New Delhi: Experts are increasingly concerned about the ways in which generative artificial intelligence (AI) is transforming the landscape of cybercrime, giving scammers new tools to make their deception more sophisticated and harder to spot.
What starts as an innocent conversation can quickly spiral into a digital trap. To unravel the intricate web of modern-day scams, ThePrint spoke to an active scammer under the condition of anonymity. In a candid conversation, they revealed the mechanisms and tactics used to deceive unsuspecting victims, which range from manipulating emotions to exploiting digital tools.
“Some days we’re flooded with leads; other days, there’s nothing,” they said, explaining how scams depend on luck and timing.
These leads are often obtained through data breaches or purchased from the dark web, where personal information like phone numbers, email addresses, and Aadhaar card details are traded. Timing becomes crucial in executing scams—certain seasons or events, like tax season or festival periods, create a heightened sense of urgency that scammers exploit.
Despite the variety of scams they employ—from loan fraud to fake insurance claims—one thing remains constant: trust. “It’s not about fake IDs or documents. It’s about the pitch,” the scammer explained. “Building trust is key. If they start questioning you, that’s when it gets tricky.”
The scammer also revealed that generative AI tools make their work easier.
“60-70 percent of our work depends on AI. Websites that create fake profiles, change voices, or make untraceable calls—these tools are essential,” they said, underscoring the new dimension technology has brought to cybercrime.
AI enables scammers to automate tasks that would otherwise require significant effort, such as generating deepfake videos, cloning voices, or crafting personalised phishing emails that appear highly authentic.
Also Read: How safe is your private life? Your SIM can be cloned, phone number spoofed & WhatsApp hacked
‘People are convinced by familiar voices’
The scale of cybercrime in the country is staggering. In 2024, cyberattacks globally surged by 76 percent from the year before, with India being one of the most affected countries.
Last year, India reported over 79 million cyberattacks, placing it third globally in terms of incidents. The Indian Cybercrime Coordination Centre has projected that Indians may lose over Rs 1.2 lakh crore to cyber fraud in the coming year. According to the Home Ministry-affiliated department, these losses could account for 0.7 percent of the country’s GDP.
Ankur Shripad Puranik, a cybersecurity expert, explained how AI tools are being used to deceive victims in ways that were once unimaginable.
“Voice cloning is one of the most concerning applications,” Puranik said. Scammers use AI to replicate the voices of well-known figures, tricking victims into thinking they’re receiving legitimate investment advice or instructions from trusted sources.
“Voice cloning is a tool to extract money. People are convinced by these familiar voices into believing false promises.”
Puranik also pointed to scams where AI-generated voices impersonated customs officials or tax authorities, convincing victims to pay fake dues.
“They pose as officials and pressure people into acting quickly,” he said. The urgency combined with the perceived authority of the voices leads to desperate decisions.
Perhaps most alarming is the rise of digital identity theft. Puranik warned that data from India’s Aadhaar system is being sold on the dark web, enabling scammers to target individuals with even greater precision. “Personal information like Aadhaar numbers is easily accessible. It’s a goldmine for scammers,” he added.
Real people, real losses
The surge in scams is not just about the numbers; it’s about the human toll. In the past 11 months, over 90,000 cases of digital arrest scams have been reported with victims losing more than Rs 2,100 crore, according to I4C (Indian cybercrime coordination centre). Many more cases likely go unreported, either due to embarrassment or lack of awareness.
In one case, a student from Karnataka lost Rs 18,000 after she was tricked into thinking she was under arrest because her number was allegedly involved in illegal activities.
“The arrest warrants looked so real, and the entire court procedure sounded legitimate. I was terrified and convinced I had no choice but to pay the bail amount,” she recalled.
Another victim, a 55-year-old man from Uttar Pradesh, was duped in a similar scheme when scammers posed as police officers and claimed his son had been arrested.
“The voice on the other end sounded just like my son. I was terrified. I paid Rs 30,000 without thinking twice,” he said. It wasn’t until he called his son later that he realised he had been scammed. “My son was safe in his room. That’s when I understood I had been tricked.”
Speaking to ThePrint, a senior Delhi Police officer said, “Scamsters have also evolved in their ways with the technological advancements. And this has seen a significant rise after Covid. Now we have digital arrests, deep fakes videos for blackmailing apart from sextortion, and loan app scams.”
He added, “As far as the probe is concerned, due to the use of VPNs (virtual private network) and VoIP (Voice over Internet Protocol) for these calls, the investigation has to be very technical and in most cases, we do it by backtracking.”
The police officer further explained that scammers use mule bank accounts, which is what the police use to trace them.
“They switch off those numbers and delete the accounts used so, sometimes, the investigators have to wait and be patient. Moreover, more often, the mule bank account holders don’t know the details of the scammers, so, then we have to change the course of the probe and detect one link after another. We also write to social media sites meanwhile for cooperation.”
Preventive measures to combat cybercrimes
To mitigate these risks, Puranik suggested introducing robust verification processes for AI-based applications. “Small processes can be introduced, especially for sensitive AI-based applications which can be used to dupe people,” he advised.
For instance, Puranik recommended requiring video verification for digital signatures. Individuals could record a live video stating their details, adding an extra security layer. Additionally, he proposed that the government mandate identification, such as an Aadhaar card, alongside verification videos to effectively track misuse.
By adopting such measures, individuals and organisations can create a more secure digital environment, making it harder for cybercriminals to exploit personal information and reducing the likelihood of successful scams.
Despite these existing efforts, the ease with which generative AI tools can be used for cybercrimes poses an ongoing challenge. As the technology continues to evolve, so too will the tactics of cybercriminals, making it crucial for both authorities and the public to stay vigilant.
(Edited by Sanya Mathur)
Also Read: Leveraging AI, Airtel deploys free of cost shield against spam calls and texts for all users