CipherWatch All articles
Scam & Phishing Awareness

Swiped, Scammed, and Streamed: How Fraudsters Are Targeting Gen Z in 2024

CipherWatch

The stereotype persists: older adults fall for scams; younger people are too tech-savvy to be fooled. The Federal Trade Commission's data tells a very different story. In recent years, Americans aged 18 to 34 have consistently reported losing money to fraud at higher rates than adults over 60 — even if the dollar amounts per incident tend to be lower. Gen Z, the cohort that grew up with smartphones and social media as native infrastructure, is not immune to manipulation. If anything, the platforms they inhabit most naturally have become the preferred hunting grounds for a new generation of fraudsters.

What has changed in 2024 is the sophistication of the tools available to bad actors. Artificial intelligence has dramatically lowered the barrier to creating convincing fake personas, deepfake video endorsements, and hyper-personalized phishing messages. Understanding how these tactics work is the first line of defense.

Why Digital Natives Are Not Automatically Safe

Familiarity with technology does not confer immunity to psychological manipulation. In fact, security researchers argue it can create a dangerous overconfidence. Young adults who navigate TikTok algorithms, understand meme culture, and can spot a low-effort spam email may still be vulnerable to attacks that exploit emotional states — loneliness, financial anxiety, the fear of missing out on a once-in-a-generation investment opportunity.

"Social engineering is not a technology problem, it's a human psychology problem," said a cybersecurity awareness trainer based in Chicago who works with college-age audiences. "The people who get caught are not stupid. They're people whose guard was down at the right moment, in the right context, with the right emotional hook."

Fraudsters study their audience. They know where Gen Z spends time, what language resonates, and which aspirations — financial independence, romantic connection, creative recognition — are worth exploiting.

The AI Influencer Con: When the Spokesperson Doesn't Exist

Perhaps the most distinctly 2024 threat is the emergence of AI-generated influencer accounts promoting fraudulent financial products. Using widely available generative AI tools, scammers can now produce photorealistic images and even short video clips of fictional spokespeople who appear to endorse cryptocurrency platforms, trading apps, or investment schemes.

These fake influencers are built with carefully crafted backstories, consistent visual aesthetics, and engagement patterns designed to mimic legitimate creators. Some are inserted into paid advertising on platforms including Instagram, TikTok, and YouTube. Others are seeded into comment sections and Discord servers, gradually building apparent credibility before directing followers toward fraudulent platforms.

The FBI's Internet Crime Complaint Center (IC3) flagged investment fraud — including crypto-related schemes — as the highest-loss category in its 2023 annual report, with losses exceeding $4.5 billion across all age groups. A significant and growing portion of those schemes involve synthetic media components.

Red flags to watch for:

Romance Scams: The Long Game on Dating Apps

Romance scams are not new, but their execution has become more patient and more psychologically refined. Known in fraud circles as "pig butchering" — a term derived from the concept of fattening a target before slaughter — these schemes involve weeks or even months of relationship-building before any financial request is made.

A typical scenario unfolds across a dating app like Hinge or Bumble, or sometimes through an apparent wrong-number text. The scammer, often operating from overseas fraud operations, invests genuine time in conversation — learning the target's interests, mirroring their communication style, and building emotional intimacy. Once trust is established, the topic of a lucrative investment opportunity arises organically, often framed as something the scammer has personally benefited from.

The target is guided to a fraudulent trading platform that shows realistic (but fabricated) account growth. Initial small withdrawals may even be permitted to build confidence. Eventually, the target is encouraged to invest more — sometimes their entire savings — before the platform vanishes entirely.

The Cybercrime Support Network estimates that romance scam victims lose an average of $10,000, with many cases involving losses in the six figures. Critically, the emotional betrayal compounds the financial damage, leaving many victims reluctant to report.

Warning signs in an online relationship:

TikTok Trends as Social Engineering Vectors

Beyond direct financial fraud, social engineering on short-form video platforms takes subtler forms. Trending challenges and viral formats are frequently weaponized to extract personal information. A challenge asking users to share their first car, their childhood street, and their mother's maiden name — framed as a nostalgic personality quiz — is, functionally, a collection of common security question answers.

Similarly, AI voice cloning has enabled a disturbing variation of the grandparent scam, now targeting younger victims. A caller using a cloned voice of a friend or family member — sourced from publicly available social media audio — claims to be in an emergency and requests immediate financial help. The emotional shock of hearing a familiar voice in distress is deliberately designed to bypass rational evaluation.

Protecting Yourself: A Practical Framework

Awareness is the foundation, but concrete habits are what actually prevent losses.

Verify independently before acting. If a friend contacts you with an urgent request, hang up and call them back on a number you already have saved. If an influencer is promoting an investment, search their name alongside the word "scam" and check regulatory databases.

Slow down when pressure is applied. Urgency is a manipulation tool. Legitimate opportunities do not expire in 24 hours. Any scenario designed to prevent you from thinking carefully deserves maximum skepticism.

Limit your public audio and video footprint. Voice cloning requires source material. Restricting who can access your social media content reduces the data available to potential attackers.

Use platform reporting tools. TikTok, Instagram, and other platforms have fraud reporting mechanisms. Using them not only protects you but helps disrupt operations targeting others.

Report losses immediately. The FTC accepts fraud reports at reportfraud.ftc.gov. The IC3 at ic3.gov handles cybercrime specifically. Reporting creates the data trails that enable law enforcement to identify and dismantle fraud operations.

The Bigger Picture

Gen Z did not invent online fraud, and they will not be the last generation targeted by it. But the tools available to criminals in 2024 — synthetic media, AI-personalized messaging, and global fraud-as-a-service operations — represent a meaningful escalation. Staying ahead of those tools requires not just technical literacy but emotional literacy: the ability to recognize when your own psychology is being deliberately manipulated.

Knowledge is the cipher. Use it.

All Articles

Related Articles

One Key to Rule Them All: The Hidden Dangers Lurking Inside Your Password Manager