We’ve all been there: you open your inbox, only to spot a sudden notice claiming your antivirus subscription just auto-renewed for a chunk of change. Just like anyone in your shoes would, you immediately find the nearest cancel button to fix the error and get your cash back.
Well, take a deep breath before clicking anything because cybercriminals are now using AI to craft convincing fake renewal pages that look so legit, they’re fooling even cautious tech users.
The AI makeover
In the past, spotting an online phishing scam was pretty simple. You could usually point out clumsy layouts, awkward phrasing or even terrible typos right off the bat. Today, generative AI tools have completely changed the game by coding clean designs, generating spotless grammar and easily copying popular software brands like Avast.
Security researchers recently analyzed one of these AI-built scam pages and were astonished by what they found.
Targeted at users in Belgium, the site featured sleek payment tables, active status badges and a breakdown claiming a €129.99 charge. Behind the scenes, code analysis revealed polite second-person notes and unused code styling—telltale signs of an AI coding assistant handing off a half-finished job.
The real trap behind the form
Here is the interesting but shocking twist: the charge isn’t real, and the page doesn’t even ask for your credit card or password. And that can make even the most alert observer relax their sense of danger.
Instead, the fake cancellation form only asks for basic info. All the scammers would ask for is your full name, email and phone number. Because it seems so harmless compared to entering financial info, people readily fill it out.
That initial form is simply the bait. Handing over an active phone number and a verified name provides scammers with everything they need for the next phase, which is a follow-up phone call.
Posing as support staff, scammers try to talk victims into downloading remote access software or “reversing” payments. Once they have remote control of a computer, the real security damage happens.
How to outsmart the scam
Because AI makes pages look authentic, you can no longer rely on spotting visual flaws. Instead, focus on checking the context:
- Check your bank account directly: If an email or page claims a payment went through, log into your banking app directly. If there’s no pending charge on your statement, there is literally nothing to cancel.
- Never use provided links: Avoid clicking embedded links in surprising messages. Navigate separately to the official website or app to review subscription details.
- Question cancellation forms: Genuine subscription management usually takes place inside your secure user account, not on a standalone form asking for your phone number.
Ignore pushy calls: Never install remote access software at the request of an unexpected caller.
By keeping these quick checks in mind, you can stay one step ahead of AI-generated tactics.
Source: Malwarebytes