AI has made scams so personal that almost every American has now hit one
A new survey finds 9 in 10 Americans have faced a cyberattack or scam, and researchers say AI is the reason the fakes feel so convincingly tailored to you.
What happened: Consumer Reports, Aspen Digital and the Global Cyber Alliance surveyed nearly 5,000 U.S. adults this spring and found 90% had encountered a digital scam or cyberattack, with 17% saying they'd actually lost money to one. Trust in data privacy has also dropped: only about a third of people feel their sensitive information, like Social Security numbers, is still private. The groups say AI is a core driver of the surge, not a side factor.
Why it matters: Scams used to be a numbers game: send the same clumsy phishing email to millions and hope a few bite. That math is changing. Researchers say AI now lets criminals turn stolen personal data into messages that feel individually written for you, at almost no extra cost. One in five scams already shows signs of this kind of customization, and experts expect that share to keep climbing as the tools get cheaper and easier to use.
How it works, plainly: A scammer who already has your name, address or breached account details can feed that into AI tools to generate a tailored pitch, say, a fake mortgage offer that references your real neighborhood, or a cloned voice impersonating someone you know. Before AI, personalizing dozens of messages took real human effort; experts say that friction has largely disappeared, which is why even cautious, tech-savvy people are getting caught.
The rollout: Experts point to concrete steps: turn on multi-factor authentication, and use the 'Take9' habit of pausing nine seconds before clicking a link or resetting a password after an unexpected message. But Global Cyber Alliance's Brian Cute cautioned that personal habits can't fix insecure internet routing or fraudulently registered domains alone. Consumer Reports is pushing for corporate accountability and backs measures like the bipartisan SCAM Act, which would put more responsibility on social platforms.
