Don’t Get Tricked: How to Spot AI-Generated Phishing Emails

AI is no longer an innocent tool you use to your advantage, whether it’s to get professional advice, help you craft your resume, or even as a friend to whom you can confide your concerns. Today, fraudsters have found their way using AI to harm others through what are known as “AI-Generated Phishing Emails.”
We may have been accustomed to recognising fake emails, which often contained numerous grammatical errors and flaws, but today, the situation has become both more professional and more dangerous. Fraudsters are weaving their phishing threads using AI, which often makes these emails appear normal and important to us, containing information extracted from your social media accounts.
We at “Codatna” will provide you with the necessary tools to protect you from falling into the scammers’ trap. Here are some steps to help you protect yourself from potential phishing attacks:

First, check the sender’s identity, not just their display name:
You can do this by hovering over the sender’s name to see their real email address. Attackers often hide malicious addresses behind convincing-looking display names.

Second, look for any potential inconsistencies:
Even AI makes mistakes, so check for formatting, odd phrases, or even brand logos that seem inaccurate. AI sometimes misinterprets small details.

Third, pause and think twice before taking action:
Don’t let emotional statements excite or frighten you. Sometimes phrases like “Your account will be suspended today” or “Immediate action is required” are used. Stay calm, confirm, and then act.

Fourth, check links before clicking them:
Hover over links. If they lead to anything other than the company’s official domain (minor spelling errors, extra characters), this is a warning sign.

Fifth, use AI against AI:
Security tools now use machine learning to analyse language patterns, detect fake attachments, and identify suspicious URLs. Make sure your email provider or company has advanced filtering enabled.

Sixth, trust but double-check:
If an email claims to be from your boss or bank, verify it through another channel. Call them directly instead of replying.

The featured photo is generated by ChatGPT at Codatna’s request.