AI-Powered Phishing: Emails and Messages That Look 100% Real

Scammers are getting clever. Thanks to AI tools they can now create emails, texts, voice messages and videos that look and sound exactly like something from a bank, a delivery company, or even a family member. That’s worrying — especially for people who prefer simple phones and clear communication. This post explains how these scams work, shows the types of tricks to watch for, and gives simple, practical steps our customers in the UK can use to stay safe.

How scammers are using AI (in plain English)

• Realistic-looking emails and websites: Scammers can copy logos, fonts and wording so emails look identical to those from a real company. They can even build fake websites that appear to be the genuine site.
• Convincing text/WhatsApp messages: Messages that use your name, refer to recent activity, or pretend to be about a delivery or a bank problem.
• Fake voice calls and video messages: AI can clone a voice or create a short video that looks like a real person asking for help or money.
• Personalised scams: By combining data from social media or leaks, scammers make messages that sound very personal — which makes people trust them more.

Common tricks aimed at our customers

Below are the scams we see most often targeting older people and those who prefer simple phones.

1. Bank or card scams (email or SMS)

You get a message saying there’s a problem with your account and that you must click a link to “verify” or “fix” it. The link goes to a fake website that asks for your card details or log-in.

Red flags: urgent language, scary threats, asking for full card number/PIN/password.

2. Parcel and delivery scams (SMS or WhatsApp)

A message claims a parcel can’t be delivered and asks you to click a link to rearrange delivery or pay a small fee. The link is fake and can steal information.

Red flags: links to unknown websites, instructions to pay via unfamiliar methods (e.g. gift cards, bank transfer).

3. “Family emergency” or impersonation (WhatsApp, SMS, voice)

A message or a call pretending to be a grandchild or relative saying they urgently need money. With AI, the voice on the phone can sound like them.

Red flags: an urgent request for money, insistence on secrecy, asking to pay by transfer or voucher.

4. Fake official messages (HMRC, council, energy supplier)

Messages threatening fines, or promising refunds, with a link or phone number to “sort it out now”.

Red flags: threats of immediate fines, poor grammar, odd email addresses or phone numbers.

5. Voice and video scams (phone or social messaging)

A call or video that sounds exactly like someone you know or a bank worker. They ask you to say or confirm personal details, or to authorise a payment.

Red flags: requests for passcodes, asking you to confirm a code out loud, or to say “yes” on a recorded line.

Clear steps to protect yourself (easy and practical)

1.     Pause. Do not click. If a message makes you anxious, take a breath. Scammers use urgency to push you to act without thinking.

2.     Check the sender carefully. Look at the email address or phone number — it might be slightly wrong (example: paypa1.com instead of paypal.com).

3.     Never give card PINs or full passwords. Your bank or official services will never ask you for your full PIN or online password by email or text.

4.     Don’t authorise payments to people you don’t know. If someone asks for money and you can’t verify them, don’t send it.

5.     Verify by contacting the company directly. Use the phone number on the back of your bank card or the number on an official letter — not the number or link in the message you received.

6.     For messages about a family member: call them on a number you already have (or ask another relative) before sending money.

7.     Forward suspicious texts to your mobile operator. (Most UK networks let you forward scam texts to 7726 — forwarding it helps the network stop other people getting the same message.)

8.     Report scams. You can report to Action Fraud and to your bank. If money has been taken, contact your bank straight away using the official number on your card.

9.     Use call-blocking where possible. If your phone lets you block numbers, use it for suspicious callers. If you use voicemail, don’t give personal details on recorded messages.

10. Keep your phone and software updated. Even for simple phones, installing updates when they’re available helps keep you safer.

Examples (how a scam might look)

• Text: “Parcel delivery failed. Click here to reschedule: tiny.link/12345”
• Email: “Important: Your account has been limited. Log in now: [link]” (from customers-support@bank-verify.com)
• WhatsApp: “Hi Nan — I’m in trouble, can you lend me £1,200? I’ll pay you back.” (but the message came from a new number)
• Phone: A call saying “This is your bank. To stop fraud we need you to confirm a code.” If you didn’t request anything, hang up and call your bank using the number on your bank card.

What to do if you’ve already clicked or paid

1.     Contact your bank immediately. Use the official number on your card or statements. Tell them you may be a victim of fraud.

2.     Change passwords for online banking and email — but only on a device you trust.

3.     Report it. Report scams to Action Fraud and to your mobile provider. Reporting helps others.

4.     Get help. If you’re unsure, ask a trusted family member or friend to sit with you while you call your bank or report the message.

Quick checklist (keep this one somewhere handy)

• Don’t click on links if you’re unsure.
• Never give your PIN or full passwords.
• Verify by calling an official number you already have.
• Forward suspicious texts to 7726.
• Report to Action Fraud and your bank.