Safeguarding Our Digital Future: How Generative AI is Shaping Cyber Scams and What We Can Do About It

By Abhishek Kumar Singh

(The author is Head of Security Engineering of Singapore’s Check Point Software Technologies)

With the recent Safer Internet Day, it’s hard not to feel a little extra concern about our kids’ online safety. Today, our children and young adults are living and breathing a digital world that’s evolving faster than ever—one where scammers are now using AI-assisted smart tools like ChatGPT and DeepSeek to create malicious content that can trick even the savviest among us.

To protect these young minds, some governments have taken bold steps. In Singapore and Australia, restrictions or complete bans to prevent young children under 16 years old from using the popular social media platform, Instagram. These measures recognise that youngsters, still learning how to tell fact from fiction, are especially vulnerable to influence and can struggle to discern what’s real from what’s not.

The AI Revolution in Scam Tactics

Generative AI tools like ChatGPT, deepfake generators, and voice cloning software have revolutionised the way cybercriminals operate. What were once clumsy phishing attempts are now refined operations that can mimic a trusted friend’s tone or a familiar face, blurring the lines between real and fake. Cybercriminals can now produce hyper-realistic videos, images, and even voice messages that can convincingly impersonate trusted individuals. Imagine receiving a video call from what appears to be a friend, or even a respected public figure, asking for urgent help. Scammers can personalise these fraudulent messages by harvesting details from victim’s online interactions, making deception increasingly difficult to detect. This has had a significant impact — Singapore, for example, has recorded the highest spike ever in 2024 for identity fraud, made possible by deepfake technology.

The Role of Government and the Internet Industry

Thankfully, governments and industry leaders are not sitting idle. The Cyber Security Agency of Singapore (CSA) has been actively raising awareness and educating citizens of these scams. Across the Asia Pacific (APAC) region, there has also been a surge in data privacy awareness as nations roll out new regulatory frameworks like India’s revised Digital Personal Data Protection Act, and Thailand’s Data Protection Framework, for instance. These frameworks are reshaping the way personal data is handled, building trust in the digital ecosystem.

Simultaneously, tech companies are investing in AI-driven fraud detection systems that can fight AI with AI. These systems monitor communication patterns and flag any anomalies that might indicate a potential scam before they inflict real damage.

Additionally, there is a growing call within the internet industry to embrace a “privacy-by-design” approach, ensuring that robust security measures are integrated into digital products and services right from the start. This philosophy not only mitigates risks but also bolsters consumer confidence, ensuring that digital spaces remain safe havens for all users.

A Call for Greater Digital Empowerment

It is not enough to merely warn the younglings about the risks of cyber scams; it is important to empower them with the tools and knowledge to fight back. Some initiatives can be:

• Enhanced Cyber Hygiene Education:Schools can incorporate interactive lessons on recognising phishing attempts, understanding the dangers of oversharing online, and practising safe password management. When students learn these skills from an early age, they’re better equipped to navigate the digital world safely.
• Stronger Parental Controls and User-Friendly Tools:Parents can benefit from accessible, non-intrusive tools to monitor children’s online activities without compromising their privacy. This is particularly important for those in the vulnerable age group under 16, who may not yet have the critical thinking skills required to differentiate between genuine content and sophisticated scams.
• Transparent Data Practices:Tech companies must be transparent about how personal data is collected, stored, and used, reassuring users that their information is secure.
• Responsive Support Systems:Easily accessible resources and responsive support channels that help victims of cyber scams recover and learn from their experiences.

Cyber Hygiene: Practical Steps for Staying Safe Online

Regardless of age, one will benefit from adopting solid cyber hygiene practices. Some actionable tips include:

• Use Strong, Unique Passwords:Avoid using the same password across multiple sites. Mix upper- and lower-case letters, numbers, and symbols to create a password that’s tough to crack.
• Enable Two-Factor Authentication (2FA):Adding an extra layer of security ensures that even if your password is compromised, your account remains protected.
• Be Cautious with Personal Information:Think twice before sharing sensitive details online. Adjust your social media privacy settings to limit who can see your information.
• Verify Suspicious Communications:If you receive an unexpected message or call—especially one requesting money—always verify the sender’s identity through a known, trusted channel.
• Regularly Update Software:Regular updates help protect your devices against known vulnerabilities.
• Educate Yourself and Others:Stay informed about the latest scams and share this knowledge with friends and family. The more we know, the better we can protect ourselves.

A Collaborative Path Forward

The challenges posed by generative AI in cyber scams are complex and rapidly evolving. However, through the combined efforts of governments, the tech industry, educators, and young digital citizens, we can build a safer and more resilient online environment. Regulatory measures and innovative security solutions must go hand in hand with comprehensive digital literacy programmes that empower young people to navigate the digital world confidently.

As we celebrate Safer Internet Day, let us commit to fostering a cyber-aware community where robust privacy practices, ethical technology use, and informed vigilance are the norms. Only by working together can we create a digital future that isn’t a playground for fraudsters, but a safe, inclusive space where creativity and innovation can thrive without fear.