AI Security: The New Frontier in Cybersecurity

Understanding AI security in a connected world

Artificial intelligence is becoming part of everyday life. From helping draft emails and summarize documents to planning trips and answering questions, AI-powered tools can save time and boost productivity. But as these tools become more powerful and connected, it's important to understand the risks that come with sharing personal and financial information. According to the National Institute of Standards and Technology (NIST), AI can create new privacy and cybersecurity challenges, including increased risks related to data sharing, tracking, and unauthorized access to information.

For credit union members, the most important rule is simple: never share your online banking username, password, verification code, or other security credentials with an AI tool.

Why this matters

Many AI platforms allow users to connect accounts, upload documents, and provide personal details to receive more customized assistance. While these features can be convenient, they also raise important questions about AI security:

• What information is the AI tool collecting?
• How is that information stored?
• Will it be used to train future AI models?
• Can access be revoked later?
• What happens if the AI makes a mistake?

AI systems can produce inaccurate information, misunderstand instructions, or expose data in ways users did not anticipate. Even trusted tools require careful review before sharing sensitive information. NIST notes that AI technologies introduce new privacy risks, including data leakage and unintended disclosure of personal information.

The growing threat of AI-enhanced scams

Unfortunately, cybercriminals are using AI, too.

Artificial intelligence can now create highly convincing emails, text messages, images, videos, and even cloned voices designed to impersonate trusted individuals or organizations. The Federal Trade Commission (FTC) has warned that AI-powered impersonation scams and voice cloning technologies are making fraud attempts more believable and harder to detect.

Imagine receiving:

• A phone call that sounds exactly like a family member.
• An email that appears to come from your financial institution.
• A text message urging immediate action on your account.
• A video that appears to feature a trusted public figure.

While these communications may look authentic, scammers increasingly use AI to create convincing fakes. The best defense is to slow down, verify information independently, and avoid responding to unexpected requests for money, passwords, or personal information.

Never share security credentials

One of the biggest mistakes consumers can make is providing account credentials to a third-party tool.

Your online banking username, password, multifactor authentication codes, and security questions are intended only for secure access through your financial institution's authorized channels.

The Cybersecurity and Infrastructure Security Agency (CISA) warns that authentication codes and login credentials remain targets for phishing and social engineering attacks. Sharing them with unauthorized parties can significantly increase security risks.

If an AI tool asks for sensitive login information, stop and carefully evaluate whether that access is truly necessary.

How to use AI safely

The good news is that you can enjoy the benefits of AI while protecting your financial well-being.

Follow these best practices:

✅ Never provide online banking usernames or passwords to an AI tool.

✅ Never share one-time verification codes or multifactor authentication codes.

✅ Review privacy policies before connecting accounts or uploading documents.

✅ Limit the personal information you provide whenever possible.

✅ Verify unexpected requests through trusted channels.

✅ Monitor your accounts regularly for suspicious activity.

✅ Access your University Credit Union accounts directly through UCU's secure digital banking channels.

A balanced approach

AI is here to stay, and it offers exciting possibilities for consumers and businesses alike. The key is using these tools thoughtfully and understanding where convenience should stop and AI security should begin.

Just as you wouldn't give a stranger your debit card PIN, you shouldn't provide banking credentials to an AI platform. A few moments of caution can help protect your accounts, personal information, and financial future.

At University Credit Union, we're committed to helping members navigate emerging technologies safely and confidently while protecting what matters most.

More resources

• Staying Safe in the Age of AI | University Credit Union Blog
• FTC Consumer Scam Resources
• NIST Cybersecurity, Privacy & AI Resources: https://www.nist.gov/itl/applied-cybersecurity/cybersecurity-privacy-and-ai