AI-Powered Phone Systems Impersonate Banks to Steal Credentials

Financial institutions are warning customers about a new generation of phone-based phishing attacks that use AI-powered interactive voice response (IVR) systems to impersonate legitimate bank customer service lines. These systems sound remarkably authentic, complete with appropriate hold music, menu options, and professionally voiced prompts. Victims typically receive text messages or emails claiming there is suspicious activity on their account and providing a phone number to call. When they call, they reach an AI-powered system that sounds identical to their actual bank's phone system. The system walks them through "security verification" steps that trick them into providing account numbers, PINs, social security numbers, and one-time passwords. What makes these scams particularly dangerous is the sophistication of the AI voice systems. They can handle natural language queries, respond to customer questions, and adapt their responses based on the conversation flow. Some systems even simulate transfer to a "fraud specialist" (another AI voice or human scammer) who provides additional false reassurance. Banking regulators report that losses from these AI-impersonation scams have surged 300% in the past year. Customers are urged to never call phone numbers provided in unsolicited messages, and instead use official contact numbers from their bank's website or the back of their credit/debit cards.