Show Notes
For three weeks I told you the good news: AI is cheap, powerful, and it's your edge. This is the fine print. The same price collapse that lets your shop punch above its weight lets a stranger forge your vendor's invoice and clone your voice — for pocket change. The email that "looks off" doesn't look off anymore. The voice on the phone that sounds like you... might not be you. But the defense got just as cheap as the attack. This week: how the scam got a copywriter, why three seconds of your voice is now a weapon, the tool that catches the fakes your inbox lets through, and the ten-minute, zero-dollar rule that holds even when the email and the voice are both fake. In this episode:
The scam got a copywriter — The FBI's latest crime report logged $20B+ in fraud last year, including a brand-new AI-fraud category worth ~$893M. Business email compromise alone: over $3B, averaging ~$123K per hit. Roughly 40% of those scam emails are already AI-written — no typos, right names, perfect tone. The "look for bad grammar" defense is dead. Three seconds of audio — A convincing clone of your voice now takes about three seconds of audio — your voicemail greeting is enough. ~62% of companies were hit with a deepfake social-engineering attempt last year, average loss north of $500K. It's easier to run against a 28-person shop than a bank. Everybody's a target; almost nobody has a plan — ~80% of companies have no written rule for a suspicious payment request. Small businesses are the favorite target and the least defended. The fix isn't sharper instincts (AI beat those) — it's a process dumb enough to survive a panicked Tuesday. Tool Spotlight — Guardz — An AI security layer that sits on your Google Workspace or Microsoft 365 and catches the clean, AI-written invoice scams your built-in spam filter waves through, plus dark-web password monitoring and quiet team phishing tests. Free Community tier; Pro ~$15/user/mo; 14-day trial, no card. Honest catch: it's MSP-first, and no email tool stops a phone call — the inbox is software's job, the phone is yours. The Operator's Move — "Verify before you pay," said out loud — Ten minutes, zero dollars. One rule: any request to move money or change an account gets confirmed by calling the person on a number you already had — never the number in the message. Add a money code word. Then tell your team out loud they're allowed to slow you down. It's the one defense that doesn't care how good the fake is. 🔗 Show Notes & Sources The scam got a copywriter (AI-written BEC / FBI IC3)
FBI 2025 Internet Crime Report — $20B+ fraud; 22K+ AI-related complaints, $893M+ (via KnowBe4): https://blog.knowbe4.com/fbi-report-americans-lost-20-billion-to-fraud-2025 Business email compromise statistics 2026 — $3.05B / 24,768 cases / ~$123K avg; ~40% of BEC emails AI-generated (Hoxhunt): https://hoxhunt.com/blog/business-email-compromise-statistics AI is making BEC nearly impossible to spot (ZeroHedge): https://www.zerohedge.com/markets/ai-making-business-email-compromise-nearly-impossible-spot Email security statistics 2026 — native filters miss the AI-written 7%; AI detection catches 48% more BEC (Medha Cloud): https://medhacloud.com/blog/email-security-statistics-2026 Three seconds of audio (voice cloning / deepfakes)
Deepfake statistics 2026 — ~3 sec to clone a voice; 62% of companies hit; avg loss >$500K (Keepnet): https://keepnetlabs.com/blog/deepfake-statistics-and-trends Voice cloning is the new BEC — deepfake CEO fraud (CybelAngel): https://cybelangel.com/blog/deepfake-ceo-fraud-how-voice-cloning-targets-us-executives/ Your next "urgent call from the CEO" might be synthetic (Shumaker, Loop & Kendrick): https://www.shumaker.com/insight/why-your-next-urgent-call-from-the-ceo-might-be-synthetic-and-what-to-do-about-it/
Hosted on Acast. See acast.com/privacy for more information.
More from The AI Operator
Six in ten small businesses are carrying an invoice that's a month late — up sharply from last year — and nearly four in ten say a single late payment made payroll hard. Same month, every piece of software you own grew a button to chase the money for you: QuickBooks suggests the reminders, HubSpot ranks your unpaid invoices and drafts the collection email, and Wall Street got its own ChatGPT. But the shops with zero overdue paper didn't buy a better robot. They changed one line on the invoice. This week: what the collections robots actually do, the one thing they can't, and the move that decides whether any of them is chasing something real. In this episode:
ChatGPT's ad business hit a billion dollars a year in under 200 days — and shops your size are already buying. A small-business owner who tried it paid for 140 clicks and could find 20. And on October 1, Google starts charging you for the phone calls you don't answer. Every place a customer asks "who should I call" is now billing you for the moment they ask. This week: what that costs, which ad is for which shop, and the one move that decides whether any ad pays. In this episode:
For three years AI was sold like a gym membership: one flat number, use it all you want. This week it started being sold like electricity. OpenAI's own rate card now prices a message at forty cents and a research report at two dollars — and then it shipped a brand-new model that burns two and a half times the credits and slid it into the same $20 plan. Underneath all of it, Nvidia posted a record quarter and warned its own costs are rising because of the AI boom itself. The sticker price was fiction. The meter is the truth. In this episode:
A year ago, customers referred to businesses by AI were 38% less likely to buy. This March, they converted 42% better than everyone else. The fastest-growing referral channel of 2026 has no eyes — it can't see your trucks, your billboard, or your 18 years in business. It reads your data. This week: what the machines are telling people about your business, and how to make sure the answer is you. In this episode:
The first fully autonomous AI cyberattack didn't come from a hacker in a hoodie. It came from one of the most careful AI companies on earth — during a safety test, on its own equipment. This week: what it actually means for the operator being sold "AI agents that connect to everything," why nobody's coming to vet your AI for you, and the 20-minute, pen-and-paper move that keeps the robot you hire from holding keys to doors it never needed. In this episode: