Today, Microsoft has released its latest Cyber Signals report on AI-assisted scams, including those targeting e-shoppers and job seekers. To read the full report, please click here.
Why is this relevant now? AI-assisted scams are on the rise; over the past year alone, Microsoft has thwarted $US4 billion in fraud attempts and approximately 1.6 million bot signup attempts per hour. Microsoft is actively working to stop AI fraud by evolving large-scale detection models that use AI techniques, such as machine learning, to mitigate fraud attacks. With AI lowering the barrier to entry, even low-skilled attackers can generate sophisticated scams, ranging from deepfake-driven phishing to AI-generated sham websites mimicking legitimate businesses. What used to take scammers days or weeks to create will now take minutes.
Here are three things you can do to protect yourself as an online shopper:
-
Don’t let pressure tactics trick you – Don’t be fooled by “limited-time” deals and countdown timers.
-
Only click on verified ads – Many scam sites spread through AI-optimised social media ads. Cross-check domain names and reviews before purchasing.
-
Be sceptical of social proof – Scammers can use AI-generated reviews, influencer endorsements, and testimonials to exploit your trust.
To protect yourself when interviewing for a job, here are three things employers would never ask:
-
To provide personal or financial information – Unsolicited SMS and email messages offering high-paying jobs with minimal qualifications are typically fraudulent. Avoid sharing personal or financial information. You should never provide a National Insurance number, banking details, or passwords to an unverified employer.
-
To pay for a job opportunity – Employment offers that include requests for payment, offers that seem too good to be true, and a lack of formal communication platforms can all be indicators of fraud.
-
To communicate via unofficial communication channels – If recruiters and hiring managers only communicate via SMS, WhatsApp, or non-business email accounts, it’s a red flag. Legitimate employers use official company platforms for hiring communications. Always handle personal and sensitive information over secure platforms.
To help protect consumers from scams, Microsoft has introduced free features and tools:
-
Typo and domain impersonation protection – Microsoft Edge features website protection using deep learning technology to help users avoid fraudulent websites.
-
Digital Fingerprinting – Microsoft’s digital fingerprinting capability identifies malicious behaviours and ties them back to specific individuals. This helps in monitoring and preventing unauthorised access.
-
Blocking Full Control Requests – Quick Assist now includes warnings and requires users to check a box acknowledging the security implications of sharing their screen (Quick Assist is a tool that enables users to share their Windows or macOS device with another person over a remote connection). This adds a layer of helpful “security friction,” by prompting users who may be multi-tasking or preoccupied to pause to complete an authorisation step.
Mark Anderson, Chief Security Officer at Microsoft ANZ
Mark Anderson, Chief Security Officer at Microsoft ANZ, indentified three areas in terms of threats, and provided his comments on each below;
Retail and eCommerce
“AI-powered scams are making it harder for people to distinguish legitimate offers from fraudulent ones, whether through fake product reviews or convincing countdown timers on e-commerce sites. Aussies looking to protect themselves should avoid impulse buying by taking a moment to verify deals, cross-check domain names and reviews before clicking on social media ads, and use secure payment methods that include fraud protections instead of direct bank transfers or cryptocurrency.”
Employment Risk
“For Australian job seekers, the risks are no less significant. With AI generating realistic but deceptive job postings and even enabling deepfake video interviews, it’s essential to verify employer legitimacy through official websites and reputable platforms like LinkedIn or Glassdoor. Watch for red flags, such as upfront payment requests or communication via free email domains, which are often signs of fraud. Never share personal or financial information with unverified employers, and stay cautious if a remote video call interview seem unnatural, such as odd facial expressions or speech delays as this could indicate AI is being used to deceive you”
General Security
“At Microsoft, we’re working to stay ahead of these threats by forearming consumers with the tools and knowledge to identify scams early and take proactive steps. Consumer awareness and vigilance is the most powerful tool we have in combatting scams, backed by technological solutions such as Microsoft Defender Smartscreen which is built into the Edge browser to help identify and alert consumers to malicious websites and harmful downloads. The battle against scams will continue, and we remain committed to empowering consumers to protect themselves and their data.”
