Guide
AI-written scam messages: why perfect spelling no longer means it’s safe
Short answer: Don’t judge a message by its spelling any more. The FBI says scammers use AI to fix the errors that used to give them away. Judge it by what it asks for instead: a link to click, a payment, a code, your details, or a move to another app. If it asks for any of those and you didn’t expect it, contact the person or company yourself using a number or website you look up.
By Agent Lane Editorial · Page dated 3 November 2026
How are scammers using AI to write messages?
The FBI says criminals use AI-generated text to make scam messages more believable and to send them faster to more people. It specifically says AI helps them avoid the grammar and spelling mistakes that used to be warning signs, create large numbers of fake social media profiles, write content for fake crypto investment websites, and add AI chatbots to fake sites that push you to click harmful links.
So what should I look for instead?
Look at what the message wants, not how well it’s written. The FTC lists the stories phishing messages tell:
- They’ve noticed suspicious activity or log-in attempts on your account.
- There’s a problem with your account or payment information.
- You need to confirm personal or financial details.
- An invoice you don’t recognize, or a link to make a payment.
- You’re owed a government refund, or a coupon for free stuff.
The FTC adds that real companies won’t email or text you a link to update your payment information.
What about texts and voice messages from someone important?
The FBI has warned of texts and AI-generated voice messages pretending to come from senior US officials, built to gain trust and then send a link to “move to another messaging app.” Its advice applies to any surprising message from someone important or someone you know: don’t assume it’s real, look up their number yourself and call to check, and look closely at the email address, phone number, web address and spelling, because scammers use small differences.
How do I check a message before I act?
- Don’t click links or open attachments in a message you didn’t expect.
- Contact the company or person yourself, using a number or website you know is real.
- Never share a password, code or account number in reply to a message.
- Be suspicious of any request to switch to another app or to pay in crypto or gift cards.
- Protect your accounts with multi-factor login and keep your phone and computer updated, as the FTC advises.
Message about crypto? Run it through the 10-question crypto scam checklist.
What if I already clicked or replied?
If you entered a password, change it on the real site and turn on multi-factor login. If you shared bank or card details, call your bank. If you sent money or crypto, see sent crypto to a scammer: the first 24 hours. Report phishing to the FTC at ReportFraud.ftc.gov and fraud to the FBI at ic3.gov.
Sources
Checked 3 November 2026 on each organization’s own site.
- FBI IC3 — Criminals Use Generative Artificial Intelligence to Facilitate Financial Fraud (PSA I-120324-PSA, 3 Dec 2024)
- FBI IC3 — Senior US Officials Impersonated in Malicious Messaging Campaign (PSA I-051525-PSA, 15 May 2025)
- FTC — How To Recognize and Avoid Phishing Scams
Related guides
- A call from your bank’s “fraud department”? How to tell if it’s real
- Check a call or video before you send money
- How to check if a crypto website is real before you connect your wallet
- AI deepfake blackmail: when scammers fake explicit images and demand money
- Is this a crypto scam? 10-question checklist
Get the daily roundup
The day’s useful AI agent news for small businesses, in plain language, by email. Free.