Blog/Online scams

How Scammers Use AI Chatbots

Scammers use AI chatbots to run thousands of friendly conversations at once, in any language. How AI chatbot scams work, where they appear, and what still gives them away.

CyberWatch AI29 September 2026 · 2 min read
A hand holding a phone showing an app dashboard

A scammer used to be limited by time and language: one person could only hold so many conversations, and poor grammar often gave them away. AI chatbots remove both limits. They can keep up friendly, fluent conversations with thousands of people at once, in any language, day and night, and hand over to a human when someone is ready to pay.

Where AI chatbots appear in scams

  • Romance and friendship scams: the early weeks of chatting, building rapport before a human takes over. See romance scams explained.
  • Investment groups: "assistants" in Telegram and WhatsApp groups who answer questions and encourage deposits.
  • Fake customer service: chat windows on fake websites that collect card details and codes.
  • Job and task scams: automated "recruiters" who interview and onboard victims. See fake chat interviews.
  • Phishing messages: personalised, fluent emails and texts generated at scale.

What still gives them away

  • Instant replies at all hours, with long, polished messages.
  • Generic warmth: compliments and empathy that could apply to anyone.
  • Avoiding specifics: vague answers about their life, job or location, or details that drift over time.
  • Refusing live video or calls, or only sending pre-recorded media.
  • The destination: the conversation always moves toward money, a platform, a link or personal details.

Focus on the destination, not the style. Whether you are talking to a person or a bot, a conversation that leads to money, codes or an app you have never heard of is a warning sign.

Illustrative example ยท Chat with a "support assistant" on a fake site
Assistant: Hi there! ๐Ÿ˜Š I'm Ava, your support assistant. I see your order is on hold. To release it, I just need to verify your card. Please type the full card number, expiry date and the 3-digit code, then the one-time code we'll send to your phone.
Red flags:
  • A chat that asks for full card details and a one-time code.
  • An order "on hold" that you have not checked through the real website.

Test a suspicious conversation

  • Ask a specific, local question they should easily answer, such as what the weather is like where they are right now.
  • Ask for a live video call and to do something specific on camera.
  • Say you will not send money or use any platform they recommend, and watch how the conversation changes.

Protect yourself

  • Never share passwords, PINs, codes or full card details in a chat.
  • Use support channels inside official apps or on official websites you reach yourself.
  • Keep money out of online relationships and "opportunities" that start in chats.

Unsure about a chat? Paste the conversation into CyberWatch AI Scan for a free check.

AI makes old scams faster, not new. For how to spot the patterns, see how to spot AI-generated scams and the complete guide to online scams.

Frequently asked questions

Can I tell if I am chatting with a bot?

Sometimes: replies may be instant at all hours, oddly generic, or repeat themselves. But modern chatbots can be very convincing, so focus on what the conversation is leading to.

Are genuine companies' chatbots safe?

Chatbots on a company's official website or app are generally fine for simple questions. Be cautious if any chatbot asks for your password, full card number, PIN or codes.

Why do scammers use AI?

It lets a small team hold many conversations at once, write fluently in any language, and personalise messages, which makes scams cheaper to run and harder to spot.

Sources

  1. How To Avoid a Scam, US Federal Trade Commission
  2. What To Know About Romance Scams, US Federal Trade Commission
  3. Phishing: spot and report scam emails, texts, websites and calls, UK National Cyber Security Centre
Share this article
LinkedIn WhatsApp X
For organizations

Your people get these messages at work too.

CyberWatch AI sends your staff realistic practice attacks, trains the gaps it finds, and shows management exactly where the organization stands.