AI-Generated Phishing Emails Are Getting Harder to Spot

For years, one of the easiest ways to spot a phishing email was poor grammar and awkward phrasing, often a sign the message was written by a non-native speaker or translated automatically. With AI writing tools now widely available, that tell is disappearing — phishing emails are increasingly well-written, grammatically correct, and convincingly personalized.

This makes it more important than ever to focus on the other warning signs: mismatched sender addresses, unexpected requests for payment or credentials, links that don't match the claimed sender's domain, and any message creating unusual urgency.

Verifying unusual requests through a separate channel — a phone call, a message on a platform you already use with that person — remains one of the most reliable defences, regardless of how convincing the email itself looks.