AI Scams Target Bank Customers Without Stealing Passwords

London (GNP): Cybersecurity experts are warning that criminals can use artificial intelligence (AI) to deceive banking customers without stealing their passwords. Instead of breaking into banking software, these schemes aim to persuade the account holder to give away access or approve a payment.

A typical case begins with a phone call from someone claiming to work for the victim’s bank. The caller knows the customer’s name, sounds professional and says suspicious transactions have been detected. The voice may be artificially generated and the warning fabricated, yet the conversation is built to push the customer into authorising a fraudulent payment.

AI makes this kind of impersonation easier, faster and more convincing. Criminals can use generative AI to produce realistic messages, imitate familiar voices and create fake identities that appear trustworthy. The US Federal Bureau of Investigation (FBI) warned in December 2024 that criminals were using AI-generated audio to impersonate individuals, including in attempts to gain access to bank accounts.

Voice cloning has also raised concerns about banks that use voice recognition to verify customers over the phone. In July 2025, OpenAI chief executive Sam Altman warned a US Federal Reserve conference that AI-generated voices posed serious risks to institutions relying on voiceprints.

A cloned voice alone does not guarantee access to an account, however. Banks may require additional checks, and their procedures vary. The greater danger lies in tricking people, which is why scammers often skip the password altogether.

One common method is to persuade the customer to make the transfer personally. A fraudster posing as a bank employee claims the account is compromised and tells the customer to move money into a supposedly secure account, which actually belongs to the criminal. Others manipulate account recovery procedures or talk customers into sharing one-time verification codes.

The FBI warned in November 2025 that criminals posing as financial institutions used calls, messages and fraudulent websites to take control of accounts. The agency said it had received more than 5,100 complaints of account takeover fraud since January 2025, with reported losses above $262 million at the time. These figures cover account takeover fraud in general and should not be read as losses caused only by AI.

Such scams are hard to spot because AI removes many of the old warning signs. Fraudulent emails can read as professionally written, and generated voices can resemble those of real employees or trusted contacts. Scammers can also combine publicly available personal details with invented emergencies, so even a familiar voice or official-looking message should not replace independent verification.

Cybersecurity agencies advise customers never to share passwords, PINs or one-time codes with unsolicited callers. Anyone who receives an unexpected warning about suspicious transactions should end the call and contact the bank through its official app, website or a verified telephone number.

Also Read: BingX Opens Anthropic Pre-IPO Trading Access

Unique passwords, multifactor authentication and regular checks of account activity add further protection. Where available, phishing-resistant methods such as passkeys can offer stronger safeguards against certain takeover techniques.

Customers should also be wary of any demand to move money urgently to protect their savings. The US Federal Trade Commission (FTC) warns that genuine financial institutions do not ask customers to transfer money into another account to keep it safe. If fraud is suspected, contacting the bank immediately may improve the chances of stopping or recovering a payment, although recovery is not guaranteed.

The burden does not rest on customers alone. Banks face the task of telling genuine customers from skilled impersonators, and stronger identity checks, transaction monitoring and fraud detection can reduce the risk. Those measures must still stay accessible to people who depend on telephone and digital banking, and AI itself can help banks flag unusual transactions and suspicious behaviour.

The challenge, therefore, is not only to stop criminals from using AI but to ensure financial safeguards evolve alongside it. As digital banking spreads, protecting savings will depend on both technology and the ability to recognise manipulation.