Protecting Personal Data from AI‑Driven Phishing Scams

You’re at your desk, a pop‑up claims you’ve won a free iPhone and asks for your Microsoft 365 login. The message even mentions the project you presented last week – it feels legit, but it isn’t. What is AI‑generated phishing and why does it matter? AI‑generated phishing is a scam email or message that has been crafted by an artificial‑intelligence tool to look as if it comes from someone you know, often using bits of your personal data to make it convincing. Because the text reads naturally and may even include your name, company, or recent purchase, you’re more likely to click a malicious link or hand over credentials. How can I spot a fake email that uses my personal data? We see the same tricks over and over, so keep an eye on these red flags: Sender address doesn’t match the official domain (e.g., john.doe@outlook.com instead of john.doe@yourcompany.co.uk ). Urgent language – “Your account will be locked in 5 minutes”. Links that, when hovered, point to a different site – look for misspellings or extra characters. Attachments you weren’t expecting, especially .exe, .zip or macro‑enabled Office files. Requests for passwords, MFA codes or personal identifiers. If anything feels off, treat it as suspicious. What steps can I take right now to protect my data? Enable two‑factor authentication (2FA) on every service that offers it. Even if a password is stolen, the attacker still needs the second factor. Use a password manager to generate unique, strong passwords. Avoid re‑usin