‘We detected unusual activity’: the scam that uses AI to exploit your holiday photos
TL;DR
Fraudsters mine holiday pictures posted on Instagram and Facebook to build convincing phishing messages. A family photo with a slice of the Douro in the background becomes a text claiming your card was compromised while you were in Porto. Because the location and timing check out, the warning feels legitimate and the victim hands over bank details. AI makes that personalisation fast and cheap, which is what turns isolated cases into a scalable scam.
Nauti's Take
The opportunity: this case is unusually concrete teaching material, because it shows exactly how personalised phishing has become. The risk: when location, timing and details all line up, the old heuristics like bad spelling or a generic greeting stop working.
Practically, anyone who posts travel photos publicly should verify bank alerts inside the official app and never through a link in the message.
Sources