How AI Is fuelling global cyber fraud and what to do about it

Cyber fraud has emerged as one of the most pervasive and rapidly evolving threats in the cybersecurity landscape.

Deception-based attacks are spreading across industries and geographies. According to the World Economic Forum’s latest Global Cybersecurity Outlook, 73% of leaders say they or someone in their network experienced cyber-enabled fraud in 2025.

Business leaders increasingly view cyber fraud as more urgent than traditional threats such as ransomware because criminal actors combine social engineering and automation, while relying on transnational networks to exploit digital trust at scale.

Artificial intelligence (AI) is accelerating this shift dramatically. The report shows 94% of leaders identify AI as the most consequential force shaping cybersecurity, as it empowers both attackers and defenders alike.

For cybercriminals, AI acts as a force multiplier: generative tools can produce highly convincing phishing campaigns, deepfake voice calls and synthetic identities capable of bypassing traditional verification mechanisms. Activities that once required specialized technical expertise can now be automated, personalized and scaled globally with minimal effort. The latest INTERPOL Global Financial Fraud Threat Assessment reveals that AI-enhanced fraud is 4.5 times more profitable than traditional cybercrime methods.

Recent global incidents illustrate the scale of this shift. AI-assisted phishing campaigns have enabled threat actors to impersonate executives and authorize multimillion-dollar transfers. Deepfake-enabled scams have leveraged fabricated videos of public figures to falsely promise financial benefits and defraud people. Manipulated media has also portrayed political candidates making fake announcements.

AI-enabled romance scams are on the rise too, with follow-on fraud schemes impersonating law enforcement used to further exploit victims. The use of AI tools to generate false CVs and pass job interviews allows threat actors to secure employment under fake identities or place operatives within organizations.

The implications extend well beyond financial loss. By enabling deception at industrial scale, AI-driven fraud erodes trust across digital ecosystems – from financial transactions and corporate communications to public services and online identity systems. As these attacks become faster, cheaper and more sophisticated, cyber fraud is evolving beyond a cybersecurity problem to become a systemic risk with profound economic and societal consequences.

Criminal networks now operate as sophisticated transnational enterprises. They exploit global connectivity and weak coordination between jurisdictions to expand their reach and evade enforcement. These networks function like industrialized ecosystems. They can coordinate fraud campaigns, digital infrastructure and money-laundering operations across multiple regions.

Even with increased law enforcement operations, scam centres are becoming more pervasive and adaptive. They are also harder to dismantle. Their activities are often supported by layered infrastructures of intermediaries, including facilitators of illicit payments and organized recruitment channels. In some cases, these networks use exploitative or forced labour conditions.

This growing integration of technological capability with organized crime accelerates the scale of fraud, but also makes it more difficult for authorities to trace, disrupt and prevent.

But cybersecurity preparedness remains uneven. The Global Cybersecurity Outlook 2026 shows significant disparities in confidence around regional cyber resilience. Fragmentation compounds this issue. Fraud ecosystems are sustained by weak coordination between sectors and governments. Financial institutions, telecommunications providers, digital platforms and law enforcement agencies often hold pieces of the same intelligence puzzle but lack the mechanisms to integrate their insights in real time.

Without coordinated intelligence sharing and joint action, criminal networks will continue to exploit these gaps.

While the trajectory of cyber fraud is not inevitable, tackling it requires a shift from fragmented, organization-level defence to system-wide disruption of fraud ecosystems. The World Economic Forum’s Fighting Cyber-Enabled Fraud: A Systemic Defence Approach white paper highlights that effective action must target the full fraud value chain – from infrastructure and distribution to monetization and victim recovery – through coordinated, cross-sector intervention.

At the March 2026 UNODC-INTERPOL Global Fraud Summit in Vienna, the Partnership against Cybercrime led a session titled Uniting Against Cyber fraud: The Power of Public–Private Action. Participants discussed concrete, systemic pathways for preventing, protecting against and mitigating cyber fraud.

The three layers of action discussed include:

Prevention must focus on disrupting the infrastructure and business models that enable fraud to operate at scale. This should include embedding safeguards at the foundational layers of the internet to reduce bad actors’ ability to acquire, build or operate digital infrastructure for malicious purposes.

Protection should involve proactive, scalable solutions for consumer-facing services such as email, browsers and messaging platforms, to shield users from phishing and cyber fraud. Governments can drive adoption and scale impact through national coordination hubs, supported by regulatory frameworks and targeted incentives that elevate baseline digital safety. Promoting a structured exchange of insights across national initiatives will also reduce duplication and accelerate progress

Even with prevention and protection in place, timely detection and response remain essential. This includes improving reporting mechanisms, strengthening cross-border recovery of funds and ensuring timely support for victims. Effective mitigation not only limits financial loss but also plays a critical role in sustaining trust in digital systems.

This also requires a more deliberate convergence between cybersecurity and anti-fraud functions within companies, governments and regulators, which have traditionally operated in silos despite targeting overlapping threat vectors. Aligning intelligence sharing, detection methodologies and response frameworks across these domains can significantly enhance the speed and effectiveness of disruption efforts. This should enable a more unified defence against increasingly sophisticated fraud schemes.

Cyber fraud is no longer a discrete cybersecurity issue. It is an ecosystem-level threat that demands a coordinated, systemic response. Central to this shift is closer integration between cybersecurity and anti-fraud efforts. The aim should be to enable more cohesive intelligence sharing, aligned capabilities and unified response strategies.

Shared responsibility across the digital ecosystem, combined with sustained public-private collaboration, can deliver scalable impact and help safeguard users, organizations and societies worldwide.

Recognizing and demonstrating the impact of private sector contributions will be key to sustaining and increasing investment in anti-fraud efforts. Bringing together governments, industry and civil society is key to catalyzing collective action. Only a coordinated, ecosystem-wide defence can match the scale of the threat of cyber fraud.