Israel's Cyber Unit Warns of AI-Powered Scams Ahead of November Shopping Season

As the November shopping season approaches, Israel's National Cyber Directorate has issued a series of recommendations for safe online purchasing. The directorate notes that the ease with which fake websites mimicking legitimate retailers can be created has increased significantly over the past year, largely due to artificial intelligence tools used by hackers. These AI capabilities lend a more convincing appearance to fraudulent websites and communications.

Simultaneously, consumer behavior has evolved, with more individuals utilizing AI tools like chatbots and agents to find products, compare prices, and make purchases. This shift necessitates a heightened awareness of the risks associated with these technologies. The Cyber Directorate advises consumers to verify website authenticity by typing URLs directly or using official apps, rather than clicking on links from messages. It is also crucial to check for essential business information, such as company names, contact details, return policies, and customer service availability.

The directorate specifically warns against deals that appear too good to be true, such as heavily discounted expensive items accompanied by urgent countdown timers, urging consumers to pause and investigate further. Regarding AI tools, users are cautioned against sharing payment details, credit card numbers, ID information, passwords, or verification codes within chatbots. Payments should only be made through secure, recognized payment services. Furthermore, consumers should not automatically accept offers generated by chatbots or AI agents, as these tools may not verify the legitimacy of the seller. Independent verification of the seller's website is essential.

Users are also advised to limit permissions granted to AI tools, especially those requesting access to shopping accounts, email, or payment methods, and to ensure all actions require explicit approval. AI might present outdated pricing, non-existent products, or incorrect shipping terms, so verifying details on the seller's site before payment is recommended. For online payments, using a credit card with a spending limit or a dedicated shopping card can mitigate potential losses from data breaches. One-time verification codes should never be shared, and two-factor authentication should be enabled on all accounts. Storing credit card details on websites, particularly for one-time purchases, is discouraged.

Post-purchase, the directorate highlights an increase in scams targeting shoppers awaiting deliveries. Fraudulent messages impersonating delivery services, claiming package delays or arrivals, are becoming more common. Consumers are urged to verify tracking numbers and access delivery company or postal service websites directly, bypassing links in suspicious messages. These warnings follow a recent wave of cyberattacks in Europe where attackers remotely compromised supermarket temperature control systems, causing physical damage.