Skip to content 
Have you ever sat on a video call with a supplier, agreed to an urgent invoice change, and thought nothing of it? What if the person on the screen wasn’t real?
It sounds like a plot from a sci-fi thriller, but welcome to 2025. The game has fundamentally changed. As the Co-Founder and CTO of Ascendea.ai, I spend my days looking at how AI can automate growth, streamline CRM through platforms, and empower UK SMEs. But I also have to look at the dark side of the coin.
And right now, that dark side is scaling at a terrifying speed.
According to recent data from Pindrop, AI-driven fraud surged by a staggering 1,210% last year [1]. Meanwhile, here in the UK, fraud now accounts for 45% of all crime in England and Wales, with over 444,000 cases recorded in the National Fraud Database [2].
We are no longer dealing with chancers sending poorly spelled phishing emails. We are dealing with the industrialisation of fraud. And if you are running a UK business with a turnover between £50k and £5m, you are squarely in the crosshairs.
The Industrialisation of Deception
Why the sudden spike? Because AI has made fraud cheaper, faster, and infinitely scalable.
Attackers are no longer relying on human emotion or fatigue. They are deploying automated bots that work 24/7. These bots conduct reconnaissance on your business, probing your phone systems and customer service channels to figure out exactly what security questions you ask. Once they have the playbook, they strike.
Consider the retail sector. We are seeing a massive rise in automated return fraud. Bots initiate thousands of low-value refund requests—say, £20 a pop. To a busy SME owner, a £20 refund doesn’t trigger alarm bells. But when a bot processes hundreds of them an hour, the financial bleed can be devastating [1].
When Seeing is No Longer Believing
Perhaps the most chilling development is the rise of deepfake technology in real-time interactions.
Imagine your finance manager gets pulled into a last-minute video meeting. On the screen is a convincing impersonation of you, the founder. The voice is yours. The mannerisms are yours. The request is urgent: “I need you to process this payment immediately; I’ll explain later.”
Human beings only catch AI-generated audio and video about 50% of the time [1]. We are hardwired to trust our eyes and ears. Attackers know this, and they use it to bypass our natural skepticism. When urgency meets perceived authority, the money is gone before anyone realises it was a scam.
Why Your Current Defences Are Failing
If your business relies on passwords, One-Time Passwords (OTPs), or Knowledge-Based Authentication (like asking for a mother’s maiden name), you are essentially bringing a knife to a gunfight.
Nearly 60% of organisations report that fraudsters are using compromised personal data to easily bypass these legacy security checks [1]. With so much data available on the dark web, bots don’t need to guess your security answers; they already know them.
How to Protect Your Business (Without Slowing Down Growth)
I know this sounds bleak, but there is a way forward. At Ascendea, we believe in taking a forward-thinking, proactive approach. You don’t need to halt your growth to stay secure; you just need to upgrade your toolkit.
Here is how you can protect your SME today:
- Stop Relying on Human Judgement Alone: Training your team to “be vigilant” isn’t enough when the fakes are this good. You need to implement strict, unbendable processes for financial transactions. If a supplier changes their bank details, mandate a secondary verification channel—like a physical phone call to a known, trusted number.
- Automate Your Verification: Use your CRM and automation tools (like the workflows we build in Ascendea) to your advantage. Set up automated alerts for unusual refund patterns or high-value invoice changes. Let the software do the heavy lifting.
- Embrace AI as a Shield: Just as attackers use AI to scale fraud, you must use AI to detect it. Look into modern authentication solutions that analyse behavioural biometrics and deepfake detection, rather than relying on passwords.
- Audit Your Exposure: Take a hard look at where your business is vulnerable to automated attacks. Are your return policies easily exploited? Are your staff empowered to say “no” to an urgent request from the “CEO”?
The threat landscape has shifted permanently. The businesses that thrive in 2026 will be the ones that adapt their security to match their ambition.
At Ascendea, we are passionate about helping UK SMEs scale safely. If you want to learn how to build automated, secure growth systems for your business, let’s have a chat.
References:
[1] Pindrop. (2026). Inside the 2025 AI Fraud Spike. https://www.pindrop.com/ai-fraud-spike/
[2] FinTech Global. (2026). UK fraud hits record high as AI accelerates crime. https://fintech.global/2026/03/16/uk-fraud-hits-record-high-as-ai-accelerates-crime/
