A joint report from Consumer Reports, Aspen Digital and the Global Cyber Alliance finds that 9 in 10 Americans have been targeted by scams or cyberattacks, with 17% reporting monetary losses and only 32% trusting their sensitive data remains private. Experts warn AI is making fraud faster, cheaper and more personalized, and say individual precautions alone are not enough. The report recommends simple habits like the "Take9" pause and calls for coordinated industry and government action, including policies such as the bipartisan SCAM Act.
AI-Driven Fraud Hits Nearly Everyone: 9 in 10 Americans Targeted, Report Finds
A robots hands hover over a tablet displaying a red AI SCAM warning triangle surrounded by various digital icons. (Credit: Image via Shutterstock)
A major new report from Consumer Reports, Aspen Digital and the Global Cyber Alliance warns that nearly nine in ten Americans have been targeted by a scam or cyberattack, and experts say artificial intelligence (AI) is accelerating fraud by making attacks faster, cheaper and far more personalized.
Key Findings
The study found that roughly 90% of U.S. adults report being targeted by at least one digital scam or cyberattack. About 17% said they lost money to an online scam, and only 32% of respondents said they believe their sensitive information—such as Social Security numbers—remains private.
"Nine in ten Americans have been targeted by a scam or cyberattack. That's not a statistic, that's almost everyone we serve," said Phil Radford, President and CEO of Consumer Reports. "AI is making fraud faster, cheaper, and more personal, and no one can out‑smart that alone."
Why AI Raises The Stakes
Researchers and cybersecurity experts say AI lowers the technical and cost barriers for criminals, enabling highly convincing, tailored scams at scale. Stacey Higginbotham, a Consumer Reports cybersecurity fellow, told CBS News that longstanding stereotypes about who gets scammed are outdated: "It is truly everyone now, and AI is just going to accelerate that."
The report also highlights so‑called "upstream" vulnerabilities—such as insecure internet routing and maliciously registered domain names—that make large-scale abuse possible despite users taking individual precautions.
Practical Steps For Consumers
The report recommends simple, low-tech habits consumers can adopt to reduce risk. One example is the "Take9" initiative, which asks people to pause for nine seconds before clicking links, downloading files, or sharing personal information. Other recommended steps include enabling multi-factor authentication, verifying senders before responding to requests for money or data, and using reputable password managers.
Policy And Industry Actions Needed
Experts in the report emphasize that individual steps are necessary but insufficient. Brian Cute, President and CEO of the Global Cyber Alliance, said coordinated action by industry, government and philanthropy is needed to close systemic gaps. The authors point to policy proposals such as the bipartisan SCAM Act, which would increase platform accountability for scams on social media services.
Recent Incidents And Broader Concerns
The report echoes other warnings about AI misuse. It cites disclosures that some AI models have been repurposed for surveillance and fraud, including fake dating apps tied to fraud operations. Separately, a federal watchdog has warned that retirement‑plan providers may share or sell participants' personal data—sometimes without clear consent protections—heightening privacy and financial risks.
Bottom line: Widespread targeting, AI-enabled personalization and persistent infrastructure weaknesses mean preventing fraud will require both stronger consumer practices and systemic reforms across technology providers, platforms and regulators.
Help us improve.
