Canadians are facing increasingly sophisticated cyber scams as artificial intelligence (AI) enables criminals to automate and personalize attacks with greater speed and scale, cybersecurity experts warn. These developments have intensified tactics such as phishing, telephone spoofing, and the use of AI-generated “deepfakes” to impersonate trusted individuals and organizations.

Adam Evans, senior vice-president and chief information security officer at RBC, explained that AI has significantly enhanced scammers’ capabilities by lowering costs and enabling continuous, automated operations. “The software platforms they use to orchestrate scams can operate 24-7, 365 days a year,” he said. This allows criminals to cast a wider net and tailor their approaches more precisely to each target.

One key factor in the rise of effective scams is the use of personal information freely shared on social media. By harvesting such data, fraudsters create highly relevant and convincing messages, increasing the likelihood of victim engagement. Impersonations now commonly include company CEOs, financial institution representatives, and charitable organizations, often through realistic emails, counterfeit websites, or spoofed phone calls that display legitimate-looking caller information.

Evans also highlighted the risks posed by online tracking tools such as cookies, which collect detailed user data that can be resold. “The same information that retailers use for targeted ads is also available to bad actors to enhance their approach,” he noted. Even brief phone interactions can provide voice samples, which AI can use to produce deepfake audio or video. These manipulated contents have been leveraged in scams where supposed executives request wire transfers or where relatives appear to urgently seek financial help.

To combat these threats, cybersecurity professionals recommend robust security practices including the use of strong, unique passwords managed through password managers, enabling multi-factor authentication on important accounts, and utilizing virtual private networks (VPNs) to anonymize online activity. Services that monitor and remove personal data from online brokers can also reduce exposure.

Evans advised Canadians to remain vigilant and keep informed about emerging threats through reliable sources while educating family members on the risks. He underscored the importance of verification as a first line of defense, urging people to pause and critically assess suspicious communications. “When I talk to people who have been compromised, they often sensed something was off but did not stop to verify,” he said. Confirming requests by independently contacting institutions, such as using official phone numbers on bankcards, can help prevent falling victim.

Looking ahead, officials expect AI-driven scams to become more prevalent and efficient, resulting in an increased frequency of targeting that may lead to “scam fatigue” among Canadians. Maintaining skepticism toward unsolicited communications, even those appearing to come from trusted sources, is critical to safeguarding against evolving cyber threats.