Every day, the IEEE Signal Processing Society (SPS) relies on the dedication of our volunteers, members, and customers to advance our field and conduct vital society business. Unfortunately, as our global connectivity grows, so do the sophisticated threats against it.

According to a recent report from Consumer Reports, a staggering 9 in 10 Americans have been targeted by a cyber scam, and the landscape of digital fraud is changing rapidly. In this latest security update, we want to equip you with the knowledge to recognize and avoid a rising threat that directly impacts professionals in our network: AI-powered spear-phishing.

The AI Evolution: Why Scams Look More Real Than Ever

In the past, phishing attempts were often easy to spot—marked by generic "Dear Customer" greetings, obvious spelling errors, and suspicious links. Today, Artificial Intelligence has drastically lowered the barrier for cybercriminals, allowing them to carry out highly convincing, personalized attacks at a massive scale.

AI allows bad actors to quickly synthesize information pulled from data breaches, professional networking sites, and public society directories. Scammers then use this data to craft "spear-phishing" messages. These are hyper-targeted communications designed to look exactly like legitimate business, referencing the specific people and projects you interact with daily.

What This Looks Like for IEEE SPS Volunteers

Scammers know that our volunteers collaborate closely with society leadership, staff, and international peers. With AI, a cybercriminal can generate a message that doesn't just use your name, but accurately references your colleagues and current SPS initiatives.

If you are conducting society business, be on the lookout for these modern tactics:

• The "Urgent" Executive Request: An email spoofed to look like it’s from the SPS President, a Technical Committee Chair, or an IEEE staff member, urgently asking you to expedite a wire transfer or purchase gift cards for an upcoming conference like ICASSP or ICIP.
• Weaponized Collaboration: A message referencing a specific paper you recently submitted or a working group you are part of, containing a malicious link disguised as a "shared review document" or "updated event schedule."
• Deepfakes and Impersonation: AI can now mimic voices and communication styles. You might receive an SMS or even a voicemail claiming a colleague is dealing with an emergency at an international SPS event and requires immediate funds or access credentials.

How to Protect Yourself and the Society

While AI makes scammers faster and their traps more convincing, you can outsmart them by adopting a few essential security habits:

1. Apply the 9-Second Rule

Scammers rely on creating a false sense of urgency to force you into making a mistake. Cybersecurity experts recommend a low-tech defense called the "Take9" rule: pause for nine seconds before clicking a link, downloading an attachment, or responding to an urgent request. Take a breath, break the emotional reaction, and evaluate the context of the message.

2. Verify Independently (Out-of-Band)

If you receive an unusual or time-sensitive request from a colleague—especially one involving finances, passwords, or sensitive society data—do not reply directly to the message. Contact the person through a different, trusted channel. Call them at a known phone number or start a fresh email using the address listed in the official IEEE directory.

3. Remember IEEE’s Financial Protocols

IEEE and the Signal Processing Society have strict, established procedures for conducting financial business. We will never ask a volunteer to personally wire money, purchase gift cards, or bypass standard procurement processes to pay a society vendor. Any message asking you to do so is a scam, regardless of who it appears to be from.

4. Strengthen Your Access Controls

Make sure Multi-Factor Authentication (MFA) is enabled on your IEEE account and all personal accounts. While phishing emails are getting smarter, strong MFA remains one of the most effective barriers against unauthorized access to your information.

Report Suspicious Activity

We all play a part in keeping our community secure. If you encounter a suspicious message that appears to be related to IEEE SPS business, do not engage with the sender. Please report it immediately to IEEE IT security and notify your SPS staff liaison so we can investigate and alert other members.

By staying informed and vigilant, we can ensure that our society's work continues safely and successfully in the age of AI.