In 2026 the BBC warned that criminals use AI to create convincing fake retail sites and deep‑fake communications, prompting National Trading Standards to publish a watchlist. Shoppers must verify sites via the FCA’s Firm Checker, avoid gift cards, and enable two‑factor authentication to protect against these sophisticated scams.
What Happened
On 18 October 2026, the BBC warned that criminals are using AI to create convincing fake retail sites and deep‑fake communications to defraud shoppers. National Trading Standards has published an AI scam watchlist that details the tools and tactics now in use. The watchlist lists cloned or newly created websites that look polished and professional in rapid time and at a low cost, romance scams that employ AI to remember victims’ personal details and keep conversations going over weeks or months, and deep‑fake videos or voice‑cloned audio that impersonate family members or close friends asking for money in an “emergency.” Error‑free, personalised phishing emails, text messages and social media posts can be generated by AI on a huge scale. The BBC notes that old scam‑avoidance techniques may now be less successful because typos or grammatical errors can no longer be relied on to spot scams, says consumer group Which?.
Trading Standards advises that shoppers should never send money, gift cards or personal or financial information to someone they have not met in person, and should research a shop’s address and use the Financial Conduct Authority’s Firm Checker to ensure a company is legitimate.
What This Means For You
If you’re a consumer who shops online, the rise of AI‑powered scams means you must treat every new website with a higher level of scrutiny. Start by checking the domain name: legitimate UK retailers often use a .co.uk or .uk suffix and have a clear physical address listed. If the address is missing or appears generic, flag it. Use the FCA’s Firm Checker to verify the company’s registration status. Even if a site looks professional, a quick Google search for the business name can reveal complaints or scam reports.
When you receive an email or message that seems urgent, pause before acting. AI can craft convincing narratives that mimic a loved one’s voice or tone. If the request involves money, ask for a phone call or video chat with the person you think is asking. A real family member will likely confirm the story in a live conversation. If the person is unavailable or insists on a quick transfer, treat it as a red flag.
For those who frequently buy niche or high‑value items, consider using a payment method that offers buyer protection, such as a credit card or a service that holds funds until you confirm receipt. Avoid sending money via gift cards or wire transfers, which are notoriously difficult to recover. If you do use a gift card, verify the retailer’s policy on returns and refunds before completing the purchase.
Keep your device and software up to date. AI‑driven phishing campaigns often exploit known vulnerabilities in browsers or operating systems. Enabling two‑factor authentication on your email and social media accounts adds an extra layer of defence against account takeover attempts that could be used to send you fraudulent messages.
Finally, stay informed. The BBC’s AI scam watchlist is updated regularly; subscribing to alerts from consumer protection agencies can give you early warnings about new scam techniques. If you suspect a scam, report it to Trading Standards or the FCA so they can investigate and warn others.
Why It Matters
This surge in AI‑enabled fraud signals a shift in the threat landscape. Traditional scams relied on human error or simple deception; now, sophisticated algorithms can generate realistic images, voice recordings, and text that bypass many of the heuristics shoppers use to spot fraud. The fact that National Trading Standards has had to create a dedicated watchlist indicates that the scale and sophistication of these attacks are growing rapidly.
For the retail sector, the implications are twofold. First, legitimate businesses must invest in digital forensics and brand protection to detect and shut down counterfeit sites that use their logos and product images. Second, consumer trust is at risk; if shoppers cannot distinguish real from fake, the entire e‑commerce ecosystem could suffer a loss of confidence, leading to reduced online spending.
From a regulatory perspective, the BBC’s coverage underscores the need for clearer guidelines on AI‑generated content. If deep‑fake videos and voice clones can be used to defraud, lawmakers may need to consider new disclosure requirements or penalties for creating and distributing such content without consent.
In the broader AI safety conversation, this trend illustrates how powerful generative models can be weaponised. The same technologies that enable creative applications can also produce convincing misinformation at scale, challenging existing fraud‑prevention frameworks.
Key Takeaway
- AI‑driven scams now use realistic images, voice cloning and personalised phishing to bypass traditional red flags.
- Always verify a retailer’s address and registration status before purchasing, and use the FCA’s Firm Checker.
- Never send money or gift cards to someone you have not met in person; confirm requests via a live call.
- Keep devices updated and enable two‑factor authentication to protect against account takeover.
Frequently Asked Questions
How can I tell if a website is a fake AI‑generated store?
Check the domain suffix, look for a physical address, and use the FCA’s Firm Checker. A legitimate UK retailer will have a clear .co.uk or .uk domain and a verifiable business address.
What should I do if I receive a deep‑fake video asking for money?
Ask the person to confirm the request over a live video call or phone conversation. If they cannot or refuse, treat the message as a scam and report it to Trading Standards.
Can I recover money sent via a gift card to a scammer?
Unfortunately, gift cards are usually non‑reversible. Use payment methods that offer buyer protection, such as credit cards, whenever possible.
Leave a Reply