McAfee Corp., a global leader in online protection, today released its 2025 predictions. The predictions highlight emerging threats consumers may encounter as cybercriminals exploit advanced AI technology. From hyper-realistic deepfakes and live video scams to AI-driven phishing, smishing, and malware attacks, these predictions reveal how cybercrooks are using AI-powered tools to craft increasingly sophisticated and personalized cyber scams.
“As AI continues to mature and become increasingly accessible, cybercriminals are using it to create scams that are more convincing, personalized, and harder to detect,” said Abhishek Karnik, Head of Threat Research, McAfee.
“From deepfakes that blur the line between real and fake to AI-driven text message, email, social, and live video scams, the risks to trust and safety online have never been greater. That’s why it’s more important than ever for consumers to stay informed about these emerging threats, and why McAfee is so focused on protecting consumers’ privacy, identity, and personal information, so they can navigate the online world with confidence and peace of mind.”
McAfee’s predictions for the top digital threats in 2025, and tips to stay safe, include:
1. Seeing isn’t believing as deepfakes redefine trust in 2025
Scammers are using artificial intelligence to create highly realistic fake videos or audio recordings that pretend to be authentic content from real people. As deepfake technology becomes more accessible and affordable, even people with no prior experience can produce convincing content. With easy-to-use AI tools and accessible tutorials, scammers are finding it easier than ever to manipulate trust and deceive people in digital interactions.
Imagine receiving a video call from a loved one pleading for financial help, only to discover it was an AI-crafted scam. These schemes don’t just drain wallets—they create emotional distress and erode trust in relationships. Protect yourself by double-checking any unexpected requests through a trusted, alternate method and relying on security tools designed to detect deepfake manipulation.
2. As AI turns messages into masterminds, there’s a new phishing playbook
AI is giving cybercriminals the ability to easily create more personalized and convincing emails and messages that look like they’re from trusted sources, such as banks, employers, or even family members. They can craft these scams quickly and with precision, making them more difficult to detect and increasing their success rate. As AI tools become more accessible, these types of attacks are expected to grow in sophistication and frequency.
Imagine receiving an email that looks identical to one from your bank, asking you to verify your account details. Falling for a scam like that could lead to a drained bank account or identity theft. Stay safe by enabling two-factor authentication, double-checking unexpected messages through official channels, and using advanced security tools that detect and flag suspicious communications before they reach you.
3. Rogue apps hide hidden dangers in your pocket
Scammers are increasingly embedding harmful software into apps that appear legitimate, often targeting apps downloaded from unofficial sources. With the growing reliance on mobile apps, the opportunities for exploitation are growing rapidly. These malicious apps can disguise themselves as harmless tools, games, or even productivity aids, making it easier for hackers to trick unsuspecting consumers.
Imagine downloading what looks like a simple photo editing app, only to discover it’s secretly stealing your passwords or accessing your financial information. To protect yourself, always stick to official app stores, review app permissions carefully before installing, and use trusted anti-malware protection to identify and block malicious apps before they can cause harm.
4. Crypto chaos as scammers mine for gold in your digital wallet
As cryptocurrency values climb and hype around the alternative currency increases, scammers are zeroing in on consumers’ digital wallets with fake investment schemes, phishing attacks, and malware designed to steal wallet keys, sell bogus crypto investments, or “pump and dump” – when scammers trick others into buying a cryptocurrency by hyping it up to inflate its price and then sell their shares for a profit when the price is high – causing the value to crash and leaving other investors with worthless assets. The decentralized nature of cryptocurrency, while appealing to users, also makes it nearly impossible to recover stolen funds, further enticing cybercriminals to exploit this space. With new malware capable of intercepting transactions or using AI to target victims more effectively, these scams are expected to grow in sophistication.
Imagine downloading what seems like a legitimate crypto app, only to have it compromise your wallet and drain your funds. Protect yourself by using hardware wallets for secure storage, enabling multi-factor authentication, and avoiding the digital storage or sharing of sensitive wallet details, such as recovery phrases.
5. Tap to pay becomes tap to prey as NFC scams rise
As contactless payments become increasingly popular, scammers are finding new ways to exploit vulnerabilities in Near Field Communication (NFC) technology. They may intercept payment credentials, bypass authentication, and complete unauthorized transactions. The growing reliance on mobile wallets and tap-to-pay systems has expanded the potential for these attacks, making them an attractive target for scammers.
Imagine completing a routine transaction, only to later discover that your credit card was cloned through malware installed in your smartphone using a relay NFC attack. To stay protected, disable NFC when it is not in use, keep your PIN code secret, enable biometric authentication for payments when possible, and install anti-malware tools to safeguard your digital wallet and prevent unauthorized access.
6. Rx red flags as scammers exploit the consumer demand for prescriptions
The rising demand for weight-loss drugs like Ozempic and other expensive or hard-to-find health treatments has opened the door for scammers to sell counterfeit or unsafe products. With more people turning to online pharmacies and social media ads for convenience, scammers are exploiting this trend.
Falling for these scams can result in financial loss, or worse, harmful side effects from counterfeit or unregulated medications. Protect yourself by purchasing medication only from verified pharmacies, consulting healthcare professionals before buying treatments online, and steering clear of deals that seem too good to be true.
7. Fake invoices and customer service scams catch consumers off guard
Scammers are increasingly sending fake invoices or impersonating customer service representatives to steal payments or personal information. As payment platforms like PayPal, Venmo, and others grow in popularity, cybercrooks are finding more opportunities to exploit these systems with convincing schemes.
Falling victim to these scams can result in financial loss and compromised personal information. If you receive an invoice or payment request, always verify it through the official platform or website. Avoid calling phone numbers or clicking links provided in unsolicited messages, and never act on unexpected payment requests without confirming that they’re legitimate.
8. Live deepfake videos bring new risks to digital interactions
Not only can scammers use AI-powered tools to create deepfake videos, but they’re also now able to impersonate people during live video calls. Tools like DeepFakeLive.ai make this technology accessible, enabling bad actors to mimic facial expressions and voices with great accuracy, increasing the believability of these scams.
The impact can be significant – for example, imagine receiving a video call from someone who appears to be your boss urgently requesting money or sensitive information. You can protect yourself by verifying unexpected requests through a separate trusted channel, such as a phone call or text, and avoid sharing personal or financial details over video calls without validation.
9. Supply chain attacks on apps and software grow more sophisticated
Scammers are increasingly embedding malicious code into popular software or app updates, a tactic that allows them to infect millions of devices in one fell swoop. The increased reliance on third-party code and AI-assisted development tools is making these types of attacks more frequent and harder to detect, which poses significant risks to both consumers and businesses.
The consequences of this type of attack can be severe; updating a favorite app might unknowingly install malware that compromises your personal data or device security. To stay safe, ensure your operating system and security software are always up to date, and only download apps or updates from reputable app stores and verified developers.
10. AI-assisted malware makes cyber threats smarter than ever
Cybercrooks are using AI-powered tools to create smarter, more adaptive malware that can increase its effectiveness. For example, advanced tools like OCR (Optical Character Recognition) technology – which scans images or documents and turns the text in them into editable and searchable digital text – can now extract sensitive information, such as cryptocurrency wallet keys, directly from screenshots or documents. As AI capabilities grow, so does the sophistication of these threats, making them more effective and dangerous.
The impact can be significant: if AI-driven malware slips past outdated antivirus programs, your personal and financial data can be exposed. To protect yourself, use advanced security solutions that incorporate AI for real-time threat detection, avoid storing sensitive information digitally, and ensure critical data is backed up offline for added safety.
