ChatGPT Scams: How to Protect Yourself from Malicious Attacks
The introduction of OpenAI’s ChatGPT, the generative AI program that aids in various tasks, has significantly increased productivity around the world. However, with its widespread usage, a new wave of scams has emerged, aiming to exploit hardworking individuals for their personal information and money.
These ChatGPT scams come in various forms, including hackers utilizing the AI to craft convincing phishing emails, texts, and direct messages. Additionally, there are fake ChatGPT websites that can install malware on unsuspecting users’ devices. To help you safeguard against these scams, we have uncovered six of the most common malicious ChatGPT scams and provided some essential tips for protection.
One of the capabilities that ChatGPT possesses is its ability to compose emails, both for marketing professionals and scammers. Unfortunately, this means that scammers can create highly persuasive phishing emails that may appear legitimate, often without the usual red flags such as misspellings or poor grammar.
To protect yourself, it is crucial to scrutinize the actual email address. For example, emails from Amazon should originate from the amazon.com domain. Additionally, avoid clicking on any links within emails. Instead, manually enter the URL into your browser to access the intended webpage.
Thanks to ChatGPT’s conversational skills, scammers can exploit this feature to send direct messages, impersonating someone they are not. This tactic is particularly prevalent in Grandparent scams, where scammers target older adults on social media platforms, pretending to be a grandchild or another beloved friend or relative.
Regardless of age, if you receive a direct message from someone claiming to be a loved one and the story seems suspicious, it is essential to verify their identity by contacting the supposed sender or another trustworthy family member. Never believe requests for bail money, wire transfers to pay medical bills, or gift card purchases from anyone on social media or via text messages.
Another concerning aspect is ChatGPT’s ability to craft compelling emails and text messages containing malicious content, including malware code.
To minimize the risk of AI-generated malware, employ the same precautions as with any other potential threat to your computer. Ensure that your device has up-to-date antivirus and malware software, avoid visiting suspicious or unsecure websites, and refrain from logging into sensitive applications, such as banking apps, on unsecured public networks.
As ChatGPT gained popularity, hackers took advantage of users who searched for the platform online by creating counterfeit sites to steal data and deliver malware.
Protect yourself by only accessing the official ChatGPT website through its legitimate URL, which is https://openai.com. Avoid searching for ChatGPT online, as doing so may lead you to a fraudulent site.
While ChatGPT browser extensions can be useful for enhancing your ChatGPT experience, it is crucial to beware of fake extensions that aim to steal personal data or install malware on your device.
Only install browser extensions after thorough research to ensure their authenticity. For instance, trust-worthy extensions like Merlin allow ChatGPT access from any website, while ChatGPT for Google enables side-by-side usage with search engine results. Be wary of misspellings in extension names, as scammers often employ such tactics. An extension called Chat GPT for Google, which included a space between the words, was responsible for stealing usernames and passwords from thousands of Facebook users before it was shut down.
There have been instances of fleeceware apps found in both Google Play and the App Store, posing as ChatGPT or its alternatives. These apps offer a limited-time free subscription but later deceive users by presenting in-app purchases or demanding weekly or monthly subscription fees. For example, the app Chat GBT enticed users with three free chats but then attempted to charge them a monthly fee of $10 or an annual subscription fee of $30, as reported by Wired.
To safeguard yourself, educate yourself on canceling app subscriptions. Merely deleting the app from your device does not cancel the subscription; you may still be charged. It is essential to understand the terms and legitimacy of any paid service before opting in. Prioritize researching online reviews and consulting individuals familiar with AI apps before committing to any subscriptions. ChatGPT Plus, the official subscription plan, costs $20 per month and can only be purchased through the official OpenAI app or openai.com.
The names ChatGPT and OpenAI are also being exploited in phishing scams. Scammers may send emails impersonating OpenAI or ChatGPT, claiming that your ChatGPT Plus subscription has expired, your payment method has failed, or that you need to verify your ChatGPT account.
Exercise caution when encountering such emails, and never click on any links or provide personal information in response. Instead, directly visit openai.com, the official website of ChatGPT, and log in to your account to verify if there is a genuine issue.
As ChatGPT proves to be a powerful productivity tool, it is essential to remain cautious while navigating the online landscape. If a website, app, email, or message appears suspicious, it is best to err on the side of caution and refrain from engaging further.
