Your mum gets a phone call. It sounds exactly like your voice. You're panicked, you've been in a car accident, you need money transferred right now. She's about to send it — except it isn't you. It's an AI-generated clone of your voice, built from a 10-second clip on your Instagram.
This isn't science fiction. It's happening right now, across Australia, and the technology is getting cheaper and more convincing every month.
Why This Is Happening Now
Two years ago, generating a convincing deepfake voice required expensive software, technical skills, and hours of audio samples. Today, there are free online tools that can clone a voice from a 3-second clip. AI image generators can create photorealistic faces of people who don't exist. Large language models can write flawless, personalised emails in any tone, in any language, at any scale.
Scammers have always been early adopters of technology. They were the first to exploit email, the first to abuse SMS, and now they're the first to weaponise AI. The barrier to entry has collapsed — a teenager with a laptop can now produce scam content that would have required a professional team five years ago.
For Australians specifically, the combination of high incomes, widespread digital banking, and a culture of trust makes us prime targets. Scammers know we're worth the effort.
The Six AI-Powered Scams Hitting Australia
1. Deepfake Voice Calls
The classic "Mum, I've been in an accident" scam has been supercharged with AI. Scammers scrape voice samples from social media videos, TikToks, YouTube clips, or even voicemail greetings. AI tools then clone the voice convincingly enough to fool family members over the phone.
The call comes from an unknown number — "my phone is smashed" — and creates extreme urgency. The scammer, speaking in your child's voice, begs for an immediate bank transfer. Some versions include a fake police officer or hospital worker who takes over the call to add authority.
Why it works: Hearing a loved one's voice in distress bypasses rational thinking. Parents act on instinct.
2. AI-Generated Phishing Emails
Remember when you could spot a scam email by the dodgy spelling and awkward grammar? Those days are over. AI writes perfect Australian English, matches the tone and formatting of legitimate organisations, and can personalise messages using your name, address, and account details pulled from data breaches.
These emails impersonate the ATO, Medicare, Centrelink, banks, telcos, and delivery companies. They look indistinguishable from the real thing. Some even reference genuine recent transactions or policy changes to build credibility.
Why it works: When an email reads exactly like a real one and references your actual details, the usual red flags disappear.
3. Fake ChatGPT and AI Apps
With everyone wanting to try AI tools, scammers have flooded the internet with fake "AI assistant" apps and browser extensions. They appear in social media ads, search results, and even look-alike app stores. Once installed, they steal passwords, banking credentials, contacts, and photos from your device.
Some pose as premium versions of ChatGPT, Gemini, or other well-known tools, promising free access to paid features. Others claim to be AI-powered photo editors, resume writers, or investment analysers.
Why it works: People are genuinely curious about AI and trust that a sophisticated-looking app is legitimate.
4. AI Investment Bots
Fake trading platforms use AI buzzwords — "machine learning algorithms," "neural network predictions," "AI-driven portfolio management" — to convince people they've found a guaranteed way to make money. They show fake dashboards with impressive returns, often using celebrity deepfakes in promotional videos.
You deposit money, the dashboard shows your "investment" growing, and when you try to withdraw, you're asked for more fees, more deposits, or simply locked out. The entire platform is theatre.
Why it works: AI sounds sophisticated and trustworthy. Fake profit dashboards create the illusion of real returns.
5. Deepfake Video Calls
This is the corporate version. Scammers use AI to generate a real-time video deepfake of your boss, a colleague, or a supplier on a video call. They request an urgent funds transfer, a change to payment details, or access to company systems.
In February 2024, a Hong Kong finance worker transferred $25 million after a video call with what appeared to be their company's CFO and several colleagues — all deepfakes. Similar attacks are now targeting Australian businesses.
Why it works: Video feels inherently trustworthy. If you can see the person, they must be real — except now they don't have to be.
6. AI-Powered Romance Scams
Traditional romance scammers had a scalability problem — they could only maintain a few conversations at once. AI chatbots have removed that limit entirely. A single operator can now run hundreds of convincing romantic conversations simultaneously, each personalised, each emotionally sophisticated, available 24/7.
Profile photos are AI-generated faces of people who don't exist, making reverse image searches useless. The chatbot remembers every detail you've shared and uses it to deepen the emotional connection before eventually asking for money.
Why it works: The AI never forgets your birthday, always responds within minutes, and says exactly what you want to hear. It's engineered to create emotional dependency.
How to Protect Yourself
The good news: every one of these scams has practical defences. None of them require technical skills — just awareness and a few simple habits.
The best defence against AI scams isn't more technology — it's a moment of pause. Scammers rely on urgency. If something feels urgent, that's exactly when you should slow down and verify.
What to Do If You've Been Caught
If you think you've fallen for a scam — or even if you're not sure — act immediately. Speed matters. Here's the order of operations:
- Contact your bank immediately — Call the fraud department (the number is on the back of your card). They can freeze transactions, reverse recent transfers, and lock your accounts. Every minute counts.
- Report to Scamwatch — File a report at scamwatch.gov.au. This helps the ACCC track scam patterns and warn others. Your report could prevent someone else from being hit.
- Report to ReportCyber — For cybercrime specifically, file a report at cyber.gov.au/report. This goes to the Australian Cyber Security Centre and can trigger investigations.
- Contact IDCARE for identity theft — If your personal information has been compromised (drivers licence, Medicare, passport, TFN), call IDCARE on 1800 595 160. They're Australia's national identity and cyber support service and will walk you through exactly what to secure.
- Get your devices professionally cleaned — If you installed a suspicious app or clicked a malicious link, your device may have malware silently running in the background — logging keystrokes, capturing banking credentials, or accessing your camera. A factory reset or professional cleanup is essential, not optional.
Don't feel ashamed. These scams are designed by professionals to exploit human psychology. Smart, careful people get caught. What matters is acting quickly to limit the damage and reporting it so others don't fall for the same trick.
External Resources
Think your device has been compromised?
If you've clicked a suspicious link, installed a dodgy app, or had your accounts accessed — bring your device in. We'll scan for malware, remove threats, secure your accounts, and make sure nothing is still running in the background.
Book a Security Checkup