Skip to content

Am I more vulnerable to phishing attacks due to the use of artificial intelligence?

The use of artificial intelligence (AI) by cyber criminals has significantly raised the quality and credibility of phishing attacks. Where phishing emails were once relatively easy to identify by poor grammar, unusual phrasing, or generic greetings, AI-generated messages can now be highly polished, personalised, and contextually convincing.

You should be aware of the following developments:

  • AI tools can generate phishing emails that are grammatically flawless and tailored to the recipient, making traditional warning signs unreliable

  • Criminals can use publicly available information — from social media profiles, university websites, or LinkedIn — to craft messages that reference real names, courses, accommodation blocks, or recent events, making them appear highly credible

  • AI can be used to clone the writing style of known contacts, meaning an email that appears to be from a tutor, accommodation officer, or fellow student may in fact be fraudulent

  • Deepfake audio and video technology is increasingly being used in telephone and video-based phishing attacks (vishing), where attackers impersonate colleagues or authority figures in real time

The key principle remains the same: if an email, call, or message requests urgent action, a payment, or sensitive information — regardless of how convincing it appears — verify it through an independent channel before responding. Do not rely solely on the apparent identity of the sender.

Need immediate support?
Find out how

If you are unable to access Surrey Support, please contact us via our enquiry form.