AI Phishing in 2026: The Scams Hitting South Australian Businesses

Remember when scam emails were full of spelling mistakes and odd phrasing? Those days are over. AI tools now write fluent, personalised, convincing messages — and small businesses are squarely in the firing line because their defences are usually thinnest.

What modern phishing looks like

The perfect supplier invoice: a flawlessly written email that mirrors a real supplier's tone and format, with only the bank details changed. AI makes these cheap to produce at scale.

The boss who sounds exactly right: messages impersonating a director, written in their actual style because the AI learned from their real emails or public posts. Some now arrive as voice notes with cloned voices.

The helpful follow-up: multi-message threads where the scammer patiently builds trust over days before asking for anything. No urgency, no typos, no obvious red flags.

The two habits that stop most of it

1. Verify payment changes by phone. Any email about new bank details, however convincing, gets confirmed by calling a number you already have on file — never one from the email itself. This single habit defeats the most expensive scam category there is.

2. Turn on multi-factor authentication everywhere. Even if someone hands over a password, MFA stops the attacker logging in. It remains the highest-value security control a small business can switch on.

And the technical backstop

Good email filtering catches a large share before it reaches an inbox, and regular short awareness sessions keep your team's guard up. Neither replaces the two habits above — they work together.

Worried about your exposure? UMI can review your email security, MFA coverage and staff practices in a free consultation — and tell you plainly where the gaps are.