Artificial Intelligence (AI) is transforming HR processes, but it’s also powering more convincing, scalable scams. From deepfake candidates to impersonated executives, today’s threats look more real than ever.

The following tips can be used to avoid HR related AI scams.

1.Learn how to spot AI scams 

Watch for these emerging AI-driven red flags:

• Polished phishing emails with internal details
• Fake audio or video from leadership
• AI-generated CVs or candidate profiles

2. Strengthen verification during the hiring process

Build verification steps into your hiring process:

• Use secure identity verification tools
• Watch for video glitches
• Ask deeper follow-up questions

3. Validate communications claiming to be from leadership

Use these practices to verify leadership communications:

• Confirm via a second channel
• Never approve changes based one message
• Check tone and phrasing
• Be cautious of urgent requests that bypass normal processes
• Report suspicious activity immediately
• If possible, call and speak with them directly

4. Build processes that make scams harder to execute

Put safeguards in place to reduce risk:

• Multi-step approvals for sensitive changes
• Secure platforms (not email) for data sharing
• Standardised workflows for hiring and onboarding
• Role based access to sensitive info

5. Train regularly on AI threat awareness

Reinforce awareness with these training strategies

• Quarterly training
• Realistic phishing simulations
• Examples of deepfakes and fake candidates

6. Use technology as support, not the sole defence

Leverage technology effectively with these approaches:

• Use tools to flag anomalies
• Verify images and documents
• Pair automation with human review
• Use secure systems for approvals

By staying informed. alert and proactive, HR teams can transform from a vulnerable doorway into a powerful first line of defence, helping your organisation remain resilient in an evolving landscape of AI-enabled threats.

However if you were to become a vitcim of a cyber or phishing attack, a Cyber Insurance policy can help your business recover. Call our team for a no-obligation discussion on 01245 265838 or complete our contact form and we’ll be in touch as soon as possible.