Consider This from NPR - AI is transforming crime, too

Episode Date: November 26, 2025

By the midpoint of 2025, the U.S. was on track to set a new yearly record in the number of reported data breaches.That’s according to data compiled by the Identity Theft Resource Center.One reason is the proliferation of artificial intelligence, which has made the work of criminal hackers easier, cheaper and scalable.What does that mean for the rest of us?Cooper Katz McKim dove deep into the world of AI-supercharged crime for NPR’s daily economics podcast The Indicator, and introduces us to what he’s found.Listen to the Indicator’s Vice WeekFighting AI with AIWhat’s supercharging data breaches? When cartels start to diversifyHow AI might mess with financial marketsScam compounds, sewing patterns and stolen dimesFor sponsor-free episodes of Consider This, sign up for Consider This+ via Apple Podcasts or at plus.npr.org. Email us at [e-mail] episode was produced by Connor Donevan. It was edited by Kate Concannon and Patrick Jarenwattananon. It features additional reporting by Darien Woods. Our executive producer is Sami Yenigun.Learn more about sponsor message choices: podcastchoices.com/adchoicesNPR Privacy Policy

Okay, the story we're about to hear touches on the criminal dark web, cutting edge technology and the global economy. But it begins somewhere more personal. Like anything, you know, it starts with my own anxiety. That is Cooper Katz McKim, a producer for the indicator from Planet Money and PR's daily economics podcast. There was this week-long period where I was opening up the news every day and there would just be some other data breach that was at the bottom. and it freaked me out. It freaked him out and he wanted to know, is this my imagination or is this problem getting worse?

And when he dug into it, he found... The U.S. is on track for a record year in data breaches, which a quick spin-through NPR's newscast confirms. Cyber hackers have accessed the personal data of most of the 1.4 million customers of Alliance life. The Congressional Budget Office says it's been hit by a cyber attack, partially disclosing government data to foreign. British Department Store Herodz.

Cryptocurrency giant, Coinbase says... The app T recently... I tried making a list at one point, and it just got unwieldy. The hacked images were posted to the fringe right-wing message board for Chan. I mean, it's not just big businesses, though. The city of St. Paul in Minnesota is still recovering from a ransomware attack that took place... It's governments. It's schools. It's hospitals. It's government entities. So, Cooper started looking into what is supercharging these hackers. And it turns out, one big answer?

is artificial intelligence. They're faster, they're more opaque, and they're more autonomous than ever. Consider this. AI has made cybercriminals work easier, cheaper, and scalable. What does that mean from the rest of us? From NPR, I'm Elsa Chang.

On Wait, Wait, Don't Tell Me, famous actors remember their days of obscurity, like when Pedro Pascal remembered the stress of being a waiter. The logistical labor of meeting everyone's needs in the right manner. You know, Act 1, the water. Act through the drink. Listen to Wait Wait in the NPR app or wherever you get your podcast.

It's Consider This from NPR. Cooper Katz McKim's question was, Why does it seem like so many data breaches are happening? It opened a door into a whole world of modern vice. And just like the rest of the economy, it turns out that AI is really transforming the business of crime. Cooper and his colleagues at the Indicator podcast from NPR's Planet Money looked into this. And he's here with us now to talk all about it. Hey, Cooper.

Hi, also. Hey. Okay, so we mentioned that AI is kind of helping supercharge data breaches, right? Can you just explain how that's happening? Because it makes just about every aspect of data breaches easier. So let's say you're the type of criminal that wants a ton of passwords. You succeed and you find yourself with a million passwords. You've effectively just gotten a pile of keys.

So generally, a criminal is very patient. They're willing to try every key in every metaphorical house in the neighborhood until it leads to something useful, say a bank account. Well, AI can automate that process and test which keys are useful way, way, way faster in hours rather than days. So it just makes them more efficient with less technical skill and there's just

suddenly a lot more access. Okay, so AI is enabling these criminals to better data scrape, data crunch. That makes sense. But I have to say, when I first heard that AI crime is on the rise,

I was imagining something a little sexier, like with a little more intrigue, super sophisticated data collection just doesn't sound all that criminally sexy to me. Yeah. I mean, it is definitely used for more sophisticated crimes.

You know, something like spear fishing, for example. Wait, like you're standing in a boat with a long spear ready to harpoon a fish? What? Not quite. It's like the metaphorical version of this. It's this targeted, personalized kind of cyber attack that goes after one individual. I asked Stuart Madnick about this. He's director of cybersecurity at MIT.

That takes time and effort. guess what? AI systems can do that splendidly, much faster and in many case, higher quality than humans could. Yeah, so imagine you're a criminal and you're trying to convince people you're this trusted person. Maybe it's their boss or their family member. You just need a lot of actual information to convince them of that. Maybe it's like the cadence of when they message you or how they talk. AI can help get all that information and make you more convincing as this spearfisher. So that's happening. And meanwhile, the criminal economic infrastructure is also advancing so there's ready-made fishing kits that people can buy online, too.

Once I built a tool to do that, it's kind of easy to say for $10,000 or 50% of the gain. Here, I will give you this tool. So there's a multiplying effect going on on the bad guy world. There's this thing called SaaS, Software as a Service. It's the same kind of stick, but this time for crime where there's literally subducing. prescription tiers for some of these services. Okay, so let's say I'm a criminal and I want to go shopping. What are my options?

Like, what is out there for me to buy? You have a lot more options than ever. You're in luck. There's ransomware as a service. You can literally rent banking malware kits, spam sending services. So one's ability to get into this world, the bar is very low. Like, I don't know if you've heard of DDoS attacks, but it's like this complicated cyber attack intended to bring down a site. People with no coding experience can now rent a kit for that and run them alone.

So accessibility is just skyrocketed. Well, then how are companies trying to protect themselves from all of this? So we talked to a guy named Ben Coleman who's been looking at scams related specifically to voice cloning technology. He's the CEO of this startup called Reality Defender. He was telling me big companies like banks are paying them to protect themselves against scams and involve deepfakes because that's another use of AI to further crime. So, for example, fraudsters might call bank using a deep fake of someone's voice and trying to break through the voice as my password protection. Wait, so how do you stop that? It's kind of funny, but what I learned was that AI itself is being used to fight AI.

So Reality Defender has its own detection software utilizing artificial intelligence to identify these fake voices. So deepfakes are just so easy to do nowadays. Coleman doesn't even think banks should be using voice verification. It's too easy. Unfortunately, many institutions, not only banks, but also government organizations, insurance companies, media organizations, are still using what are called voice biometrics, which is a show of saying your voice is your password. Yeah, why are banks still doing this? Good question. We spoke with Mark KWapazeski at PNC Bank, and he basically said it's one piece of the puzzle. It's not the whole thing.

I think if you're only using the one dimension, there's risk in everything. There'd be risk in accepting a driver's license, for example, walking into your branch, which is why you're starting to see a lot more technologies that are looking for multi-factor authentication or even just those other signals. Other signals like where you're calling from, from what device, maybe a text verification code. But he says the bigger risk isn't just that banks will be targeted, but that customers will too. Targeting customers how exactly? So this is going back a little bit to what we were talking about earlier, where a fraudster might call you pretending to be this trusted person, like someone at your bank, they can spoof that number,

pretend to be your bank, have all this information about you, and they say, hey, you've got to move your money quick. And it is almost a, it's a scam every time. The criminal calling might also pretend to be your child or grandparent. Jeez. Being in this part of the business I have with my family is essentially a safe word. And we all, you know, know, if there's ever a situation where, you know, somebody's really in trouble and asking for money, it's consistent. We will ask for

the safe word. That is such a great idea. I need to come up with a safe word. So, I mean, just listening to Utah Cooper, it just seems like the range of potential vulnerabilities is huge. In this world where, you know, AI is cheap and totally accessible, it just feels like being a person in 2025 now requires a really high level of vigilance. Like, I'm stressed out just having this conversation with you. Yeah, I mean, that's the theme that came through in this reporting. AI has supercharged crime. It's made it easier. It's more accessible. It's more scalable. Just all barriers to entry have been torn down. And there's only so much an individual can do to protect themselves because, I mean, governments, businesses, academics, they need

to work together. We heard from one expert to assemble an actual solution. This piecemeal approach clearly isn't working. Stuart Madnick, who we heard earlier, expects things to get worse. It doesn't mean we're not going to try to hold back the tide, but the tide is rising against us. The tide is rising against us. That sounds so ominous. Yeah, I know. And we will leave it there on that ominous note. NPR's Cooper Katz McKim.

He's a producer on the Indicator podcast from Planet Money. Thank you so much, Cooper. Thank you for having me. Additional reporting in this episode came from Darien Woods. And there's a lot more in the Indicators series on the Evolution of Crime. Check out the links in our episode notes. This episode was produced by Connor Donovan. It was edited by Kate Cancannon and Patrick Jaron Watanenan,

with fact-checking by Sierra Juarez. Our executive producer is Sammy Yenigan. It's Consider This from NPR. I'm Elsa Chang.