Cybercrimes; AI, Deepfakes, ChatGPT Dangers and Safety Tips for Businesses and the Real Estate Industry
ChatGPT and Artificial Intelligence have taken over the universe. This machine-learning website allows people to enter prompts and generates responses and content for users, from poems, books, code, stories, charts, sales, marketing content, images, and videos. In addition, it can translate, research, etc. However, ChatGPT’S knowledge ended in 2021; therefore, it isn’t up-to-date, and the information must be fact-checked. Microsoft’s Bing is powered by AI, and other ChatGPT competitors are connected to the internet and can provide up-to-date information. The output still should be fact-checked.
As wonderful as it is, criminals have discovered ways to use this to victimize people and businesses. But on the other hand, AI can be used to detect cybercrimes.
In this article, I cover ways businesses, salespeople, and staff members can be victimized and ways to prevent it. Education and training are the solutions because these cybercrimes are "people problems." No amount of software, security settings, anti-viruses, VPNs, firewalls, etc., can stop it if people aren't trained.
- Phishing Scams: Email scams that impersonate legitimate organizations to steal personal and financial information. Cybercriminals use ChatGPT, and others, to generate mass scam emails. These emails are grammatically correct, unlike emails of the past when criminals from overseas targeted U.S. citizens.
Solution: Educate staff, salespeople, real estate agents, clients, and buyers/sellers on how to identify phishing scams and never share personal or financial information via email.
Do not click links, don’t download, or respond to emails from sources you don’t recognize.
Pay close attention and confirm that email headers are accurate if it is a recognized source.
Although they aren’t 100% accurate yet, some AI detection software can alert you to scam emails, but it shouldn’t be the only research method.
2. Ransomware Attacks: Malicious software that encrypts data and demands payment for its release. Client files and financial information are a target.
Solution: Regularly back up data, keep software updated, and educate staff, salespeople, and agents on how to identify and prevent ransomware attacks.
Train on the recognition of emails that may contain malicious links. Ransomware is often introduced when the untrained click on a link within an email.
3. Deepfakes: Cybercriminals manipulate and create video content that could be used to impersonate individuals to manipulate decisions. Easy-to-use software allows legitimate users to create videos showing their AI-created images and using their synthesized voices.
Criminals use the same software to swap faces with targets/victims and make them say and do things they didn’t do to deceive and defraud people.
This could include impersonating salespeople to get financial information from clients. Or, impersonating clients to get financial or personal information from financial professionals or other professionals.
Solution: Never believe your eyes. Use your original contact information to confirm that the video, photos, or images are legitimate.
Verify the authenticity of audio/video content through multiple sources and educate your people on how to identify deepfakes. There are AI detectors that aren’t always accurate, so you need to develop more than one source and method.
Study images closely, currently some AI generated images are often detectable by oddities including generated images with too many fingers, limbs protruding awkwardly, distorted features or limbs, fuzzy edges, etc.
4. AI-Powered Business and Real Estate Scams: In real estate, AI can create fake listings or manipulate property prices. Cybercriminals can use AI and deepfakes to create products or services that do not exist to scam retail and business consumers into buying something they created.
Solution: Verify listings through multiple sources, check for inconsistencies, and educate agents and salespeople on ways to identify AI-powered scams. Train sales teams to educate consumers about this technology and the dangers and share ways to confirm that purchases are made directly from your business.
5. Data Breaches: Unauthorized access to sensitive data such as client information or transaction details. AI generators can mass-produce requests for information, often overwhelming or catching recipients off guard.
Solution: Implement strong passwords and two-factor authentication, regularly monitor suspicious activity, and educate agents, staff and sales team members on identifying and preventing data breaches.
6. Dangers of AI chatbots impersonating customer service reps, salespeople, and agents and then using the information to scam clients. The trick is that legitimate AI tools are being used in businesses from fast food drive-thru order takers, to telephone customer service reps, etc. Proper discernment is critical.
Solution: Verify communication with administrative and sales staff and agents through multiple channels. Educate clients on identifying ChatGPT-based fraud, and monitor for suspicious behavior.
7. Location Spoofing: Attackers use fake GPS signals to trick businesses, real estate agents, and clients into believing they are communicating with someone in a different location.
Solution: Verify the sender’s location, educate agents, staff, and clients on identifying location spoofing, and use secure communication channels. Verify the phone number to confirm ownership. Utilize tools like Google Maps to visually and physically confirm a location.
8. Property Title Fraud: Theft of a property title through hacking or phishing and creating fake documents. These documents can be displayed online when cybercriminals use AI and services like CHatGPT to generate code and design fraudulent websites.
Solution: Verify the title through multiple sources, educate agents on identifying title fraud, and implement secure storage and transfer methods for title information.
9. Online Listing Fraud: Cyber criminals use fake online listings to scam potential shoppers, buyers, or renters. Using websites like Dall-e, Midourney, etc., criminals can create images of properties and products and list them online to sell. They can use Craigslist, Facebook Marketplace, Instagram shops, etc.
Solution: Verify listings through multiple sources, check for inconsistencies, educate agents and buyers/renters on identifying online listing fraud, and use secure payment methods when making purchases.
Retailers should warn consumers that they should be aware of fake listings and should offer support to verify listings and purchases.
10. AI-Powered Market Analysis Fraud: Use of AI to manipulate market data and influence business and real estate decisions.
Solution: Verify market analysis through multiple sources, educate staff and sales agents on how to identify AI-powered market analysis fraud, and use trusted data sources.
11. Virtual Tour Fraud: In real estate, the use of fake virtual tours to deceive buyers or renters. The pandemic increased the use of virtual tours and they were found to be efficient and productive. Therefore, they are here to stay.
Solution: Verify the virtual tour through multiple sources to educate agents, sellers, and buyers/renters. How to identify virtual tour fraud and visit the property in person whenever possible. Search ownership and county property records to verify ownership. Look at Google Maps to confirm the location and compare the images.
12. Social Engineering: Manipulation and "tricking" individuals through psychological and social tactics to gain access to sensitive information. On social media, social engineers are busy. They ask fun questions to get information that most people would not usually share.
- What is your dog's name?
- On what street did you grow up?
- What's your middle name?
- What was your first car?
Solution: Educate your staff, team, agents, clients, and buyers/sellers on the tactics used in social engineering and how to identify and prevent them, and implement robust security protocols for sensitive information. The questions are typically designed to get the information needed to hack the participant. Usually, the answer is the same as the security question when a password is lost.
This article was written with assistance from ChatGPT.
