How to Use AI to Spot Scam Emails and Texts

“Your parcel couldn’t be delivered.” “Unusual activity on your account.” “Hi Mum, I’ve got a new number.” Scam messages are getting more convincing, and AI tools mean the spelling mistakes that used to give them away are disappearing. It’s easy to click first and think later, especially when a message creates a sense of urgency.

AI can also work on your side. If you’re unsure about a message, you can paste the text into a chatbot, without clicking anything, and ask it to point out warning signs. It’s a useful second opinion, but not a guarantee. The safest habit is always to check through an official route you find yourself. This guide takes five minutes.

New to AI? Start with our step-by-step beginner’s guide.

What you’ll need

• The suspicious message (email, text, WhatsApp or social media)
• An AI chatbot such as ChatGPT, Claude, Gemini or Grok
• The official contact details of the organisation it claims to be from (from their website, a card or a statement, not the message)
• Five minutes

Step-by-step: check a suspicious message

1. Pause. Scammers rely on urgency and emotion. Don’t click, call numbers in the message, open attachments or reply.
2. Copy the text safely. Copy the words of the message. Remove your name, account numbers and any codes. Don’t paste passwords or one-time codes anywhere.
3. Ask the AI for warning signs. Paste the text and ask what red flags it sees and what the sender is trying to get you to do (prompt 1). Common signs include urgency, threats, requests for payment or personal details, odd sender addresses and links that don’t match the organisation.
4. Check the sender details. Look at the full email address or phone number. Ask the AI whether the domain looks like the real organisation’s (prompt 2), but remember that even real-looking addresses can be spoofed.
5. Verify independently. Contact the organisation using details you find yourself: their official website, the number on your card, or the app you normally use. If a “family member” messages from a new number, call their old number or ask a question only they’d know.
6. Report it. Forward scam emails and texts to the official reporting services in your country. In the UK, the NCSC explains how to report phishing emails and texts.
7. If you’ve already clicked or paid, act quickly: contact your bank using the number on your card, change any passwords you entered and report it (prompt 3 helps you plan).

Copy-paste prompts

1. Is this message a scam?

I received this [EMAIL / TEXT / WHATSAPP MESSAGE]. I haven't clicked anything. Here's the text with my personal details removed: [PASTE MESSAGE TEXT]
Sender shown as: [SENDER NAME AND ADDRESS OR NUMBER]
List any warning signs of a scam, explain what the sender seems to want me to do, and tell me how to check it safely through official channels. Be clear that you can't be certain either way.

2. Does this sender look genuine?

The message claims to be from [ORGANISATION]. The sender address or number is [ADDRESS / NUMBER] and the link text shows [VISIBLE LINK TEXT, DON'T CLICK IT]. Does this look consistent with how [ORGANISATION] normally contacts people? What should I check, and how can I find their real contact details?

3. I think I’ve been scammed: what now?

I [CLICKED A LINK / ENTERED MY PASSWORD / GAVE CARD DETAILS / SENT MONEY] after receiving a scam message about [TOPIC]. Give me a calm, step-by-step action plan in order of urgency: contacting my bank, changing passwords, securing accounts with two-step verification, reporting it in [COUNTRY], and watching for follow-up scams.

4. Teach me the warning signs

Create a short, friendly guide I can share with [ELDERLY PARENTS / TEENAGERS / COLLEAGUES] about spotting scam emails, texts and calls. Include the 7 most common warning signs, 3 examples of typical scam messages, and a simple rule for what to do when unsure. Keep it under 300 words.

Recommended tools

• ChatGPT: a quick second opinion on message text and warning signs.
• Claude: clear, careful explanations of why something looks suspicious.
• Gemini: built-in protections in Gmail also flag many suspicious emails.
• Grok: quick checks on whether a scam is circulating widely.
• Your bank’s app and official websites: the safest way to check any account message.

If a message claims to be about borrowing money, our guide to comparing loans and understanding interest helps you tell a real offer from a suspicious one. Scams also spike around big purchases and the festive season, so read it alongside choosing a new phone or laptop and planning your holiday spending.

Tips and mistakes to avoid

• Never paste passwords, PINs or one-time codes into any chatbot or message.
• Don’t click links to “check” them. Some links can lead to fake login pages or harmful downloads.
• AI can be wrong both ways. It can miss a clever scam or flag a genuine message. Always verify through official channels.
• Banks and official bodies won’t ask you to move money to a “safe account” or share full passwords.
• Watch for new types of scam, including fake QR codes, voice-cloned calls and messages pretending to be family.
• Turn on two-step verification for email, banking and social media accounts.
• Talk about it. Scams thrive on embarrassment. Sharing examples with friends and family helps everyone.

FAQ

Can AI tell for certain if a message is a scam?

No. It can spot common warning signs and explain them, but it can’t verify who sent a message. Always check directly with the organisation using contact details you’ve found yourself.

What should I do if I clicked a link in a scam text?

Don’t enter any details. If you did, change the passwords for affected accounts, contact your bank if you shared financial details, run a security scan on your device and report the message.

How do I report scam messages in the UK?

The National Cyber Security Centre explains how to report suspicious emails and texts. Report fraud and losses to the police fraud reporting service and your bank.

I received this [EMAIL / TEXT / WHATSAPP MESSAGE]. I haven't clicked anything. Here's the text with my personal details removed: [PASTE MESSAGE TEXT]
Sender shown as: [SENDER NAME AND ADDRESS OR NUMBER]
List any warning signs of a scam, explain what the sender seems to want me to do, and tell me how to check it safely through official channels. Be clear that you can't be certain either way.

Related guides

• How to use AI to understand official letters and forms
• How to use AI to write a complaint letter that gets results
• How to use AI to deal with tech support (and actually get it fixed)

Reference: NCSC: Phishing scams, how to spot and report them