Deck the halls with caution: AI scams are coming to town

As South Africans gear up for the December holidays, the familiar surge in online shopping, travel bookings and digital gift-giving comes with a darker companion: a spike in cybercrime. This year, experts warn, artificial intelligence is making festive scams more personal, believable and dangerous than ever.

“The same enthusiasm that drives people to click faster is exactly what cybercriminals rely on,” says Richard Ford, Group Chief Technology Officer at Integrity360. “But where they used to use generic attacks, AI now allows them to craft highly convincing, personalised lures at massive scale. The game has changed.”

AI-cloned storefronts and 'too good to be true' deals

Fake websites offering unbelievable discounts have long been a holiday hazard. Previously, shoddy design or poor grammar often gave them away.

Now, generative AI can produce pixel-perfect clones of legitimate retail sites in minutes. Social media ads, also AI-crafted, can reference products you’ve recently browsed or use language that appeals to your demographic.

How to stay safe: Always check URLs for “https://”, be sceptical of deals on social media and type the retailer’s web address directly into your browser instead of clicking links.

Hyper-personalised phishing attacks

Bogus courier notifications and fake bank alerts are nothing new, but AI has taken phishing to the next level.

Messages can now include your name, recent purchases and even your suburb, making them appear urgent and legitimate.

Tip: Never click on links in unexpected messages. Check the official courier or retailer website and remember your bank will never request your password or one-time pin (OTP) via email or SMS.

Deepfake 'family emergencies'

AI voice-cloning technology can generate realistic audio messages from loved ones, claiming they’re in distress and urgently need money.

Defence: Pause and call the person on their usual number. Establish a “safe word” with family members for emergencies.

Festive season cyber safety checklist

• Shop smart: Verify websites, avoid deals that seem too good to be true and use secure payment methods like credit cards or digital wallets.

• Secure digital gifting: Double-check account details, never share OTPs or passwords and buy gift cards only from official retailer platforms.

• Lock down new devices: Change default usernames and passwords, update software, review privacy settings and install reputable security software.

“Although humans are often the weakest link, informed and alert users remain the most powerful defence,” Ford says. “Good cyber safety isn’t about being a technical expert. Pausing before you click, verifying before you send money and questioning urgency are simple habits that can defeat even the most sophisticated AI-driven scams.”