Google Warns of AI-Driven Scams Ahead of Holidays

Google Warns of AI-Powered Scam Surge Ahead of Holiday Season

As the 2025 holiday shopping season approaches, Google’s Trust & Safety teams have issued a stark warning: cybercriminals are increasingly leveraging artificial intelligence to orchestrate more sophisticated and widespread scams. The latest fraud advisory from Google highlights a dramatic rise in AI-powered scams, including fake websites, job fraud, and deceptive holiday shopping offers, with criminals using generative AI to scale their operations and evade detection.

According to Laurie Richardson, Vice President of Trust & Safety at Google, the misuse of AI tools by bad actors is now the fastest-growing threat in the digital landscape. The 2025 Global Anti-Scam Alliance survey, which polled 46,000 adults worldwide, found that 57% of respondents encountered scams in the past year, with nearly 25% reporting actual financial losses. The most alarming trend is the use of AI to impersonate legitimate services, create convincing fake job postings, and generate deceptive ad campaigns.

AI-Powered Scams: New Tactics and Technologies

Cybercriminals are exploiting the hype around AI to create fake apps and websites that promise “free” or “exclusive” access to popular AI services. These scams are not amateurish; they employ advanced tactics such as cloaked malvertising, hijacked social media accounts, and malicious code hidden in software repositories. Google’s internal analysis reveals that these AI product impersonation scams are particularly insidious, as they can bypass traditional security measures and trick even savvy users.

State-sponsored actors from countries like North Korea, Iran, and China are also experimenting with AI to enhance their operations. The Google Threat Intelligence Group (GTIG) has observed these adversaries using AI-powered malware that can generate malicious scripts and change its code on the fly to evade detection. Additionally, bad actors are posing as students or researchers to bypass AI safety guardrails and extract restricted information. Underground digital markets now offer sophisticated AI tools for phishing, malware, and vulnerability research, further complicating the threat landscape.

Holiday Shopping Scams: Heightened Risks

The holiday season is a prime target for scammers, who exploit heightened consumer demand and urgency. Google’s advisory notes a surge in fraudulent activity during major shopping periods like Black Friday and Cyber Monday. Scammers create fake online storefronts that appear as sponsored links, impersonate well-known brands, and run deceptive ad campaigns. They also use targeted phishing and smishing campaigns to impersonate delivery services, demanding fake redelivery fees or promoting fake prizes and rewards.

Google has strict policies against misrepresentation and counterfeit products in its ads and shopping platforms. The company is fighting package tracking scams with new protections, particularly for users of Google Pixel 9 and later devices who opt-in to Enhanced Protection in Chrome. These users benefit from local Gemini models and Safe Browsing features that provide extra defense against scams.

Google’s Defenses and User Tips

Google’s built-in AI defenses on Android are now blocking over 10 billion suspected malicious calls and messages every month. The company has also blocked more than 100 million suspicious numbers from using Rich Communication Services (RCS), preventing scams before they can be sent. Google Messages users benefit from safer links, which warn users when they attempt to click on URLs flagged as spam.

To stay safe, Google advises users to be wary of “too good to be true” deals, excessively low prices, and large discounts that seem drastically cheaper than anywhere else. Users should also be cautious of unexpected delivery texts or emails urging immediate action or demanding a fee. Using secure payment methods with buyer protection, such as a credit card, is recommended whenever possible.

Industry Impact and Future Outlook

The rise of AI-powered scams is not just a concern for individual users but also for businesses and governments. The sophistication of these scams means that traditional security measures may no longer be sufficient. Companies must invest in advanced AI-driven security solutions and educate their employees about the latest threats.

Google’s latest advisory serves as a wake-up call for the tech industry and consumers alike. As AI continues to evolve, so too will the tactics of cybercriminals. Staying informed and vigilant is crucial in the fight against online fraud.

Images:

This comprehensive overview underscores the urgent need for robust cybersecurity measures and user awareness in the face of rapidly evolving AI-powered scams.