AI-written phishing: spelling mistakes aren’t the giveaway any more
AI lets scammers write clean, personalised emails. Judge what the email asks you to do, not how well it’s written.
- Be suspicious of any request involving money, bank details, passwords or gift cards — however professional it looks.
- Urgency and secrecy are still the biggest red flags.
- Personal details — your role, a recent project, your manager’s name — are easy to find online. They don’t prove it’s genuine.
- Check the sender’s actual address and the reply-to address.
- Changing bank details or paying something unusual? Call the person on a number you already have.
- Report anything suspicious with the Report button.
Based on: ASD’s ACSC — AI for small business
Related: Verify a supplier’s changed bank details
Still stuck after those?
You’ve done the right thing by trying. Send whedo.it a quick note — what you tried, what you saw — and a senior pair of eyes will be on it the same business day.