Important Takeaway: AI tools allow scammers to write emails without typos or grammar mistakes. Always look at what the message asks you to do, not just how it looks.
How AI Changes Cyber Scams
The goals of cyber criminals have not changed. They still want to steal your passwords, money and personal details. However, Artificial Intelligence (AI) gives them new tools to make scams harder to spot:
1. Phishing Without Typos
In the past, poor spelling and bad grammar made scams easy to catch. AI changes that:
- AI tools write clear, polite emails with zero typos.
- Scammers can copy the exact tone and style of university departments.
- Scammers can create personalized messages for specific student groups or staff roles.
2. Deepfakes and Fake Voices
Scammers only need a short audio clip from a video or webinar to copy someone's voice:
- Fake Phone Calls (Vishing): Scammers use cloned voices to pretend to be a manager, dean or family member needing urgent money. Learn more in our guide on Voice Impersonation (Vishing) Attacks.
- Fake Online Profiles: Scammers make realistic profile pictures for fake accounts on job and networking sites.
3. Automated Scanning
AI bots can search the web and social media fast. They gather names, titles and campus details to build convincing attacks in seconds.
Watch: AI Threats and Deepfakes in Action
Watch this Canadian news report to see how generative AI and synthetic media are made:
Safe AI Use: Protecting VIU Data and Privacy
When using public AI tools (like ChatGPT, Copilot or Claude), follow guidance from the Canadian Centre for Cyber Security and university policy:
1. Never Enter Private or University Data
Under British Columbia's privacy laws (FIPPA), you must protect personal data:
- Do not enter personal info: Never type student names, grades, ID numbers or employee details into AI chatbots.
- Protect VIU files: Do not upload unpublished research, financial records, contracts or passwords.
- Public AI tools keep data: What you type into public AI tools can be saved on outside servers and read by others.
- Learn about VIU privacy rules: Review The Protection of Privacy at VIU.
2. Always Check AI Answers
AI tools guess the next word based on patterns. They do not know facts. AI outputs often include:
- Made-up sources, fake articles and incorrect policy rules.
- Broken or insecure computer code.
- Always check AI answers against official VIU sources before using them.
How to Protect Yourself and Campus
Follow these three habits to stay safe:
- Verify Unexpected Requests: If a caller or message asks for money, gift cards or passwords, stop and check. Follow our guide on Recognizing and Resisting Social Engineering for step-by-step verification rules.
- Deny Unplanned Login Prompts: Scammers test stolen passwords at all hours. If you get a 2-Step Verification alert on your phone that you did not start, tap Deny right away.
- Use Phishing-Resistant Logins: Use the Microsoft Authenticator app or a FIDO2 security key for the safest multi-factor protection.
How to Report Suspicious Activity at VIU
Reporting scams helps IT Services protect the entire campus:
In Microsoft Outlook (Desktop, Web and Mobile)
- Select the suspicious message in your inbox.
- Click Report (or Report Message) on the toolbar.
- Select Phishing and click Report to send the email directly to our security team.
Suspicious Phone Calls or Voice Messages
- Hang up right away.
- Do not call back using the number the caller gave you.
- Alert the IT Service Desk at 250.740.6300, or chat with Hopper (in the bottom-right corner of your screen) to submit a ticket.
What to Do If You Shared Your Password:
If you entered your password on a fake page, change it right away following the
VIU Password Reset Guide. Then email
infosec@viu.ca so we can secure your account.
Official Resources and Further Reading