2025-2026 Pub. 66 Issue 2

5. Hyper-Personalized AI Phishing and SMS Scams The threat: Attackers scrape customer data, browsing patterns and loyalty activity to create ultra-personalized phishing texts or emails. Why it works: Messages look eerily accurate (“Your Black Friday order is delayed, tap here to confirm delivery window”). Business impact: Credential theft, account takeovers and customer distrust. What you can do: • Deploy link-scanning and mobile message filtering tools. • Add contextual warnings in order confirmations (“We will never ask you to click a link to verify shipping”). • Track for anomalous login activity from phishing victims and auto-lock high-risk accounts. 6. Synthetic Customer Identities Targeting Loyalty Programs The threat: AI fabricates customers with complete digital histories (emails, receipts, browsing data) to exploit signup bonuses or loyalty rewards. Why it works: Loyalty systems prioritize frictionless onboarding and often lack strong identity validation. Business impact: Loyalty program drain, corrupted analytics and fraud investigation backlogs. What you can do: • Introduce behavioral risk scoring (that doesn’t violate any privacy standards) that flags new accounts with unusual velocity or reward-seeking patterns. • Require extra verification for high-value redemptions (e.g., reward-to-cash conversions). • Add device fingerprinting to detect bots generating multiple “new customers.” 7. “VIP Escalation” Deepfake Impersonations The threat: Attackers clone voices of high-value customers, celebrities or even internal leaders to demand expedited shipping, override codes or loyalty perks. Why it works: Employees don’t want to disappoint high-value profiles and rush decisions. Business impact: Unauthorized account modifications, loss of merchandise and reputational damage. What you can do: • Implement role-based authorization: no voice-only request (even from a VIP) can trigger an override. • Create a callback protocol for any escalation request tied to loyalty, credit or shipping adjustments. • Train associates on the psychology of pressure scams so they’re comfortable slowing things down. Scan the QR code to view a graphic version of this report. https://online.flippingbook.com/view/228613504/ CONCLUSION Scan the QR code to subscribe to Fisher Phillips’ Insight System to get the most up-to-date information. For further information, contact your Fisher Phillips attorney or any attorney on our Retail Industry team, our AI, Data, and Analytics team, or our Data Protection and Cybersecurity team. https://www.fisherphillips.com/en/Subscribe.html DEALERS’ CHOICE 34

RkJQdWJsaXNoZXIy MTg3NDExNQ==