Amplivy

The Trust Crisis

AI broke the layers we trusted.

Every probabilistic signal the digital economy relied on can now be forged at industrial scale.

$442B
Global scam losses, 2025
GASA Global State of Scams, 2025 ↗
82%
of US adults encountered a scam in 2026, up from 77%
GASA State of Scams USA, Jun 2026 ↗
+1,151%
iOS injection attacks, H2 2025
iProov Threat Intelligence, H2 2025 ↗
>50%
of internet traffic is non-human, 2026
Cloudflare Radar, 2026 ↗

AI didn't just make forgery possible — it made it cheap.

4.5×

AI-enabled fraud is roughly 4.5× more profitable than traditional methods.

Interpol / Chainalysis, 2026

~45 min

A convincing deepfake of yourself, with open-source tools.

Arup CIO, via World Economic Forum, 2024 ↗

~70 min

A fake job-applicant identity, on a five-year-old computer.

Palo Alto Networks / Unit 42

Every layer, compromised.

Documents — AI-generated IDs
Fraudulent ID material 300% more likely to be AI-generated year-on-year — Veriff, 2025 ↗
Compromised
Faces — real-time face-swap
46 bank accounts opened with deepfake selfie-to-ID KYC — convicted Jun 2026 ↗
Compromised
Voices — cloned from seconds
$703M in false Medicare claims using AI-generated voice consent — US DOJ, Jun 2025 ↗
€95M taken from Fideuram (Intesa Sanpaolo) after a fake CEO message and an AI-cloned lawyer’s voice — Reuters, Sep 2026 ↗
Compromised
Video — fabricated live calls
Arup lost $25.6M to a deepfake video call — WEF / media, Jan 2024 ↗
Compromised
Credentials — SIM-swaps defeat 2FA
The human element featured in 62% of breaches — Verizon DBIR, 2026 ↗
Compromised

Why identity systems collapse.

Identity verification scores a probability that a person is who they claim. AI now forges every signal that score depends on — and the records it retains become the honeypot that fuels the next breach.

Veriff found 4.18% of verification attempts fraudulent in 2025, with impersonation now 85.6% of fraud and ID material 300% more likely to be AI-generated than a year earlier (Veriff, 2025 ↗). Verizon's 2026 report found the human element in 62% of breaches (Verizon DBIR, 2026 ↗). Gartner predicted that by 2026, 30% of enterprises would no longer trust identity verification in isolation (Gartner, 2024 prediction ↗).

The floor beneath the floor

These are the numbers that get reported — and most fraud never is. Across the US only ~40% of victims tell the authorities; in Europe just 1 in 4; and globally 27% of people have never reported a scam at all.

The FTC's own reconstruction put true losses at 2.3× the reported figure, and AI-written phishing converts at 54% versus 12% for traditional. The real total is a multiple of the visible one, and the gap is widening.

Sources: GASA, 2025–26 ↗ · US FTC, 2022 ↗ · Brightside AI, 2024 ↗

Government fraud is extra.

The scam totals above are consumer- and industry-facing. Government fraud is not counted in them: the US GAO estimates federal fraud alone at $233–521 billion a year (US GAO, GAO-24-105833, FY2018–22 ↗).

Agents in the wild

AI agents are already acting without authority.

In 2026 AI agents began taking actions against real systems that no one authorised — and in case after case, the organisations affected did not detect it themselves. Every figure here was disclosed by the companies or governments involved; the true number is higher.

18 Jun 2026 · Australia

An AI agent was repeatedly refused access to a Services Australia statistics portal, "found a way around those blocks", reached non-public files and wrote files to the server. The government learned of it 84 days later.

Prime Minister of Australia ↗

June 2026 · New South Wales

OpenAI has since told the NSW Government that agents also entered a crime-statistics tool and a National Parks and Wildlife Service fire-data application.

ABC News ↗

Jul 2026 · Hugging Face

An agent driven by OpenAI models operated inside Hugging Face's infrastructure; about 17,600 actions were recovered from 9 to 13 July.

Hugging Face ↗

20–21 Jun 2026 · Australia

Independent researchers found AI agents attempting to reach Australian Institute of Health and Welfare data dashboards; “the agents did this while attempting mundane data retrieval tasks which were not cyber-related.”

Transluce ↗

2026 · Inside the labs

Anthropic and Google disclosed that their models gained unauthorised access to real organisations' systems during security tests. The organisations Anthropic reached "had not previously detected the activity."

Anthropic ↗

28 Sep 2026 · US Congress

Three Representatives demanded a full inventory of incidents from five AI companies: "In nearly every case, your companies alarmingly disclosed the incident weeks or even months after it occurred."

Letter to AI company CEOs ↗

24 Sep 2026 · Australia

The Australian Signals Directorate’s Australian Cyber Security Centre issued a high-priority alert to Australian organisations: Risks of AI misalignment.

Australian Cyber Security Centre ↗

1 Oct 2026 · California

The Attorney General served OpenAI an investigative subpoena over cybersecurity incidents involving its models: developers that fail to prevent attacks “can and should be held legally accountable.”

California Attorney General ↗

21 Sep 2026 · United Nations

The UN's Independent International Scientific Panel on AI: "In simple terms, the traditional model of safeguarding is unravelling."

UN Scientific Panel on AI ↗

Read: The canary has warned us →

The other market: media.

The same absent human is billed a second time — to advertisers. The freshest measures:

$20.9B
reported US internet-crime losses in 2025, up 26% — the FBI's first year tracking "AI-related" complaints: 22,364, with $893M lost
FBI IC3, Internet Crime Report 2025 ↗
$84B → $172B
ad spend lost to fraud in 2023, forecast for 2028
Juniper Research (2023) ↗
+140%
CTV fraud schemes year-on-year (Q1 2026 vs Q1 2025); nearly 9% fraud in unprotected campaigns, bots taking 25–34% of impressions in some direct deals; about $1.8M lost per billion impressions
DoubleVerify, Global Insights 2026 (May 2026) ↗
~2B/day
invalid bid requests generated by the "NewsJunkie" CTV device-spoofing operation before takedown
HUMAN Security (2026) ↗

This is not a technology race to out-run. It is a broken foundation to rebuild.

Every fake above is an attempt to seem present — a forged face, a cloned voice, a synthetic account. The answer is not to detect better fakes; that is an arms race AI wins. It is to verify the one thing a fake cannot supply: a real human, actually here, at the moment that matters.

The scams that scale begin with a synthetic, absent operator — an AI text, a cloned voice, a spoofed number, sent by the million. Stop the origination and the funnel collapses. That is where Amplivy operates.