AI makes it 'quicker and easier' for criminals to exploit and extort online users

Criminals are using artificial intelligence (AI) to manipulate images and trick people into handing over money and personal details, a specialist detective has said. Merseyside Police's cyber unit said AI has made it "quicker and easier for criminals to generate convincing messages, images or audio" to target and trick online users.

Detective Sergeant Danny Gavin told the ECHO : "AI's a great tool that we all use in our daily lives to make ourselves more efficient, whether that's research, creating documents, scripting emails...But we've got to be aware that criminals will try to use it for exactly the same purpose.

"They want to be as efficient and effective as they can. So they will use it for things like scripting scam emails, generating voice content for trying to phish people over phone calls, generating social media and video content or potentially going as far as using it to generate emails through coding."

Det Sgt Gavin said there is no particular demographic that is predominantly affected as part of AI scams because "most people are online now...anyone that is online is likely to be targeted". He added "it's a national, if not a worldwide issue" and scammers will "look for where there's vulnerabilities and they'll look to exploit that vulnerability".

The ECHO spoke to Merseyside Police just a matter of weeks after the threat of AI was highlighted by Elon Musk's tool Grok, which edited images of real people in revealing clothing prompting widespread concern over the sexualised deep fakes. The tool, which is used on X, formerly Twitter , later said it implemented technological measures following pressure from the UK government.

The ECHO asked the force if Grok was an example of how criminals could manipulate images to blackmail and extort people .

Det Sgt Gavin said: "It can be used for that purpose, generating images or videos, so whether it's used for extortion, whether it's used to convince people to click links, to engage and interact with that content which will deprive them of finances or their credentials...that is obviously a big concern."

And asked if social media companies are both willing and able to work with police forces, the officer added: "I think there's a lot of work going on behind the scenes. I know the government has done an awful lot of work...from a law enforcement perspective we deal very well with the social media companies.

"Obviously when we find out that there's been a crime and we need to investigate it, we need data to progress that investigation. They are generally very forthcoming and very helpful to make sure that we get to the outcome we need."

The threat of AI is a constantly developing market. But Det Sgt Gavin said law enforcement has the tools to counter it because Team Cyber UK allows forces to "operate across borders". He added: "There's obviously a lot of intelligence work that goes on developing how tactics are being used.

"That's why we really encourage people to report as much as they possibly can. The more information that comes in, the more we can develop that intel and keep ahead. The main thing is to encourage people to not try to get ahead. Things will change all the time, but there are simple steps that we can take to make these tactics far less effective in the first instance."

Merseyside Police has advised people to check suspicious messages and images which look unusually slick or are unexpectedly personal to pause and independently verify it.

To coincide with today's Safer Internet Day, the force has launched its Cyber Six campaign. The campaign advises people to pause and examine details; verify through trusted routes; treat voice notes or videos with care; and slow down and stay curious, because criminals rely on pressure.

Det Sgt Gavin said: "Good cyber security doesn’t need to be complicated. A few simple and practical habits go a long way to protecting yourself online, and Safer Internet Day is a great reminder to keep them in mind."

If you believe you have been a victim of cybercrime or fraud, you can report it to Report Fraud at reportfraud.police.uk or by calling 0300 123 2040. This service replaces Action Fraud as the national reporting centre, allowing victims to report incidents at any time.

Victims of cybercrime or fraud can obtain support from Victim Care Merseyside by calling Freephone 0808 175 3080 on weekdays between 8am and 6pm or request support online at at any time .