Guide

AI-written scam messages: why perfect spelling no longer means it’s safe

Short answer: Don’t judge a message by its spelling any more. The FBI says scammers use AI to fix the errors that used to give them away. Judge it by what it asks for instead: a link to click, a payment, a code, your details, or a move to another app. If it asks for any of those and you didn’t expect it, contact the person or company yourself using a number or website you look up.

By Agent Lane Editorial · Page dated 3 November 2026

How are scammers using AI to write messages?

The FBI says criminals use AI-generated text to make scam messages more believable and to send them faster to more people. It specifically says AI helps them avoid the grammar and spelling mistakes that used to be warning signs, create large numbers of fake social media profiles, write content for fake crypto investment websites, and add AI chatbots to fake sites that push you to click harmful links.

So what should I look for instead?

Look at what the message wants, not how well it’s written. The FTC lists the stories phishing messages tell:

  • They’ve noticed suspicious activity or log-in attempts on your account.
  • There’s a problem with your account or payment information.
  • You need to confirm personal or financial details.
  • An invoice you don’t recognize, or a link to make a payment.
  • You’re owed a government refund, or a coupon for free stuff.

The FTC adds that real companies won’t email or text you a link to update your payment information.

What about texts and voice messages from someone important?

The FBI has warned of texts and AI-generated voice messages pretending to come from senior US officials, built to gain trust and then send a link to “move to another messaging app.” Its advice applies to any surprising message from someone important or someone you know: don’t assume it’s real, look up their number yourself and call to check, and look closely at the email address, phone number, web address and spelling, because scammers use small differences.

How do I check a message before I act?

  1. Don’t click links or open attachments in a message you didn’t expect.
  2. Contact the company or person yourself, using a number or website you know is real.
  3. Never share a password, code or account number in reply to a message.
  4. Be suspicious of any request to switch to another app or to pay in crypto or gift cards.
  5. Protect your accounts with multi-factor login and keep your phone and computer updated, as the FTC advises.

Message about crypto? Run it through the 10-question crypto scam checklist.

What if I already clicked or replied?

If you entered a password, change it on the real site and turn on multi-factor login. If you shared bank or card details, call your bank. If you sent money or crypto, see sent crypto to a scammer: the first 24 hours. Report phishing to the FTC at ReportFraud.ftc.gov and fraud to the FBI at ic3.gov.

Sources

Checked 3 November 2026 on each organization’s own site.

Related guides

All guides