turning victims' emotional responses into vulnerabilities. In the U.K., AI-powered voice cloning scams grew 30% in 2024, according to NatWest research. AI-generated scams often mimic urgent communications from trusted sources, like an unexpected warning from Gmail or a distressed family member. This urgency compels immediate action, which leaves little time for scrutiny and careful decision-making. Graeme Stewart, head of public sector at Check Point Software, told CCN that people are falling for AI-powered scams because "they are incredibly convincing." "AI enables scammers to use real-sounding voices and interactions that no longer feel artificial," Stewart said. "As a result, people are getting drawn into these conversations, as the responses feel increasingly lifelike -- almost indistinguishable from human communication." "When it comes to avoiding these scams, the best approach is to treat every unexpected call with suspicion," he added. Spencer Starkey, Executive VP of EMEA at cybersecurity provider SonicWall, said everyone is vulnerable to cyberattacks. "The sheer number of attacks the average customer can experience daily forces organizations of all sizes to automate detection solutions, to identify and halt any attack before it enters the system," he added. FBI Warns: AI Scams Increasing In May, the FBI warned that AI scams against individuals and businesses were escalating to a higher level of sophistication. AI significantly lowers the barriers to entry for cybercriminals through the automation of creation and distribution. Instead of manually crafting each message, scammers can generate thousands of highly personalized scam messages in a fraction of the time. FBI Special Agent in Charge Robert Tripp said: "As technology continues to evolve, so do cybercriminals' tactics. "Attackers are leveraging AI to craft highly convincing voice or video messages and emails to enable fraud schemes against individuals and businesses alike." "These sophisticated tactics can result in devastating financial losses, reputational damage, and compromise of sensitive data."

This AI scam can wipe out your bank account -- just by hacking your Gmail

Deepfake robocalls + fake emails = the most dangerous Gmail scam yet... Gmail users worldwide, totaling 1.8 billion, have been put on high alert regarding a sophisticated scam that exploits AI technology to access their accounts. This fraudulent scheme combines deepfake robocalls and counterfeit emails to bypass user security measures. Victims receive a call claiming that suspicious activity has been detected in their Gmail account, followed by an email outlining steps to remedy the situation. The email contains a link to a fake website that mimics Google's, prompting users to enter their login information. Cybersecurity experts have indicated that the primary objective of this scam is to persuade targets to provide their Gmail recovery codes under the pretext that it is necessary to regain access to their accounts. These tactics not only threaten Gmail accounts but also any service linked to the platform. The FBI warned that such sophisticated scams could lead to significant financial losses, reputational harm, and the compromise of sensitive information. Malwarebytes reported that users should heed this warning, as the cost of advanced email attacks can be surprisingly low, starting at just $5, according to a study by McAfee's State of Scamiverse, which revealed that a convincing deepfake can be generated in under ten minutes. While previous warnings from the FBI emphasized the use of AI to create deceptive videos and emails, the latest findings by Malwarebytes reveal the integration of robocalls and emails in current schemes. Experts noted that while the components of these attacks are not new, their combination enhances the campaign's effectiveness. To help users avoid falling prey to these scams, Malwarebytes has provided guidance. Users are advised not to click on links or download attachments from unexpected emails, and to ensure that any websites they input personal information into are legitimate. The company also recommends utilizing password managers to fill in credentials only on trusted sites and to monitor accounts for unauthorized activity. FBI: Use a secret code to outsmart AI scams The FBI has recently issued advisories for iPhone and Android users regarding a surge in scams aimed at accessing personal and banking information. These scams have evolved to use caller ID spoofing to impersonate banks and law enforcement agencies, heightening their sophistication. Authorities in Long Island, New York, reported instances where individuals received calls from someone claiming to be a Suffolk County Police Department member, falsely stating that the residents had outstanding warrants and soliciting money. The FBI has urged anyone receiving such calls to refrain from offering personal information and to terminate the call immediately. If individuals suspect they have been targeted by a scam, they are instructed to contact the genuine organization the caller impersonated, using verified contact information. Experts emphasize that major tech companies like Google and Microsoft do not make unsolicited calls to users. Cybersecurity expert Dave Hatter cautioned users against engaging with unsolicited callers, asserting that they should regularly review their account activity through privacy settings to verify its accuracy. Users are strongly advised not to respond to requests for sensitive information over phone calls or emails and to treat urgent communications with skepticism.