Employers should begin considering questions such as:

What information can an AI system access?
Which systems can it connect to?
What actions can it take without human approval?
How are permissions reviewed and revoked?
What happens when an agent encounters suspicious instructions or content?

These questions should be part of broader technology governance and risk-management conversations.

What employers can do now

Technology remains an important part of fraud prevention, but employees also need practical guidance for the moments when a scam reaches them.

Make verification part of normal business processes

Employees should know when and how to verify unusual requests, particularly those involving payments, credentials, sensitive information, or changes to account details. Verification should use a trusted channel rather than replying to the original message.

Train for realistic scenarios

Security awareness training should reflect how fraud now occurs. Examples should include text messages, collaboration tools, voice calls, QR codes, social media, and AI-generated impersonations, not only traditional phishing emails.

Encourage employees to pause

Fraud often depends on urgency. A request that demands immediate action, insists on secrecy, or discourages verification should receive additional scrutiny. Creating room for employees to pause and ask questions can be a meaningful layer of protection.

Protect employees outside the workplace

Employees do not separate their digital and financial lives as neatly as organizational policies often do. Personal identity theft, account takeover, and family impersonation scams can create stress that affects workplace focus and financial wellbeing.

Instant Insights /

How AI is changing the fraud landscape: What employers need to know

More From HR Executive

Related Stories

Recommended For You