Scam messages are evolving. Thanks to AI, they are now grammatically perfect, highly personal, and incredibly convincing. The old rules for spotting fakes no longer apply, making independent verification more critical than ever.
The New Era of Flawless Fakes
For years, the advice for
spotting a scam was simple: look for typos and bad grammar. That era is over. Artificial intelligence can now write flawless, persuasive, and personalised messages at a scale never seen before. These are not the clumsy emails of the past; AI can mimic the tone of your boss, reference a real project, or create a fake delivery notification that looks identical to the real thing. In India, these scams range from fake job offers and customer care impersonations to deepfake voice calls from a 'relative' in distress. The goal of this new technology is to bypass the warning signs you've been trained to look for, making you trust the message without thinking.
Beyond Typos: The Subtle New Red Flags
Since perfect grammar is now common in scams, we need to look for new clues. One of the biggest is what experts call 'contextual hallucinations'. The message might mention a real project but get a small detail wrong, or reference a department that sounds plausible but doesn't exist. Another sign is an unusual tone or timing. If your typically brief manager sends a perfectly structured, three-paragraph email at 3 AM, that's a red flag. Scammers also use AI to create hyper-specific urgency, often referencing a recent event or a public social media post to make a request seem more legitimate. The key is to shift from asking, 'Does this look real?' to 'Does this feel right?'.
The Golden Rule: Verify Independently
The single most powerful defence against any scam, AI-powered or otherwise, is independent verification. This means you should never use the contact information, links, or attachments provided in a suspicious message to confirm if it's real. If you get a text from your bank about a problem with your account, don't click the link. Instead, close the message, open your official banking app, or type the bank's website address into your browser manually. If you receive an urgent payment request from a colleague, call them on a number you already have saved to confirm it. This one habit — creating a separate line of communication to verify a request — neutralises the scammer's entire strategy, which relies on you acting with fear and urgency within their controlled environment.
A Practical Guide to Checking Links
Before you click any link in an unexpected message, you need to inspect it. On a computer, you can hover your mouse over the link to see the actual destination URL, which is often different from the text displayed. On a mobile phone, a long press on the link will usually bring up a preview of the full web address. Look closely at the domain name. Scammers often use lookalike domains with subtle misspellings, like 'amaz0n-security-net' instead of 'amazon.com'. For an extra layer of security, you can use a free URL checker. Tools from cybersecurity companies like F-Secure, Bitdefender, and Avast allow you to paste a suspicious link and will scan it against a database of known malicious sites. While not foolproof, these tools add a valuable layer of defence.
Building Your Digital Defence
Protecting yourself is about building smart habits and using the right tools. First, enable multi-factor authentication (MFA) on all your important accounts, especially for banking and email. This means even if a scammer steals your password, they can't get in without a second code from your phone. Use a password manager to create and store strong, unique passwords for every site. This prevents one compromised account from leading to others being hacked. Finally, be skeptical of any message that creates a sense of urgency, fear, or trust, as these are the three emotions scammers exploit. Whether it's a threat that your account will be blocked or a promise of an unbelievable prize, pause before you proceed.
