Israel's Cyber Unit Warns of AI-Powered Scams During Shopping Season

Israel's National Cyber Directorate has issued a warning about sophisticated, AI-driven scams targeting consumers during the November shopping season, a period when approximately 60% of Israeli purchases are made online. The directorate advises shoppers to exercise increased vigilance due to the ease with which artificial intelligence can create convincing fake websites and messages.

Experts recommend manually typing website addresses into browsers or using official applications instead of clicking on links received via messages. Noam Hendroker, CEO of CYBIZ, a cybersecurity firm, cautioned that even a padlock symbol in a browser does not guarantee a site's legitimacy. He advised checking for a business's name, contact details, return policy, and customer service information. Significant warning signs include extremely high discounts, such as 90% off a valuable item, coupled with pressure for immediate purchase.

Scammers often target popular brands in fashion, electronics, smartphones, and beauty products, as well as large international e-commerce sites. Local brands advertising attractive sales on social media can also become targets. Hendroker noted that fake addresses might have minor alterations from the original, such as an extra letter or an unfamiliar suffix.

When using chatbots, consumers are warned against sharing sensitive information like credit card details, ID numbers, passwords, or verification codes. Chatbots may also not be able to identify legitimate stores, and their displayed prices or shipping terms might be outdated. It is crucial to verify all information with the seller's official website before making a payment and to ensure that any AI tool does not have direct access to shopping accounts, email, or payment methods without manual approval.

To protect payment information, the Cyber Directorate suggests using credit cards with spending limits or dedicated online shopping cards. Enabling transaction alerts can help detect unauthorized charges. Two-factor authentication should be activated for shopping accounts and email. Consumers are also urged never to share one-time codes received from banks or credit card companies, even if the caller claims to be a service representative.

The directorate also highlighted an increase in scam messages related to package deliveries or delays, sometimes requesting small payments for release. Shoppers are advised to access their personal accounts directly on the shipping company's or postal service's website rather than using provided links. For suspicious links, the National Cyber Portal's "Click Check" service allows users to paste a link for an assessment of its legitimacy. The public can report suspected fraud by calling 119, using WhatsApp, or submitting an online form. If personal details have been entered on a suspicious site, contacting the credit card company immediately is recommended.