AI-Generated Phishing and Smishing Scams Targeting Seniors: When Perfect Grammar Becomes a Weapon

Already been scammed? Read our First 24 Hours Emergency Guide for critical steps to take immediately.

This page is part of our AI-Powered Scams Targeting Seniors series.

FBI IC3 2025: Phishing and spoofing were the #1 crime type by victim count in the 2025 IC3 report, with 193,407 complaints. The FBI noted that AI is increasingly used to generate phishing content that bypasses traditional detection methods. AI was referenced 260 times in government impersonation complaints alone — many of which began with AI-crafted phishing emails or text messages.

What Is AI-Generated Phishing?

AI-generated phishing is a modern evolution of the traditional phishing scam, where criminals use artificial intelligence to craft highly convincing emails, text messages (smishing), and social media messages designed to trick you into clicking malicious links, sharing personal information, or sending money.

For years, seniors were taught to look for bad grammar, misspellings, and generic greetings as signs of a scam. AI has eliminated these warning signs. Today’s AI-written scam messages are grammatically perfect, personalized, and virtually indistinguishable from legitimate communications.

How AI Makes Phishing More Dangerous:

  • Perfect language: AI writes flawless English (or any language) with natural tone, proper formatting, and professional vocabulary. No typos, no awkward phrasing.
  • Personalization at scale: AI can scrape publicly available data — your name, your bank, recent purchases, your location — and craft unique messages for each target. You may receive an email that references your real bank and your real address.
  • Realistic branding: AI can replicate the exact formatting, logos, and tone of emails from banks, Medicare, Social Security, Amazon, or any organization.
  • Volume and speed: A single criminal can use AI to generate thousands of unique, targeted phishing messages per day, each slightly different to evade spam filters.

Common AI Phishing Scenarios Targeting Seniors:

  • An email from your “bank” warning of suspicious activity, with a link to a perfect replica of the bank’s website
  • A text from “Medicare” stating your benefits will be suspended unless you verify your information
  • An email from “Amazon” about an order you didn’t place, with a “cancel order” link that captures your login credentials
  • A message from a “family member” on social media asking for financial help, written in that person’s exact communication style

Real-World Cases and Data:

  • AI Phishing Surge: Security researchers found that over 80% of phishing emails now utilize AI, and AI-generated phishing achieves click-through rates more than 4 times higher than human-crafted messages (54% vs 12% in controlled testing). AI can analyze a target’s writing style, interests, and recent activity to craft messages that feel personally relevant — a technique called “spear-phishing at scale” that was previously only possible with dedicated human effort.
  • Medicare and Social Security Lures: The FBI reported a sharp increase in AI-generated phishing targeting seniors through fake Medicare enrollment notices and Social Security benefit updates. These messages replicate official formatting so precisely that even experienced computer users struggle to identify them as fraudulent.
  • Multilingual Attacks: AI tools now allow criminals who don’t speak English to generate flawless English-language phishing. The FBI’s December 2024 advisory warned that this capability has dramatically expanded the pool of criminals who can target American seniors, including international fraud rings that previously struggled with language barriers.

Red Flags of AI Phishing:

  • Any unsolicited message asking you to click a link or provide personal information
  • Messages creating urgency: “Act within 24 hours,” “Your account will be closed”
  • Sender’s email address doesn’t match the organization (look carefully — scammers use addresses like [email protected])
  • Links that go to unusual URLs (hover over links before clicking to see where they actually lead)
  • Requests for passwords, Social Security numbers, or payment via unusual methods

How to Protect Yourself:

  • Never click links in unsolicited messages. If a message claims to be from your bank, go directly to the bank’s website by typing the address yourself, or call the number on the back of your card.
  • Don’t trust perfect grammar. A flawlessly written message is no longer a sign it’s legitimate. Scammers have AI too.
  • Verify independently. If a message asks you to take action, contact the organization directly using a known phone number — not the one in the message.
  • Use two-factor authentication on all important accounts, so that even if a password is stolen, your account remains protected.

If You’ve Been Targeted:

  • Report phishing emails to the FBI at ic3.gov
  • Forward phishing emails to [email protected]
  • If you clicked a link and entered information, change your passwords immediately and contact your bank
  • Report to the FTC at reportfraud.ftc.gov

Sources: FBI Internet Crime Complaint Center (IC3) 2025 Annual Report; FBI IC3 Public Service Announcement, December 2024: “Criminals Use Generative Artificial Intelligence to Facilitate Financial Fraud.” View the full AI Scams hub page with state-by-state data.

Back to AI-Powered Scams Hub | 2025 FBI Elder Fraud Data | Find Your State Attorney General