AI-powered scam calls are officially here: How to secure your Gmail account

AI has its advantages but there will always be a few people who use it for the wrong reasons. One such instance is using AI for ‘spoofing’ to take control of digital accounts, including Gmail, the world’s most popular email service provider.

Having a huge database of 2.5 billion accounts, Gmail has become the next target for cybercriminals. A new trick called a ‘super realistic AI scam call’ has been fooling even tech-savvy users.

Here’s how you can secure your account and stay safe from these scams.

Super realistic AI scam calls: How it works

Sam Mitrovic, the founder of CloudJoy and an expert on security products, published a detailed blog on how he was recently duped. He received an email mimicking an approval notification for recovery of his Gmail account. The rejection was followed by a phone call with the caller ID showing “Google Sydney.”

A week later, he received another Gmail recovery notification and a phone call. The call came from a legitimate phone number listed on Google’s support page. The caller stated that his account has been logged in from overseas for over a week, and the personal data related to the account had been downloaded.

ALSO READ: 10 online holiday scams and how to avoid them

On his request, an email notified him of the same issue, this time in text format. The email came from a Google domain, which could fool almost anyone. When Mitrovic received the call, he suspected it was a scam and started to dig deeper. With the help of online forums like Reddit, he confirmed that it was indeed a spoofing attempt to take over his Gmail account.

This instance proves that hackers are able to use a combination of tricks, including fake emails, phone numbers, and AI bots to fool legitimate users. There isn’t a foolproof way to prevent this from happening yet. However, staying vigilant can help you keep your Gmail account safe and secure.

Super realistic AI scam calls: How to secure your account

Here are a few ways to avoid getting scammed.

Google hardly ever calls you regarding your Gmail account. Unless your account is connected to a Google Business Profile, they will contact you via email using a Google domain email address.

In case, you have a Business Profile, you can always cross-check the number through Caller ID platforms like TrueCaller on your smartphone.

Lastly, you can check your Gmail activity on a daily basis. If you suspect unauthorised access, click on Manage your Google account, head to Data and privacy and find your way to My Activity to review account activity.

With time, hackers are developing sophisticated methods to spoof users and gain access to digital accounts to steal private data. The best way to ensure safety is to be vigilant, and make the most of security features like Two-Factor Authentication.