AI scams are now one of the fastest-growing threats facing Auckland businesses, and they look far more convincing than the scams of a few years ago. Criminals use artificial intelligence to write flawless emails, clone voices, and even fake video calls. A small team without a clear checking process is exactly the kind of target they look for.
This post explains how AI scams work, what the warning signs look like, and which simple habits stop most attacks. If you want an expert to review your defences, our cybersecurity team at Mi-IT can help you close the gaps quickly.
1. Why AI Scams Are Targeting Auckland Businesses Right Now
AI scams succeed because they remove the old tell-tell signs, such as clumsy grammar and generic greetings. Cheap AI tools let a single criminal write thousands of personalised messages in minutes. That makes small and medium businesses an attractive target.
Auckland businesses move money quickly and trust familiar voices. Staff often work across email, phone and chat in a single day. AI scams exploit exactly that speed and trust, pushing someone to act before they stop to check.
2. What the Numbers Say About AI Scams in New Zealand
The National Cyber Security Centre (NCSC) reported that over half of the financial losses in its Q1 2025 insights came from businesses. It pointed to business email compromise and unauthorised transfers as major causes. Those figures predate the latest surge in AI tools.
More recent research paints a similar picture. Identity firm Lumin reported in May 2026 that 55% of New Zealand organisations had been hit by fraudsters in the past year. It put the average cost of advanced AI identity fraud at about $2.2 million per incident.
3. AI-Written Phishing Emails That Look Perfect
Phishing used to be easy to spot because of spelling mistakes and awkward phrasing. AI scams have changed that. Kordia’s 2026 New Zealand Business Cyber Security Report found that more than 80% of phishing emails now contain AI-generated content.
These emails copy your supplier’s tone, use the right names, and reference real projects. A message might mention last week’s meeting or an invoice number that looks plausible. Polished writing is no longer a sign that an email is safe.
4. Voice Cloning: The Fake Boss on the Phone
Voice cloning is one of the most worrying AI scams for business. Criminals need only a short audio sample to copy someone’s voice. They can take it from a social media video, a podcast, or a company webinar.
A staff member then receives an urgent call that sounds exactly like the managing director. The caller asks for a quick payment or a change of bank details. BNZ has identified voice cloning as one of the top AI-related scam concerns in New Zealand.
5. Deepfake Video Calls and Fake Job Candidates
AI scams are not limited to audio. Scammers now use deepfake video in live calls, and even in fake job interviews. Microsoft’s Australia and New Zealand security chief has warned that odd facial expressions or speech delays can be signs of AI-generated video.
Businesses that hire remotely should take extra care. A candidate who refuses to turn on their camera, or whose face glitches on screen, deserves a second look. Our guide to a BYOD and remote work policy explains how to keep remote staff and devices secure.
Are you looking for a reliable Managed IT Support and Services Provider in Auckland?
Mi-IT is a leading, New Zealand owned Managed IT Support and Services provider. We support our clients in their business goals through reliable and scalable solutions.
6. Business Email Compromise With an AI Upgrade
Business email compromise happens when a criminal gains access to a real email account, or imitates one closely. They then send invoices or payment instructions that appear to come from a trusted person. AI scams make these messages more believable and far easier to produce at scale.
The NCSC has highlighted organisations that handle large payments, including law firms and real estate agencies, as common targets. Attackers study how a business communicates before they strike. They often wait for a busy period, such as month-end, to make a fake request look routine.
7. AI-Built Fake Websites and Supplier Invoices
Security firm Norton reports that hundreds of new malicious AI-generated websites appear every day worldwide. Many rely on tiny changes to a web address or brand name. A single swapped letter in a domain can be enough to fool a busy employee.
Fake supplier invoices work the same way. A criminal sends a genuine-looking invoice with new bank details and a polite note about a banking change. These AI scams cost businesses money because the payment looks completely routine.
8. The Warning Signs That Give Away AI Scams
Even the best AI scams usually share a few patterns. Look for urgency, secrecy, and pressure to skip normal steps. A request to change bank details, or to move money “just this once”, should always raise suspicion.
Check the sender’s address and web links carefully, because small spelling changes are common. Be wary of any request that arrives through an unusual channel, such as a sudden text from a director. The business.govt.nz guide to avoiding scams recommends searching a company’s name alongside the word “scam” when something feels wrong.
9. Verification Habits and Controls That Stop AI Scams
The most effective defence against AI scams is a simple verification rule. Any request to change bank details or make an urgent payment must be confirmed through a second, trusted channel. Call the person back on a number you already hold, never the number in the message.
Add dual approval for payments above an agreed amount, so no single person can be tricked alone. Turn on multi-factor authentication for every email account, and set up email authentication to reduce spoofing. Staff also need clear rules on how they use AI tools, which our workplace AI policy guide covers in detail.
10. What to Do If You Suspect AI Scams Have Reached Your Business
Act quickly if you think a scam has succeeded. Contact your bank immediately if money has moved, because speed improves the chance of recovery. Then change affected passwords and tell your IT provider so they can check for compromised accounts.
Report the incident to the NCSC through its cyber security incident reporting page. Reports help the NCSC warn other New Zealand businesses about new AI scams. If personal information may be involved, consider your obligations under the Privacy Act 2020.
Frequently asked questions
1. What are AI scams?
AI scams are frauds that use artificial intelligence to make impersonation and deception more convincing. Common examples include cloned voices, deepfake video, and perfectly written phishing emails. They target both individuals and businesses.
2. How can I tell if a phone call is a voice clone?
You often can’t tell by listening alone, so rely on process rather than instinct. Hang up and call the person back on a number you already hold. Treat any urgent request involving money with caution.
3. Are small Auckland businesses really targeted by AI scams?
Yes. Criminals favour smaller businesses because they usually have fewer checks in place. AI makes it cheap to attack many businesses at once, so size offers little protection.
4. What is business email compromise?
Business email compromise is a fraud where a criminal uses a real or imitated email account to request payments or change bank details. It is one of the biggest sources of cyber losses reported in New Zealand. AI scams make these messages harder to detect.
5. How do deepfake video calls work in scams?
Scammers use AI to generate a realistic face and voice in real time, often impersonating a senior leader or a job candidate. Glitches, odd expressions, and speech delays can be warning signs. Always verify a surprising request through a second channel.
6. What should my staff do with a suspicious email?
They should not click links or open attachments, and they should report it to your IT provider straight away. If the sender appears to be someone they know, they should still confirm by phone. Forward confirmed phishing to the NCSC if appropriate.
7. Can Mi-IT help protect us from AI scams?
Yes. Mi-IT helps Auckland businesses with email security, multi-factor authentication, staff awareness training, and clear payment verification processes. Get in touch and we’ll review your current exposure.
8. Where do I report an AI scam in New Zealand?
Report cyber security incidents and scams to the NCSC through its online reporting page. Contact your bank at once if money has been sent. You can also tell Mi-IT so we can check your systems.
