Standard Bank alerts customers to AI-powered spoofing scams

South Africa’s largest bank, Standard Bank, has issued a warning about a rising trend in “spoofing” scams, where criminals use artificial intelligence to impersonate bank officials.

Fraudsters are increasingly able to mimic legitimate calls and emails, making it difficult for customers to detect these scams. By manipulating caller ID or email addresses, scammers create the appearance of genuine bank communication.

How Spoofing Works

Spoofing often combines with vishing—fraudulent phone calls claiming to be from Standard Bank. These calls are highly convincing, often following the tone, structure, and security protocols of authentic bank interactions. Scammers may even reference personal details like birth dates, addresses, or account types to establish trust.

Once trust is built, fraudsters typically claim there’s an issue with the customer’s account, offering “solutions” such as transferring funds, scanning QR codes, clicking links, or sharing sensitive information like OTPs or instant money voucher codes.

Phishing Emails: The Digital Threat

AI is also making email scams more convincing. Phishing emails are designed to replicate Standard Bank’s branding and often create a sense of urgency, warning that accounts are flagged for KYC or FICA compliance issues. Many emails contain malware hidden in attachments, links, icons, or QR codes. Clicking these can install harmful software or redirect users to realistic-looking fake websites. Deadlines are typically short, pressuring victims into quick action.

AI Amplifies the Risk

Adv. Athaly Khan, Head of Fraud Risk Management at Standard Bank, said:

“The rapid development of AI has made spoofing scams more sophisticated. Fraudsters now use voice cloning, deepfakes, chatbots, and AI-generated emails, making scams look and sound incredibly real. Stay alert, know what not to do, and never share sensitive information.”

Protect Yourself: What Not to Do

Never:

• Transfer funds to another account on request. The bank can secure funds without your involvement.
• Generate instant money vouchers for anyone else. Legitimate transactions do not require this.
• Click links, scan QR codes, or download attachments from emails or texts claiming to be from the bank.

Never share:

• Login credentials, card expiry dates, CVV codes, OTPs, or ATM PINs.
• Financial details like investment accounts or product holdings.
• Account details that could turn you into an unknowing money mule.

Stay Vigilant

Fraud tactics are constantly evolving. Scammers exploit fear and urgency to manipulate victims. Standard Bank urges clients to stay calm, think critically, and always verify communications before taking action.

Recent warnings echo trends across South Africa, with the National Financial Ombud Scheme reporting a 73% increase in digital banking fraud complaints between January–May 2024 and the same period in 2025.