AI-Chatbot 'Customer Support' Impersonation
A convincing AI chatbot posing as a company's 'support' assistant walks you through steps that hand over your login, card, or codes.
Think a message like this reached you? You can check it right now.
What this scam is
Scammers deploy AI chatbots that impersonate a company's customer-support assistant — on a fake site, a pop-up, or a messaging channel. The bot is fluent, patient, and convincing as it 'helps' you resolve an issue, gradually collecting your login, card details, one-time codes, or guiding you to install remote-access software or send crypto. Because it behaves like real modern support, people trust it. Using only official support channels and never sharing codes/credentials with any 'assistant' are the defenses.
What it usually looks like
- A slick 'support assistant' chatbot on a site/pop-up/DM.
- Fluent, helpful conversation that asks for your details.
- Requests for login, card, one-time codes, or remote access.
- A channel that isn't the company's official support.
Common warning signs
- A 'support' chatbot requesting credentials, codes, or card details.
- Support reached via a pop-up, ad, or DM rather than the official site.
- Guidance to install software or send crypto.
- Pressure to complete 'verification' steps.
Example wording scammers use
“Hi! I'm [Company]'s support assistant. To verify your account, please share your login and the code we just sent.”
“I can process your refund — enter your card and follow these steps.”
These are illustrative examples written by ScamSplain, not real messages.
What the scammers want
- Your login, card, and one-time codes.
- Remote access or a crypto payment.
- To exploit trust in AI support.
What to do
- Use only the company's official website/app for support.
- Never share logins, card details, or codes with any chatbot/assistant.
- Don't install software or send crypto at a 'support' bot's direction.
- Verify independently and report the fake support.
What to do if you already responded
- Change passwords, revoke sessions, and contact the real company.
- Call your card issuer; for crypto, assume compromise.
- Report at reportfraud.ftc.gov.