Q&A: The Future of Cybercrime

Developments in artificial intelligence (AI) are changing the way cybercriminals operate—and the ways in which companies and governments respond to evolving threats. At the same time, other technologies once limited to the world of science fiction are opening the door to a new generation of cyberattacks.

As cyberscams become more sophisticated, what can individuals do to avoid becoming victims of fraud? We brought these questions to Robert Tripp, special agent in charge of the Federal Bureau of Investigation's San Francisco field office, and Jeff Tricoli, Schwab's head of technology risk management.

Robert: AI is really empowering cybercriminals to attack us as individuals. They develop rapport and trust with their victims, manipulating them into giving up confidential or personal information. Many fraudsters don't speak English as a first language, but with AI, they can come across as completely fluent and can pull off fraud at scale.

Jeff: It's now as simple as asking an AI chatbot to create an email or a text message with a certain tone, like that of a customer service representative asking you to reset a password. It's becoming increasingly difficult for folks to distinguish between an authentic and a fraudulent message.

Robert: The good news is that while AI is an effective offensive weapon, it's also enabling equally effective defensive weapons. The private sector has a fairly substantial advantage over cybercriminals and can develop its own tools to specifically address these abuses. In fact, an AI-enabled defensive tool can detect anomalies far better than most humans can.

Jeff: Businesses are building AI technology into many of the tools they use to identify patterns that might indicate someone has stolen your password, such as unusual login times or locations. At Schwab, we also have a robust cybersecurity intel team constantly monitoring the dark web and elsewhere for emerging threats and trends—and developing strategies to counteract them.

Jeff: Oftentimes these messages are designed to elicit fear and urgency—which in the moment can cloud our judgment. So . . . take a deep breath. If a message is purportedly from your bank or credit card provider, reach out directly to the number on the back of your credit or debit card to confirm what's going on. Or go to the bank and talk to someone in person.

On the prevention front, you can register a security freeze with all three credit bureaus—Equifax, Experian, and TransUnion—so no one can open a line of credit in your name. It's a good defense, but you'll want to evaluate your needs before taking such action—especially if you tend to open lines of credit regularly.

Robert: Be diligent about protecting your identifying information, such as your Social Security number. Be cautious about putting your photo or voice on social media accounts. And if you receive an email or text that seems even slightly odd, do not click on any links and be wary of even responding. Once you start a conversation with a potential fraudster, it's amazing what they can elicit from you.

Robert: Quantum computing, which is based on the principles of quantum physics, is a big one; it's much faster, nimbler, and more powerful than classical computing. While classical computers would take years to break the encryption protecting much of our personal data, quantum computers could theoretically do it in hours. That's truly concerning.

Jeff: Based on what researchers are saying, the ability to crack encrypted data with quantum computing might happen within 10 to 15 years. But part of what some bad actors are doing now is scooping up as much encrypted information as possible. They can't crack the encryption codes today, but they can store captured data until the quantum technology becomes available to access it.

Robert: When I talk about quantum computing, I always emphasize that the threat is currently only theoretical. That said, large organizations and nation-states are aware of the danger of quantum computing and are developing ways to defend against its misuse. For individuals, this technology is so nascent that there are many more immediate concerns we should all guard against.

Jeff: This has always been a cat-and-mouse game. The bottom line is that there are cybersecurity professionals at Schwab and elsewhere who are keeping abreast of quantum computing and other emerging threats and crafting appropriate countermeasures. You'll never fully stamp out digital attacks—but you can stay a step ahead.