AI Is Changing Cyber Threats: 9 Ways to Better Protect Yourself

AI is changing the economics of cyber risk by making attacks by scammers faster, cheaper, and easier to scale—meaning more people are targeted, more often, with more convincing scams. The time between a new weakness in systems or software being discovered and being exploited has shrunk dramatically, and attackers can now automate phishing, fraud, and account takeovers at high volume. The most effective response for consumers is disciplined execution of foundational security practices that reduce your “attack surface” and make it harder for attackers to succeed. Staying vigilant and informed is more important than ever. The following nine practices can help you stay safer online.

1. Remove What You No Longer Use

Every old app, forgotten file, or unused account is a potential weak spot. Remove apps you no longer use from your phone and tablet. Empty your download folders, recycle bins, and email trash on all devices. Unsubscribe from emails and newsletters you no longer read to reduce your exposure to unsafe links.

2. Keep Your Software Up to Date

When a flaw is found in software, some forms of AI can be used to exploit it within hours. Running old software increases that risk. Keep your operating system, browser, antivirus, and apps updated on every device. Turn on automatic updates so fixes are applied as soon as they are available. Do the same for home routers and smart home devices, and change any default passwords.

3. Use Longer Passwords and a Password Manager

AI makes it easier for scammers to guess short passwords. Aim for 16 characters or more, avoid personal information, and do not reuse the same password across sites. A password manager can create and store strong passwords for you.

4. Turn On Multi-Factor Authentication and Enable Biometric Security Features

AI makes it easier to steal passwords. Multi-factor authentication (MFA) adds a second step, like a code sent to your phone, so a stolen password alone is not enough to access an account. Enable it on email, social media, banking, shopping accounts and other places where it is available. Also enable biometric security features like FaceID when available.

5. Be Cautious with Every Message You Receive

Fake emails, texts, and calls used to be easy to spot due to bad grammar or odd formatting. AI has changed that, better enabling attackers. Scam messages now look and sound real, and voices can be copied from audio clips. Be careful with any message that asks you to log in, make a payment, or share personal information. Chase will never ask for your passcode, Social Security number, or account number to fix a problem.

6. Stick to Official App Stores

AI can be used to make fake websites look real and push them to the top of search results. Download apps only from the Apple App Store, Google Play, or the Microsoft Store. Before installing, check who made it, read the reviews, and watch for apps that ask for access they don't need. Avoid "free" software offers and pop-ups telling you to update something.

7. Share Less About Yourself Online

Scammers using AI can piece together what you post online and use it to craft targeted scams. Review privacy settings on your devices, apps, and browsers. Make sure apps can only access what they need. Be mindful about posting your location, travel plans, or family details on social media. The more information available about you online, the easier it is for scams to be tailored to you, and even small details like your pet's name or the school you attended can be used to guess passwords or answer security questions.

8. Protect Your Home Wi-Fi

AI is being used to find weak spots in home networks and smart devices. Avoid using public Wi-Fi for banking or email. Fake networks with real-sounding names are common, and data sent over public Wi-Fi can be intercepted. If public Wi-Fi is unavoidable, use a VPN. Avoid public USB charging stations, as they can install harmful software on your device.

9. Monitor Your Account Activity

Review your transaction history regularly and set up alerts for unusual activity. Chase offers tools that notify you when certain transactions occur or when your balance changes. AI-powered fraud detection may occasionally flag legitimate activity, but it is designed to catch suspicious behavior quickly. Staying on top of your accounts means you are more likely to spot a problem before it grows.

How to Report a Problem

If you think someone has accessed your account or you see charges you didn't make, call us using the number on the back of your Chase card. If you get a suspicious email that looks like it's from Chase, forward it to phishing@chase.com.

Taking these steps will not eliminate every risk, but they will significantly strengthen your ability to stay ahead of evolving threats.

These materials are provided for discussion and informational purposes only. JPMorganChase makes no representations or warranties regarding the accuracy, completeness, or reliability of the information contained herein, and assume no responsibility or liability whatsoever arising from or related to the use of, or reliance on, this information.