A major hurdle for AI-powered commerce is that current systems can't trust agents. E-commerce fraud detection relies on tracking user signals like IP addresses and behavior. An agent making many purchases from the same IP looks like a bot, making it impossible for merchants to distinguish legitimate customers from fraud.

AI-generated scams are now so convincing that even sophisticated users are fooled. The responsibility has shifted from teaching customers to spot fakes to brands proactively deploying technology to take down threats. Blaming the customer is irrelevant as the brand still loses trust and revenue.

Counterintuitively, charities are a major fraud target not for their funds, but as a tool. Fraudsters use them for small, initial transactions to test if a stolen credit card is active. This validation makes the card more valuable for larger fraudulent purchases, putting charities on the frontline of the fraud supply chain.

A sophisticated boat scam involved a fake professional website and multiple phone calls, with the perpetrators using a public library's computer to remain untraceable. After the wire transfer, the bank account was closed instantly. This proves that for large online purchases, in-person verification is essential.

The accessible AI software that helps brands quickly build websites, create ads, and list products is a double-edged sword. These same tools are exploited by fraudsters to accelerate the speed and scale of their nefarious activities, creating an arms race where brands must also adopt AI to defend themselves effectively.

AI tools for text, image, and video generation allow scammers to create high-quality, scalable impersonation campaigns at near-zero cost. This threat, once reserved for major global brands, now affects companies of all sizes, as the barrier to entry for criminals has vanished.

The evolution of fraud prevention is shifting from a static view of "who the customer is" to a real-time understanding of "what this customer is trying to do right now." This focus on intent allows brands to adapt dynamically, either stopping abuse or creating loyalty.

Viewing fraud as its own form of infrastructure, with its own "APIs of evil," provides transferable lessons. By understanding how fraudulent systems are built and operate, we can gain insights to better architect and secure the legitimate, critical infrastructure in our lives.

The most immediate cybersecurity threat from advanced AI isn't a sophisticated system breach. Instead, it's the ability to use AI to massively scale "old school" fraud like impersonation and phishing attacks, tricking individual people at an unprecedented rate and volume.