Marijus Briedis, Chief Technology Officer (CTO) at NordVPN, highlighted the evolving threat landscape, stating, “Scammers are evolving at an unprecedented pace, using AI not just to automate attacks but to make them deeply convincing.” Briedis emphasised the importance of staying ahead in the cybersecurity race by leveraging advanced technology to detect and neutralise threats before they reach users. “But ultimately, public awareness and education remain the best defenses,” he added.
New tactics: AI meets social engineering
Gone are the days when cybercriminals relied solely on simple spam or basic phishing attempts. Today, they are deploying AI-generated voice calls that impersonate trusted contacts or financial institutions, making scams more convincing than ever. This new breed of phishing campaigns uses AI to craft highly believable emails and text messages, fooling even the most vigilant users.
The proliferation of fake online shops has also been notable, with over 120,000 malicious sites impersonating Amazon alone in just two months. Briedis explained the dual nature of AI in this context: “AI is a double-edged sword: while it powers incredible innovations, it also equips scammers with tools to mimic legitimate communication flawlessly. This fusion of AI and social engineering creates a challenging landscape where technology alone isn’t enough; users must stay alert and question what they see and hear.”
Scale of the problem
The scale of the problem is enormous, with fraudsters increasingly targeting individuals through sophisticated investment scams. These scams often use stolen personal data to enhance their credibility, making them harder to detect. From March to October 2025, millions of scam-related domains were intercepted, highlighting the heightened threat level.
Tomas Sinicki, Managing Director at NordProtect, pointed out the psychological aspect of these threats: “Cybersecurity threats are no longer just about technology — they’re increasingly about the psychology of people and their resilience to social engineering attacks. Investment scams have surged by nearly 25% year by year recently, costing victims an estimated $5.7 billion in 2024 alone.”
Sinicki further explained that these scams often begin with stolen personal data, such as an email, phone number, or even just a name. While technology can help shield identities, once data is compromised, protection depends on vigilance, strong identity monitoring, and safety nets like cyber insurance.
Prevention, protection, and ongoing commitment
To safeguard against the rising tide of investment scams, experts advise scrutinising unsolicited offers, especially those promising unusually high returns via email or social media. Verifying websites by checking domain names and avoiding suspicious templates is also crucial.
Briedis recommended additional protective measures, saying, “Enabling identity monitoring and alerts can help detect data breaches early, while multi-factor authentication adds an essential layer of security. Consumers should also consider cyber insurance and educate themselves about emerging threats like deepfake voices, impersonation, and fake shops.”
As cybercriminals continue to weaponise AI, the responsibility falls on both technology companies and individuals to adapt and respond. While the battle against AI-driven scams is ongoing, public awareness and education remain pivotal in combating these sophisticated threats.
