In our ongoing series featuring insights from our exclusive cyber risk management partner network, Dan Thornton, Co-Founder and CEO of Goldphish, explores why the rise of increasingly sophisticated AI-powered cyber threats requires organizations to strengthen their human defenses through security awareness training and proactive risk management.

The conversation around artificial intelligence (AI) has shifted. We are no longer talking about what AI might do in the hands of bad actors; we are actively dealing with what it is doing.

For cybercriminals, generative AI has become a powerful force multiplier. According to a 2026 INTERPOL report, AI-enhanced fraud has proven to be significantly more profitable than traditional cybercrime methods. AI allows attackers to automate, personalize, and scale deception with terrifying efficiency.

As traditional technological filters struggle to keep pace with these hyper-polished attacks, the role of the insurance broker has to evolve. To protect their clients, brokers must help them understand that in an AI-driven threat landscape, technology alone isn't enough. The final and most critical defense is human.

The new mechanics of deception at scale

Historically, businesses could rely on technical indicators or obvious human errors to spot a scam. A phishing email often came with improper grammar, a strange layout, or a mismatched domain. AI has completely erased those red flags.

Today, threat actors are leveraging advanced tools to execute sophisticated attacks at scale: 

Flawless Phishing: Generative AI tools allow hackers to draft context-aware and hyper-personalized emails instantly. They mimic the exact tone, vocabulary, and formatting of legitimate vendors or internal executives, leading to open rates that are nearly double those of traditional scams. 

Next-Level Business Email Compromise (BEC): Rather than blasting generic malware, attackers use AI to analyze public data and compromise corporate identities. They map out organizational hierarchies and generate flawlessly written, highly convincing invoice and wire-transfer requests that glide right past standard security filters. 

The Rise of Deepfakes: Synthetic media is no longer science fiction. Deepfake-as-a-Service (DaaS) has made voice cloning and video manipulation accessible to criminals of all skill levels, allowing them to impersonate CEOs or trusted clients in real-time phone calls or virtual meetings. 

Since these attacks rely on social engineering and manipulating human behavior rather than exploiting software vulnerabilities, they don't look like cyberattacks to a standard firewall. They look like normal business transactions.

Why security awareness training is the only effective countermeasure

When technology can no longer reliably filter out the threat, the responsibility falls on the person sitting behind the keyboard. This is why Security Awareness Training (SAT) is more than a “nice-to-have” check-the-box exercise. It is an operational necessity.

Modern SAT doesn’t teach employees to look for typos. It trains them to recognize the psychological triggers that AI-driven attacks rely on, such as artificial urgency, unusual out-of-band requests, and emotional manipulation.

By running ongoing realistic phishing simulations, businesses build a culture of reporting and flagging suspicious activities. Employees learn to pause and verify authenticity through secondary channels, and report anomalies. It turns a company’s workforce from the company’s most targeted vulnerability into its most active defense.

The proactive policy: turning insurance into an active partnership

This is where brokers have a massive opportunity to deliver additional value. 

This shifts the entire dynamic of a cyber policy from a passive emergency response to an active corporate partnership. For the client, it means they get enterprise-grade risk mitigation tools at zero additional cost, allowing them to immediately improve their security posture and fulfill tightening regulatory expectations. For the broker, it provides a powerful touchpoint to engage clients, which demonstrates active investment in protecting their day-to-day operations.

The bottom line

AI has democratized cybercrime, allowing low-level criminal actors to punch far above their weight and enabling advanced syndicates to scale their global operations. Brokers who position themselves as true risk consultants understand that the policy is only half the equation. By educating clients on the reality of AI threats and ensuring they take full advantage of the complimentary pre-breach services built into their insurance coverage, they are also building systemic resilience.