Israel Warns of Sophisticated AI-Powered Scams During Shopping Season

Israel's National Cyber Directorate has issued a stark warning about sophisticated, AI-driven scams targeting consumers during the peak November shopping season. With approximately 60% of Israeli purchases during sales periods occurring online, the Directorate urges heightened public vigilance against deceptive websites and messages.

Experts highlight that artificial intelligence makes it easier for attackers to create convincing fake sites and communications. Noam Hendroker, CEO of CYBIZ, a cybersecurity firm, noted that this period presents a prime opportunity for attackers. He advises consumers to manually type website addresses into their browsers or use official apps instead of clicking on links received via messages. Hendroker also cautioned that even a padlock symbol in a browser does not guarantee a site's legitimacy and stressed the importance of verifying business details, contact information, and return policies.

Common targets for these scams include high-demand brands in fashion, electronics, smartphones, and beauty products, as well as large international e-commerce sites. Local brands advertising attractive online deals are also at risk. A significant red flag is an expensive product offered at an unusually steep discount, coupled with pressure for immediate purchase.

Consumers are strongly advised against sharing sensitive information such as credit card details, ID numbers, passwords, or verification codes with chatbots. The Directorate also warns against automatically purchasing products suggested by AI tools, as they may not reliably identify legitimate vendors. It is crucial to prevent AI tools from accessing shopping accounts, email, or payment methods without explicit manual authorization for each action. Prices and shipping information provided by chatbots may be outdated and require verification on the seller's official website.

To protect payment information, the Directorate recommends using credit cards with spending limits or dedicated online shopping cards. Hendroker described a scenario where attackers insert malicious code into legitimate payment pages, emphasizing the need for transaction alerts to detect unauthorized charges. Enabling two-factor authentication for shopping accounts and email is also advised. One-time codes from banks or credit card companies should never be shared, even if the caller claims to be a service representative.

The Cyber Directorate has launched the "Click Check" portal, allowing users to paste suspicious links for analysis to determine their legitimacy. Consumers can report suspected scams by calling 119, using WhatsApp, or submitting an online form. If personal details have been entered on a suspicious site, immediate contact with the credit card company is recommended to report and potentially block the card. Hendroker concluded that while consumers shouldn't forgo November sales, they must remember that attackers are also anticipating them, and a few seconds of verification can prevent significant financial damage.