AI is making scams against older Americans more convincing. Experts share how to spot the new red flags.

Craig Newmark, Don Grant, Amy Nofziger (left to right) shared their perspectives on how older Americans can best prevent getting scammed. Craig Newmark/Sabre Wealth/AARP Cybersecurity experts found severe PHP bugs that could allow attackers to hijack web servers. AI is being used to exploit vulnerabilities, making Americans more susceptible to scams. Experts stressed basic cyber hygiene and scam awareness, especially for older Americans. In just two days, AI exposed critical flaws in a programming language behind 70% of all websites. That may have opened the door for a rush of scams — especially those targeted to vulnerable populations like older Americans. Last week, cybersecurity researchers uncovered two severe bugs in the PHP programming language. Attackers could hijack web servers and execute remote code. This prompted the PHP Foundation to release emergency patches to prevent widespread hacks, and governments, cybersecurity agencies, and businesses quickly moved to do damage control. Though some experts said there could have been more problems had these flaws not been immediately addressed, such a crisis can happen again. As AI becomes more advanced and widespread, Americans are becoming more exposed and susceptible to scams. Scams have been pervasive for decades, starting with physical mail and landline telemarketing. But they've gotten significantly more complex and deceptive, now integrating AI in ways that even tech whizzes may not spot. Older Americans are often the main targets of fraud, losing billions in fraud. An AARP survey from April found that 4 in 10 older Americans have lost money to fraud. With attackers pouncing on any vulnerability to steal personal details or get money, five experts told Business Insider that now is the time to get ahead on scam prevention. Their quotes have been lightly edited for length and clarity. Craig Newmark, founder of Craigslist, who founded the cybersecurity awareness campaign Take9 Craig Newmark advises families to take 9 seconds to pause before clicking on unknown texts. Craig Newmark What are some of the most common scams targeting older Americans? Hackers are using AI to ditch the typos and make scams harder to spot. AI also makes it easier to produce large numbers of targeted scams. This includes AI voice cloning and scans of social accounts for personal details. These scams are on the rise and hurting real people, including older folks like me. How should families react to all the recent headlines about system vulnerabilities? Don't panic, but don't ignore them either. It shouldn't be up to regular folks to outsmart scammers. The best thing for families to focus on is basic cyber hygiene. Organizations like Google and Apple are working hard to block scams, particularly on phones. It's just as important that we prepare loved ones with the tools to protect themselves as scammers become more sophisticated. What are ways in which you work to make people more cautious about scams? I've been fighting scams for 25 years. I take them personally. That's why I founded Take9 in 2024 to help people understand how to protect themselves and stay safe online. Scams are overwhelming, and people often don't know where to begin. My advice is to start with the basics: Take 9 seconds to pause before clicking on unknown texts or links. Once they've got that down, try multi-factor authentication, password managers, passkeys, and single sign-on. Family codes are an effective method to keep your loved ones safe, too. Don Grant, certified financial planner at Sabre Wealth and CFP Board Ambassador Don Grant advises that having open conversations about financial fraud is one of the most effective ways to educate older Americans. Sabre Wealth What are some of the most common scams targeting older Americans? Scams often involve impersonation of an institution or government agency like the IRS, Medicare, or Social Security. Fake technical support scammers contact you with claims of a breach at your bank or financial institution. A good friend and client is in his mid-60s, is a single Notre Dame graduate, and is a retired university English professor. He talked incessantly about his gorgeous, accomplished girlfriend. She has sent him photos, but he had never met her in person, nor via video chat. Fast forward to earlier this year. They are no longer an item. He reluctantly admitted that she was attempting to scam him. He did send her about $1,200 to help get her 9-year-old daughter into a music school. When she hit him up about 10 times so she could move, he figured it out and cut the ties. From what we pieced together, this was an AI-assisted romance scam. How should families react to all the recent headlines about system vulnerabilities? A security breach at an institution doesn't automatically mean that your accounts have been hacked. However, it does mean it's time to change your login credentials. Set up account notifications for withdrawals, transfers, password changes, and anything to do with your accounts. Never respond to an unsolicited email from a site or financial institution with which you do business. Don't call the number provided in the communication or click the provided link. Take the time to log into a verifiable site and call a verifiable number with questions. What are ways in which you work to make people more cautious about scams? Communication and education are critical. I have open conversations about financial fraud, anonymously citing actual situations where a scammer attempted to separate them from their money. Recounting others' experiences seems to really drive the point home. We also insist that all clients designate a trusted contact we can reach if we notice unusual activity or have concerns about possible financial exploitation. Removing the stigma that they are "stupid" if they are scammed is paramount. Many victims are embarrassed to admit they've been deceived, and that embarrassment can prevent them from seeking help. Alex Jacquez, Groundwork Collaborative's senior vice president of policy, advocacy, and research Alex Jacquez notes that companies should better protect consumer data to avoid putting the onus entirely on families. Groundwork Collaborative What are some of the most common scams targeting older Americans? The FTC recently released its Protecting Older Consumers report, describing fraud in 2025. The top fraud types by incident report numbers for older people include online shopping, business impostors, government impostors, and investment scams. These, plus romance scams, are the top fraud types by total dollars lost for older people. Scammers use AI to create deepfakes, clone voices, and send phishing messages. These types of fraud are not new, but AI makes them increasingly convincing and enables them to be carried out on a larger scale. Scammers also use AI in predictive targeting to find the most susceptible individuals. In March 2026, Interpol warned that "AI-enhanced fraud is 4.5 times more profitable than traditional methods" because AI agents can complete the fraud on behalf of the scammers. How should families react to all the recent headlines about system vulnerabilities? Families should see the recent headlines about system vulnerabilities as part of a larger problem. Companies collect lots of information on users and fail to protect it. Now, consumers are exposed to data breaches and sophisticated scams. What are ways in which you work to make people more cautious about scams? We put out material for consumers and policymakers highlighting how companies are using more sophisticated techniques and technologies to rip them off. While there are best practices people can follow to remain alert and vigilant against common scams, especially in the AI age, we believe that any real fix must be systematic and undertaken by policymakers. We need companies to better protect consumer data, stop collecting irrelevant data, and stop using it to squeeze consumers for every last dime. Amy Nofziger, senior director of victim support, AARP Fraud Watch Network Amy Nofziger said the goal of fraud education isn't to live in fear. AARP What are some of the most common scams targeting older Americans? Impostor scams remain the number one category reported to the AARP Fraud Watch Network Helpline. They will say there is a problem with your account and need to remotely access it, or they will say they are with the courthouse and you missed jury duty and demand payment to avoid being arrested. AI hasn't changed human nature, but it has changed the scale, speed, and sophistication of scams. Criminals are still exploiting the same emotions they always have: fear, trust, loneliness, hope, curiosity, and urgency. We used to tell people to look for red flags like misspellings and poor grammar in emails, but with today's AI tools, those clues are often gone. How should families react to all the recent headlines about system vulnerabilities? It's understandable to be concerned by headlines about system vulnerabilities and data breaches, but the key is to focus on what you can control. The goal isn't to live in fear. It's to stay informed, slow down when something feels off, and ask for help. We don't have to do this alone. What are ways in which you work to make people more cautious about scams? AARP Fraud Watch Network helps individuals and families protect themselves from scams. It's a free resource available to everyone. We provide fraud prevention information, online tools, the award-winning Perfect Scam podcast, and a Fraud Watch Network Helpline that receives more than 100,000 calls each year. Ali Tager, vice president of external affairs, National Cryptocurrency Association Ali Tager advises that people look for small errors in grammar or spelling. National Cryptocurrency Association What are some of the most common scams targeting older Americans? Some of the most common online finance scams are relationship scams and impersonation. Giveaway scams are when scammers impersonate public figures, promising "free" money or crypto if users start by sending a small amount first. In phishing scams, fraudsters pose as a friend or a crypto exchange and ask victims to click links or share login details to steal private information. Pump and dump scams occur when groups inflate the price of lesser-known crypto coins via online hype. When enough people join and spike the price, fraudsters quickly sell off their holdings for a profit, leaving others in the dust. How should families react to all the recent headlines about system vulnerabilities? Stay alert, not alarmed. Whether it's your bank, your Venmo account, or your crypto account, security should always be top of mind. Protecting yourself starts with recognizing common scams and practicing smart online habits. For crypto holders, guard your private key or recovery phrase like you would your bank account number and password. No legitimate company will ever ask for it, so never share it, and keep physical backups in secure locations. Watch for small clues like odd sender addresses or sloppy spelling, and remember that deepfakes and fake websites can look real at first glance. What are ways in which you work to make people more cautious about scams? A scammer's greatest weakness is an informed community. The NCA is dedicated to helping everyday Americans understand and use crypto with confidence. Research shows that 72% of crypto holders cite scams and security as a concern. However, 76% of crypto holders say it has positively impacted their lives overall, while just 3% report negative impacts. Of those, about one-third are scam/fraud-related. Read the original article on Business Insider

Read it at Business Insider ↗

← Front page