Check AI work, and confirm money requests on a number you already have.
What it means
AI makes scams cleaner and more convincing. Typos are no longer a giveaway, voices can be copied, and video calls can be faked. AI also makes confident mistakes.
A simple example
In early 2024, a finance employee at the engineering firm Arup joined a video call with what looked like the CFO and colleagues, and sent about US$25 million in transfers. The CFO and colleagues on the call were deepfakes (CNN).
Do it yourself
- Confirm any request to change payment details, send money or share records by calling back on a number you already have, never one in the message.
- Treat AI output as a first draft, and have a person check it before it’s sent, filed or acted on.
- Keep confidential information out of AI tools that aren’t approved.
- Block browser extensions except approved ones. In Edge through Intune, use “Control which extensions cannot be installed” set to block all, plus an allow list. In Chrome, use the Admin console’s allow and block mode.
How to check
Ask three staff members what they’d do if “the owner” called asking for an urgent transfer. If anyone wouldn’t hang up and call back on a number they already have, cover that in your next training.
What that misses
People forget a one time training session, and the scams keep changing.
What we do for you
Short security training that repeats, including AI scams, plus browser and app controls on company computers.
“What we do for you” describes work we do for our clients, and what’s included depends on your plan. Already a client? Your engineer can tell you what your plan covers.
Back to all rulesGet the full guide
Technology, managed by people.
The real McCoy: real oversight, real understanding, real answers. Start with a free AI Check.