Skip to main content
Commerce Security logo, "All 12 PCI DSS Requirements in Plain English," "Get it now for free," "Complete Survival Guide" and a button toclick to get it
IncidentPeople used AI as a toolSeverity M: moderate, 3/5Confirmed: a company, official or court statement

Kazakhstan prosecutors warned of AI-driven phishing scams selling fake Teacher's Day gift sets to parents

The General Prosecutor's Office of Kazakhstan warned parents and citizens of a surge in phishing schemes ahead of Teacher's Day. Fraudsters used AI to generate images of non-existent gift sets and to build clone websites mimicking real online stores, with links spread via messaging apps. AI-powered chatbots posed as sales assistants and urged rapid payment, after which buyers received neither the product nor their money back. Prosecutors issued advice on safe online shopping and protecting card details.

What the AI did

Fraudsters used AI to create images of gift sets that did not exist and to build convincing copycat websites that imitated real online stores. AI chatbots posed as sales assistants, answering buyers in place of a real seller and urging them to pay quickly.

First reported October 3, 2026 · Added to the register October 7, 2026 · 1 source

Deployer
Fraudsters
Affected
Parents and citizens buying Teacher's Day gifts
Country
Kazakhstan
When it happened
Not stated in the sources
First reported
October 3, 2026

What this means for you

Could this affect you?

Yes, if you or your customers shop online in Kazakhstan

Parents and other shoppers in Kazakhstan buying teachers' gifts online, especially through links sent in messaging apps, are the target of this scheme. Prosecutors warn they risk paying for gifts that never arrive and not getting their money back.

What to check

  • Find official store websites yourself instead of following links sent in messages.
  • Verify the seller before paying in advance.
  • Never share your card PIN, CVV (the security code on the card) or codes sent by text message.
  • Block your card and report to police if your card details may have been exposed.
Every fact and its source (4)
  1. Outcome for victimsNo product and no refund after payment
    “Once the funds are transferred, the buyers receive neither the product nor their money back.”[1]
  2. AI useAI-generated product images and clone store websites
    “the scam utilizes AI to generate images of non-existent products and create high-fidelity "clone" websites that mimic legitimate online stores”[1]
  3. AI useChatbot posed as seller
    “a chatbot answers the buyer instead of a seller”[1]
  4. Distribution channelMessaging apps
    “Links to these sites are distributed via messaging apps.”[1]

Sources

  1. AI-driven phishing scams target Kazakhstan parents ahead of Teacher's Day
    english.pravda.ru · October 3, 2026

How this record is classified. Severity M (3/5): harm to individuals, or a policy breach with limited reach. OECD level: incident, an event in which an AI system led to actual harm. Evidence: Confirmed, meaning a company, official or court statement.

The facts in At a glance and in Every fact and its source are quoted from the sources listed. The summary, What the AI did and What this means for you are written from those sources and checked against them automatically before publication. Records reflect what has been disclosed, not everything that has happened. Incidents are found through news feeds and the GDELT Project.

a promotional banner asking how ready are you for PCI DSS 4.0? With a call-to-action to get the checklist now.