Phishing Scammers Use AI to Create Fake Delivery Texts After Major Shopping Events, McAfee Warns

Phishing scams leveraging artificial intelligence to mimic legitimate package delivery notifications have surged following major online shopping events like Amazon’s Prime Day, according to cybersecurity firm McAfee. The company reported a significant increase in AI-generated smishing (SMS phishing) attacks in the weeks after big online shopping events, with scammers using deepfake technology to impersonate retailers and logistics providers.

How Do AI-Powered Phishing Scams Work?

Scammers employ AI tools to analyze real customer service messages from companies like Amazon, FedEx, and UPS, then generate convincing fake texts or emails that include personalized details such as order numbers, delivery addresses, and even realistic sender names. These messages often urge recipients to click on links to “track” or “confirm” deliveries, directing them to malicious websites designed to steal personal information or install malware.

“These attacks are becoming increasingly sophisticated,” said Andrew Tierney, a senior threat analyst at McAfee. “AI allows scammers to scale their efforts while maintaining a high level of authenticity, making it harder for users to distinguish between real and fake communications.”

What Makes These Scams Particularly Dangerous?

The timing of these attacks—focusing on post-shopping events—exploits consumer behavior. After placing orders, users are more likely to check their phones for updates, increasing the likelihood of engagement with fraudulent messages. McAfee noted that a majority of victims in 2023 reported receiving messages within 48 hours of a major sale, with many clicking on links before realizing the deception.

How Can Consumers Protect Themselves?

Experts recommend verifying any suspicious delivery notification through official channels rather than clicking on links. For example, consumers should visit a retailer’s website directly or call the company’s customer service number listed on the official site, not the one provided in the message.

McAfee also advises users to install spam filters and cybersecurity software that detects phishing attempts. “Many modern email clients and mobile operating systems now include AI-based detection tools that can flag suspicious messages,” Tierney said. “Enabling these features adds an extra layer of protection.”

What Are the Legal and Industry Responses?

Law enforcement agencies and tech companies are increasingly collaborating to combat these scams. In 2023, the FBI launched a public awareness campaign targeting smishing attacks, while Amazon and FedEx updated their email templates to include unique security features, such as encrypted tracking links, that are harder to replicate.

Why This Matters for Online Shoppers

The rise of AI-driven phishing scams underscores the growing risks of digital commerce. In 2022, the Better Business Bureau reported a large number of complaints related to fake delivery notifications, with losses exceeding millions of dollars. As AI technology becomes more accessible, the scale and complexity of these attacks are expected to grow, posing a significant challenge for both individuals and businesses.

“This isn’t just a tech issue—it’s a public safety concern,” said Tierney. “As more people rely on online shopping, the need for robust security measures and consumer education has never been greater.”