‘We detected unusual activity’: the scam that uses AI to exploit your holiday photos

by | Aug 19, 2026 | Financial

‘We detected unusual activity’: the scam that uses AI to exploit your holiday photos

Researchers have identified a scam technique in which artificial intelligence is employed to determine the geographic location where holiday photographs were taken, information subsequently used to strengthen the credibility of fraudulent messages targeting travelers.

The scheme operates by first encouraging social media users to share vacation images. Scammers then analyze these photos using freely available AI models to identify the location, often with high accuracy. Armed with this knowledge, the criminals send text messages or emails claiming unusual account activity occurred at the exact destination where the victim was traveling. This specificity makes the fraudulent communications appear authentic, increasing the likelihood that recipients will click malicious links or provide sensitive financial information.

A cybersecurity firm conducted a study analyzing over 21,000 travel images using two AI models. One system accurately identified image locations 91 percent of the time, while the other achieved 87 percent accuracy. The AI demonstrated particular effectiveness when images contained recognizable landmarks, distinctive architecture, signage, street markings, or recognizable businesses. Even generic scenes such as flowers or river views were successfully placed in specific locations. While images taken in less distinctive settings like beaches or hotel rooms proved more difficult to pinpoint, the AI could typically still identify the country where photos originated—sufficient information for scammers’ purposes.

Security experts advise users to adopt several protective measures. Delaying the posting of vacation photographs until after returning home can reduce exposure. Adjusting privacy settings to restrict visibility to known contacts provides additional protection. Users should also exercise caution regarding urgent language in unsolicited communications, as scammers deliberately create time pressure to discourage careful consideration. Rather than clicking links in text or email messages, individuals should contact their financial institutions directly using contact information from official sources such as bank websites or cards.

According to industry observers, the combination of AI-derived location data with social engineering tactics significantly enhances the persuasiveness of fraud attempts, underscoring the importance of heightened vigilance when receiving unexpected communications referencing personal travel information.

Article Attribution | Read More at Article Source

Article summary produced by Claude AI