Fake docs, cloned websites: how AI is supercharging digital scams 🤖⚠️

Cliquez ici pour lire en français

Digital scams have existed since the rise of social media. But with the arrival of generative AI tools, scammers are crossing into far more sophisticated territory — one capable of deceiving even the most cautious internet users.

What once looked suspicious and poorly made can now appear polished, credible and almost indistinguishable from the real thing.

When AI creates fake official documents 🤖

Online fraud has evolved dramatically. In the past, scammers often relied on poorly designed documents filled with spelling mistakes and obvious inconsistencies. Today, many of them use generative AI tools such as ChatGPT, Gemini or Midjourney to create job offers, official summons, contracts and administrative documents with impressive writing quality and convincing layouts. Logos, signatures and official stamps can now be reproduced with striking precision.

According to Proofpoint’s 2024 cybersecurity report, attacks involving AI-generated content have grown significantly in recent years. In Sub-Saharan Africa, young professionals and students remain among the most exposed groups, often targeted through fake recruitment opportunities supposedly coming from multinational companies or international NGOs.

“I have often seen documents like these circulating in our WhatsApp groups. What is happening today is unbelievable. I’m genuinely worried for people who are not aware of these risks,” says Jules, a student at the Siantou University Institute in Yaoundé.

The growing realism of these documents is changing the nature of online deception. The challenge is no longer spotting obvious mistakes; it is identifying highly convincing fabrications.

Cloned websites can now be built in minutes 🌐

Another fast-growing technique is website cloning.

Thanks to AI-powered website generators, reproducing the interface of a bank, government service or company has become easier and faster than ever. Fraudsters can replicate the appearance of legitimate platforms in a very short time. To deceive users, they often register domain names that look almost identical to the originals: a missing letter, an added hyphen or a slight variation in spelling. They then host a near-perfect copy of the targeted website.

In Cameroon, institutional websites generally use the .cm domain extension, while government entities usually operate under .gov.cm. Any unusual variation should immediately raise suspicion.

A commercial website using .com may be entirely legitimate, but because such domains are easy to create and acquire, they are also frequently exploited by cybercriminals.

For users, paying attention to URLs is becoming just as important as checking the content itself.

How can you tell what is real and what is fake? 🔍

As these tools become increasingly sophisticated, a few basic habits still help avoid most traps.

First, always verify contact information — phone numbers, email addresses and website links — by comparing them with the official channels published by the organisation concerned. If uncertainty remains, visiting the organisation’s offices in person is often the safest option.

Users should also be extremely cautious when a process requires payment through Mobile Money or Orange Money. Legitimate administrative fees generally go through official payment systems and not through transfers sent to personal accounts.

Artificial intelligence is a double-edged technology. It is opening major opportunities across healthcare, education, productivity and innovation. At the same time, it is giving fraudsters access to tools that dramatically increase their ability to deceive. Digital vigilance has probably never been more important.

Have you ever received a job offer or an official-looking document that later turned out to be a scam potentially created with AI? Share your experience with us in the comments.