Older Americans face rising AI-enabled scam risks as fraud tactics grow more convincing
Recent software vulnerabilities and wider use of artificial intelligence are increasing concerns that online scams are becoming harder for Americans to detect. Older consumers remain a key target, with experts pointing to stronger impersonation, voice cloning, and romance fraud tactics as major threats.
Highlights
- Artificial intelligence is enabling more polished, scalable fraud targeting older Americans by removing traditional warning signs such as grammar mistakes and enabling advanced impersonation tactics.
- Following disclosure of two severe PHP security bugs affecting many websites, emergency patches and broader cybersecurity efforts were implemented to curb potential widespread attacks.
- An April AARP survey found 40% of older Americans have lost money to fraud, with FTC data identifying rising online shopping, business impostor, government impostor, and investment scams as key threats for 2025.
How AI is reshaping fraud tactics
As reported by Business Insider, cybersecurity experts and consumer advocates say artificial intelligence is making long-running scam formats more polished, more targeted, and easier to scale against older Americans.The warnings follow the disclosure last week of two severe bugs in the PHP programming language, which underpins a large share of websites. Researchers said attackers could hijack web servers and execute remote code, prompting emergency patches from the PHP Foundation and broader damage-control efforts by governments, cybersecurity agencies, and businesses.
Experts say the broader risk extends beyond one software episode. They describe AI as removing some of the traditional clues that once helped people identify fraud, such as spelling mistakes or awkward grammar, while enabling voice cloning, deepfakes, and more precise harvesting of personal details from online accounts.
Craig Newmark, founder of Craigslist and the Take9 cybersecurity awareness campaign, says scammers are using AI to produce larger volumes of targeted fraud. Amy Nofziger of the AARP Fraud Watch Network says impostor scams remain the most reported category, often involving fake claims about account problems, jury duty, or urgent payments.
Other specialists point to romance scams, phishing, fake tech support, investment fraud, and cryptocurrency schemes. Don Grant of Sabre Wealth says impersonation of agencies such as the IRS, Medicare, and Social Security remains common, while Ali Tager of the National Cryptocurrency Association highlights relationship scams, giveaway fraud, and pump-and-dump activity in digital assets.
Consumer safeguards and policy pressure
Families should stay alert without overreacting to headlines about data breaches or software flaws, the experts say. Recommended steps include changing login credentials when needed, enabling multi-factor authentication, using password managers or passkeys, setting account alerts, and independently verifying websites, phone numbers, and payment requests.Several experts also stress the value of slowing down before responding to texts, links, or urgent financial demands. Newmark promotes a nine-second pause before clicking unknown messages, while Grant says trusted contacts can help advisers detect unusual activity and possible financial exploitation.
The scale of the financial harm remains significant. An AARP survey from April found that four in 10 older Americans have lost money to fraud, and Alex Jacquez of Groundwork Collaborative points to Federal Trade Commission data showing online shopping fraud, business impostors, government impostors, and investment scams among the leading categories affecting older consumers in 2025.
Jacquez argues that consumer vigilance alone will not solve the problem, saying policymakers and companies need to strengthen data protection and curb unnecessary collection of personal information. That view reflects a wider shift in the fraud debate, from individual prevention toward broader accountability for how consumer data is secured and used.
Our earlier report on the Bank of England’s push for “bare metal” recovery planning outlined how regulators want major banks to ensure critical services can keep running even if core systems are compromised in an AI-amplified cyberattack. We noted Deputy Governor Sarah Breeden’s warning that AI is increasing the scale and complexity of threats, making end-to-end recovery options and basic cyber hygiene central to financial stability.