LLMs make it cheap for attackers to monitor a compromised account (e.g., email) for months. Instead of quickly selling credentials, they can now act as "persistent threats" against individuals, building a detailed profile and striking at the moment of maximum financial opportunity, like a house sale.

The market for cybercrime tools mirrors the legitimate SaaS industry. Criminals can purchase subscriptions to deepfake services, uncensored language models, and phishing kits, complete with pricing tiers and customer support, making advanced fraud accessible for a low monthly cost.

LLMs automate the labor-intensive parts of complex scams, like creating fake websites, conducting personalized communication, and monitoring victims. This dramatically reduces the cost, enabling attackers to target a much broader audience with highly tailored cons previously reserved for high-value targets.

AI has transformed scamming into a highly efficient business. Research shows cybercriminal organizations deploying AI generate 9x the volume and 4x the revenue of their peers. Leveraging generative AI for hyper-personalization, they operate like sophisticated, profitable businesses, effectively weaponizing technology for fraud.

Previously, creating unique, high-quality phishing websites was costly, limiting the scale of fraud. AI makes generating novel, legitimate-looking content nearly free. This allows bad actors to overwhelm detection systems that rely on identifying repeated fraudulent assets, increasing the volume of believable scams.

While many focus on AI for consumer apps or underwriting, its most significant immediate application has been by fraudsters. AI is driving an 18-20% annual growth in financial fraud by automating scams at an unprecedented scale, making it the most urgent AI-related challenge for the industry.

Large-scale fraud operates like a business with a supply chain of specialized services like incorporation agents, mail services, and accountants. While some tools are generic (Excel), graphing the use of shared, specialized infrastructure can quickly unravel entire fraud networks.

The significant annual growth in money lost to scams is not solely due to more scam attempts. The primary driver is the improved effectiveness and conversion rate of the scams themselves, which are better crafted and more convincing, often with the help of AI.

Large-scale fraud is not run by individual hackers but by organized 'factories' that resemble corporations. These entities have specialized departments, division of labor, performance KPIs, and even employee services like cafeterias and clinics, operating with high efficiency.