Cybersecurity is a technological arms race, with cybercriminals and security experts constantly striving to gain the upper hand. With the emergence of artificial intelligence (AI), scammers have a new weapon in their arsenal. AI deepfakes are now challenging our ability to trust what we see and hear, as these hyper-realistic videos, images, and audio files grow increasingly sophisticated—and more dangerous. So how can we recognize them, and what can we do to prevent ourselves from being scammed? Let’s take a look.
What are AI deepfakes?
A deepfake is a video, image, text file or audio clip that has been altered or created using artificial intelligence. These fakes make it appear as though someone is saying or doing something that never actually happened. They can also swap one person’s face onto someone else’s body to fabricate entire scenarios. As AI grows more sophisticated, these deepfakes become more realistic and difficult to detect.
Why are deepfakes a threat?
Deepfakes can be used to spread misinformation, cause reputational damage, and scam people into taking actions they wouldn’t otherwise consider. AI technology has now progressed to the extent that scammers can produce highly convincing deepfakes quickly and easily.
The Government of Canada cites several examples of how AI deepfakes have been used to scam the public:
“Criminals have repeatedly used deepfakes of Elon Musk in fraudulent cryptocurrency giveaways, resulting in financial losses totaling in the millions of dollars. There have also been instances of scammers using voice clones of senior representatives of banks and other high net worth companies. The scammers would call these offices, posing as CEOs and managers of the respective corporations, and instruct staff to initiate money transfers into their bank accounts.”(1)
AI deepfake technology has made phishing and impostor scams more sophisticated and harder to spot—meaning we all must be increasingly vigilant to avoid being caught out. The US Government’s Federal Communications Commission reports how a technique known as ‘voice cloning’ has been used to emulate people’s loved ones, convincing them that a family member is in trouble and needs financial aid. Other scams involve deepfaked celebrities or other trusted figures asking for support or promoting products and services. Imagine the classic ‘Nigerian prince scam’, but instead of a foreign monarch asking you for aid, it’s an entirely believable video of Taylor Swift, and she’s addressing you by name.
How to stay safe
Deepfake scams can be hard to spot, but they aren’t infallible. It is possible to protect yourself—and to recognize a scam when you see one. Here are some best practices to follow:
Avoid oversharing: The less information available about you online, the harder it is to scam you. Scammers use information readily available on social media to perform ‘social engineering’ on their targets and make their deepfakes more convincing. They can also use your personal photos and videos to create targeted deepfake content. To remain safe, set your social accounts to private and minimize the amount of information you share online.
Remain skeptical: If something seems off for any reason, double-check it. If you receive an unsolicited email, text message or phone call—even if it’s seemingly from a trusted source—call the person directly to confirm. It’s always better to be safe than sorry, and no-one will blame you for being cautious. Similarly, if it seems as though a political or public figure is endorsing a charity or investment, do some research to establish credibility before making a decision.
Read the red flags: Many deepfake scams have red flags that are a sure sign something isn’t right. Scammers will often insist that a request is not only urgent but confidential and must be kept secret. Any request that needs to be kept secret should set your alarm bells ringing.
Look for ‘tells’: Even the most sophisticated deepfakes often have ‘tells’ such as unnatural lighting, strange movements, or mismatched lip-syncing. Watch for inconsistencies such as unusual eye movements, odd facial expressions, and facial morphing, which occurs when one image is simply placed on top of another. You may also notice unnatural body shapes, synthetic-looking hair, or abnormal or inconsistent skin tones, while other tells include robotic-sounding voices, unaccountable background noise, and blurry or misaligned visuals.
Use technology: There are several tools available online that can help you detect deepfakes. These tools use advanced AI and machine learning to analyze videos and images for signs of manipulation. Consider solutions from trusted vendors such as Google’s SynthID and Intel’s Fake Catcher to help you identify fakes.
Another best practice is to watermark your personal photos and videos. Digital watermarks help to establish ownership and prevent unauthorized use, while using strong passwords and enabling multi-factor authentication can help to further protect your data and identity from scammers.
What to do if you fall for a deepfake scam
If the worst happens and you or someone you know falls for a deepfake scam, there are steps you can take to minimize the damage. If you’ve been scammed, immediately change your passwords and enable multi-factor authentication (MFA) to protect your accounts. Then, notify your bank and credit card companies. Finally, report the scam to local law enforcement and the Canadian Anti-Fraud Centre so they can help to educate others on the attack.
The bottom line
AI deepfakes are just the latest in a long line of weapons to be developed in the cybercrime arms race. As ever, caution and vigilance are critical to help keep your identity, your data, and your money safe from scammers—but it’s equally important to stay informed about the latest scams and techniques criminals are using to trick the public. The Coast Capital Cybersecurity Hub is a great resource to protect yourself from cybercrime, with articles and information about the latest scams and schemes—as well as advice about what you can do about them. Check out our latest resources and stay safe out there.
The stuff we have to say.
This article is provided for general information purposes only. It is not to be relied upon as financial, tax, or investment advice or guarantees about the future, nor should it be considered a recommendation to buy or sell. Information contained in this article, including information relating to interest rates, market conditions, tax rules, fees, and other investment factors are subject to change without notice and Cost Capital Savings Federal Credit Union is not responsible to update this information. All third party sources are believed to be accurate and reliable as of the date of publication and Coast Capital Savings Federal Credit Union does not guarantee accuracy or reliability of such sources. Readers should consult their own professional advisor for specific financial, investment, and tax advice tailored to their needs to ensure that individual circumstances are considered properly and action is taken based on the latest available information.
1 Deepfakes: A Real Threat to a Canadian Future – Canada.ca
