Cybercriminals are becoming increasingly sophisticated, shifting their focus from stealing passwords to targeting biometric data and e-signatures. These unique identifiers, such as faces, voices, and handwritten signatures, are now at the heart of advanced phishing attacks powered by artificial intelligence (AI).
Phishing, a common cybercrime tactic, involves scammers impersonating trusted entities to deceive individuals into revealing sensitive information like passwords, PINs, or financial details. With AI, these attacks have become more convincing and harder to detect as scammers continue creating hyper-realistic phishing emails, texts, and websites that are nearly indistinguishable from legitimate communication.
A recent report by cybersecurity firm Kaspersky highlights the alarming rise of AI-enabled scams, raising concerns about the safety of Kenyan users and businesses. The report revealed that over 142 million phishing link clicks were blocked globally in just three months to June 2025, with Africa recording a sharp 25.7 percent increase in attacks.
Fraudsters are also using AI-generated videos and voice cloning to impersonate executives or officials, tricking victims into disclosing sensitive information or granting unauthorized access to accounts.
#KataaUtapeli #KaaChonjo
Take Judy, for example. She received an urgent message claiming to be from her bank, asking her to verify her account through a link. The link directed her to a website that closely resembled her bank’s official platform. As part of the verification process, the site requested access to her smartphone camera to “confirm her identity” using facial recognition.
Judy hesitated but remembered her bank’s advice to always verify such requests. She called her bank’s official customer service line, where she was informed that the message was a scam. The bank explained that they would never ask for facial identifiers or account verification through such links. Judy’s quick thinking and decision to contact her bank saved her from falling victim to fraudsters who could have used her biometric data to access her accounts.
How to Avoid AI-Driven Scams
- Verify Links: Avoid clicking on unsolicited links; confirm directly with your bank.
- Protect Biometric Data: Never grant camera or microphone access unless necessary. Do not grant biometric data to suspicious websites.
- Secure Devices: Use strong passwords and enable two-factor authentication.
- Avoid Public Wi-Fi: Use mobile data for sensitive transactions.
- Stay Alert: Report suspicious messages or calls to your bank immediately.
Essential Security Tips to Protect Yourself
Equity Bank is committed to safeguarding its customers. Follow these tips to stay safe and avoid scams.
- Keep your PIN, CVV, passwords, and OTPs private; Don’t share. Your bank will never ask for them.
- Verify all transaction details on the POS or mobile screen before approving.
- Avoid public Wi-Fi for online banking; use mobile data instead.
- Memorize your PIN, keep it confidential, and shield the keypad when entering it.
- Use unique passwords for banking and social media accounts.
- Download banking apps only from official app stores and enable two-factor authentication.
- If your card gets stuck at an ATM, do not leave or accept help; call your bank immediately.
- Confirm payment instructions directly with your bank before transferring money.
- Report lost IDs or passports to your bank and relevant authorities without delay.
- Regularly monitor your accounts for unusual activity and report any suspicious transactions.
- Be cautious of calls or messages from unknown numbers; official Equity Bank calls come from 0763 000 000.
- Equity Bank will NEVER call you to ask you to top up your airtime.
- Equity Bank will NEVER call you to threaten to close your bank account because of prolonged inactivity.
- Equity Bank will NEVER call you to read out and guide you to enter “activation codes”.
- Report suspicious SMS or phone numbers to 333 for FREE.
Be Vigilant: Stay One Step Ahead of Fraudsters
Fraudsters are constantly evolving their tactics, but you can stay ahead by following these security measures. Protect your biometric data, verify all communication, and ensure your hard-earned money stays safe.
#KataaUtapeli #KaaChonjo