AI-Driven Fraud: New Scam Tactics Targeting Small Businesses
We’ve long warned about the telltale signs of small business fraud: a poorly worded email, an unfamiliar sender address, a request that just feels “off.”
But artificial intelligence (AI) has rewritten the fraud playbook.
Today, scammers can do a lot with a little. They can clone a voice from a few seconds of audio, generate realistic video of someone who has never said a word to them and write flawless, personalized emails that pass many more mental red-flag tests than the phishing messages of the past did.
For small and midsize businesses, which often operate without dedicated IT security staff, these AI-powered schemes represent a serious and rapidly growing threat.
The New Face (and Voice) of Fraud
Traditional business email compromise (BEC) scams relied on impersonating an executive through email alone. AI has taken that same concept and made it dramatically more convincing. Among the fresher threats you need to be aware of:
Deepfake Voice Scams
In a deepfake voice scam, a fraudster uses publicly available audio (a podcast appearance, a webinar recording, even a voicemail greeting) to generate a synthetic voice clone that sounds just like your CEO, controller or a trusted vendor.
For example: A finance employee might receive a phone call that sounds exactly like their boss, urgently instructing them to wire funds to close a time-sensitive deal. The pressure, the familiar voice and the plausible business context combine to override the usual skepticism.
Deepfake Video Scams
Deepfake video can push the deception even further. Fraudsters use AI-generated video to impersonate executives on live video calls. In a few high-profile examples, they’ve done so to direct employees to authorize large wire transfers.
While it seems implausible, AI video technology has become sophisticated enough that real-time facial and voice manipulation can hold up through an entire conversation, making it far more difficult to detect than a suspicious email.
AI-Generated Phishing/Social Engineering
These scam technologies have improved dramatically, too. If you received a phishing email years ago, chances are it was riddled with grammatical errors or generic, outdated greetings. But AI tools can now scrape a company’s website, LinkedIn profiles and press releases to craft messages that reference real projects, colleagues and business relationships.
These emails can mimic a specific person’s writing style, making them nearly indistinguishable from legitimate correspondence.
Synthetic Identity Fraud
In synthetic identify fraud, criminals use AI to combine real and fabricated personal information (a real Social Security number paired with a fake name and address, for example) to create identities convincing enough to open bank accounts, secure loans or establish vendor relationships with unsuspecting businesses.
Why Small Businesses Are Especially Vulnerable
Larger corporations have invested heavily in cybersecurity defense, including fraud detection systems, multilayered approval processes and employee training programs.
However, small and midsize businesses typically operate with leaner teams, fewer formal controls and less redundancy in financial approval workflows. This means a single trusted employee often has significant authority to move money or approve transactions. And that concentration of trust is exactly what AI-driven fraud is designed to exploit.
Also, many small businesses maintain a strong online presence for marketing purposes. This (unintentionally) supplies fraudsters with the audio, video and biographical detail needed to build a convincing impersonation.
Building Your Defenses
While AI has made fraud more sophisticated, strong internal controls remain your best defense. Here are a few key practices that can significantly reduce your exposure:
- Train employees regularly on emerging AI fraud tactics, including realistic examples of voice and video deepfakes, so the concept isn’t purely theoretical when they encounter it.
- Limit the amount of executive audio and video content publicly available online where feasible, and be cautious about how much biographical and organizational detail is shared publicly.
- Require multiperson verifications for wire transfers and other significant financial transactions, no matter how the request was received or how urgent it sounds.
- Before acting on an unusual financial request, never call back using the number provided in the suspicious message itself. Instead, call back using a known, independently verified phone number.
- More generally, cultivate a culture where employees feel comfortable pausing a transaction to verify legitimacy, even when the request appears to come from a top executive. Fraudsters rely on urgency and authority to short-circuit normal scrutiny. A business culture that rewards caution over speed removes much of that leverage.
Finally, don’t overlook the value of periodic reviews, including of your financials and your internal controls. As your business grows and your processes evolve, the safeguards that worked two years ago might no longer be sufficient against increasingly sophisticated threats.
Concerned About Your Business’s Fraud Exposure?
AI fraud tactics are evolving quickly, and even well-run small businesses can find themselves exposed if internal controls haven’t kept pace. Knowing where your vulnerabilities lie, and putting the right safeguards in place, can make the difference between a close call and a costly loss.
McManamon & Co. is an accounting, tax, fraud, forensic and consulting firm that serves small and midsize businesses. Our consulting team can help you assess your current financial controls, identify exploitable weaknesses and implement safeguards that make sense given your organization’s size and structure.
Give us a call at 440.892.8900 or contact us online to learn how we can help protect your business.
Tags: accounting, consulting, cybersecurity, McManamon, McManamon & Co., small business, small business accounting, small business finances | Posted in McManamon & Co., small business, Small business finances