$893 million in AI-involved fraud, and where it actually shows up

Why this case matters

$893 million is a large headline, and it is the least interesting part of this data. The breakdown is where the useful information is, because it shows AI arriving unevenly — heavily in some schemes, barely in others.

Business email compromise takes the largest share at over $30 million, which fits: BEC has always depended on writing that sounds right, and a chat generator removes the grammatical tells that used to give it away. Romance and confidence scams follow at over $19 million, for the same reason — fake profiles and plausible conversation at volume.

Voice-cloned distress scams account for over $5 million. That is small against the total, and it is worth saying plainly, because the “AI is cloning your grandchild’s voice” story has considerably outrun the reported numbers.

The detail that changes ordinary advice

Two of the FBI’s observations retire pieces of standard guidance.

The first is about grammar. Generative AI is used, in the FBI’s words, “to limit grammatical or spelling errors for foreign criminal actors targeting US victims”. Advice to look for bad English described a real signal that is now being engineered away.

The second is about employment. AI-assisted interviews are being used to get people hired into remote roles — and IC3’s assessment is that the goal “generally appears to be gaining access to private computer networks” rather than immediate money. That is a different threat model from a scam.

What the tells still are

The FBI’s own list of what to watch for in an AI-assisted video interview is refreshingly concrete: lip movement that does not fully coordinate with the audio, and coughs, sneezes or other sounds that are not aligned with what is shown on screen.

What it tells you about the scheme

The proportionate reading is that AI has made existing fraud cheaper, faster and better written, rather than creating a new category. $893 million across 22,364 complaints is about $40,000 per complaint — high, but consistent with AI turning up inside the schemes that already had high losses.

The practical consequence for a reader is narrow but important: stop treating fluency, a photograph, a voice or a video call as evidence of identity. None of them were ever proof, and now they are not even weak evidence. What still works is a callback on a number you already had, and a shared secret that cannot be looked up.