Chatbots Growing in Popularity on Websites and also in Phishing Scams

As Chabots have become a new popular feature companies are adding to their websites, cybercriminals have been using that tool for their own benefit. ChatGPT is a well-known chatbot and is being utilized in phishing scams.

In the latest scam, cybercriminals craft a phishing email introducing you to a new feature that ChatGPT has to help people invest in the stock market. Once the person clicks the link in the email, they are directed to a fake ChatGPT website. Cybercriminals created the website to look just like the real one so if you aren’t careful you can fall for it. Once you get directed to the website it asks you to share your contact information. They explain that an employee will call you to get your payment information over the phone if you choose to open an investment account. When the “employee” calls you, it is really a cybercriminal calling you to steal your payment information. If you tell the person on the phone the information, you are handing your sensitive payment information right to the cybercriminals.


  • Always be cautious when it comes to unexpected emails. If you weren’t expecting it, it’s probably not the best idea to open an attachment or click on a link.
  • Remember some things could seem too good to be true! Look into new features by going to your browser and then going to the website instead of clicking the website in the email. If it’s a legitimate thing, a company would have it on their website.
  • Always remember to submit secure payments by navigating to the company’s website manually. Never send payments or sensitive bank information to a bank account from an email, text, or phone call.

Learn more tips like this and train your employees with our Security Awareness Training Program.