AI-powered phishing scams target parents and students during school shopping in Turkey
Cyber scammers in Turkey used artificial intelligence and deepfake technology to create convincing fraudulent messages impersonating schools, universities, and cargo companies during school shopping season. The scams targeted parents and students through phishing messages, fake package notifications, counterfeit shopping websites, and false scholarship offers to steal financial and personal information.
What happened
Cyber scammers using artificial intelligence and deepfake technologies targeted parents and students during school shopping season in Turkey. The scammers impersonated trusted institutions including schools, universities, and cargo companies to create fake messages and content designed to trick recipients into making urgent payments or sharing personal and financial information.
Common scam methods included urgent payment messages creating panic, fake package delivery notifications requesting payment or containing malware, counterfeit shopping websites offering prices that seemed too good to be true, and false scholarship and student loan forgiveness claims requiring advance payments.
Reported impact
The scams threatened to compromise personal and financial information of students and parents. Victims were at risk of credit card fraud, malware infection on their devices, and financial loss through fake purchases or advance payment schemes.
Index analysis
Cyber security experts warned that the widespread availability of AI and deepfake technologies made it increasingly difficult to distinguish fake messages and content from authentic ones. The scams exploited the increased financial activity during the school opening period, when parents and students were making purchases, paying school fees, and applying for scholarships and education support.
Governance controls
Cybersecurity experts recommended that parents and students verify any payment requests through official school and university channels before proceeding. General security practices advised included not clicking unknown links, not opening suspicious emails, not sharing personal or financial information via messaging, keeping device operating systems updated, using unique strong passwords for each account, maintaining screen locks on devices, and regularly backing up data.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.