Skip to content
Submit incident
AII-1001-89643
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.Supporting sources are pending verification.

Microsoft Blocks 1.6 Million Bot Signup Attempts Per Hour Amid AI-Driven Fraud

Microsoft reports blocking 1.6 million bot signup attempts per hour and stopping over $4 billion in fraud between April 2024 and April 2025 as cybercriminals increasingly use AI-powered tools to create convincing fake websites, job postings, and impersonations. The fraudulent schemes target consumers and job seekers through deepfake influencers, AI-generated chatbots, cloned voices, and automated phishing emails, with significant activity traced to China and Germany.

16 April 2025 Β· Storm-1811 Β· Fraud, scams and manipulation
16 April 2025
AII-1001-89643
Quick facts
Category
Fraud, scams and manipulation
Date
16 April 2025
Drafted by
Raidu Incident Detection

What happened

Between April 2024 and April 2025, Microsoft blocked 1.6 million bot-based signup attempts per hour and rejected 49,000 fake partnership requests. Microsoft says it thwarted more than $4 billion in fraud attempts during the past year.

Cybercriminals are using AI-powered tools to create fake e-commerce websites, counterfeit product reviews, deepfake influencers, and fake job postings. AI enables scammers to set up professional-looking storefronts in minutes with auto-generated descriptions and customer service chatbots.

The cybercriminal group Storm-1811 exploited the legitimate Windows Quick Assist tool to gain remote access to victims' devices through social engineering campaigns.

Reported impact

Job seekers are targeted with AI-generated fake interviews and automated phishing emails designed to trick candidates into sharing personal data. Fake storefronts use AI-generated chatbots to stall chargebacks and manipulate victims into believing they are dealing with legitimate sellers.

Microsoft's anti-fraud team tracked significant fraudulent activity originating from China and Germany, countries with large digital economies and e-commerce footprints.

Index analysis

Fraudsters are using AI to impersonate company recruiters and tech support staff, clone voices, scrape company data, and generate fake reviews. The attacks are faster and cheaper to execute than traditional scams, making them harder to detect.

AI-powered scams now target multiple victim categories including consumers on e-commerce platforms, job seekers on employment platforms, and general users of support services.

Governance controls

Microsoft is embedding fraud resistance directly into product design and using machine learning and AI-driven tools to detect and close exposure gaps. The company has added new warnings and safety steps in Windows Quick Assist and blocks thousands of suspicious connection attempts daily.

Microsoft works with law enforcement and international groups to take down scam networks. The company advises job platforms to implement multi-factor authentication for employers and adopt deepfake detection tools.

Classification

Category
Fraud, scams and manipulation
Industry
Digital security
Harm status
Actual harm
Intent
Intentional
Timing
Unknown
Harm types
Economic or property
Harmed
Consumers, General public, Workers
Failure modes
Deepfake image, Deepfake video, Hallucination, Voice clone
AI systems
Microsoft Defender, Microsoft Edge, Windows Quick Assist

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident