Army of 200,000 AI Victims: How Bots Waste Scammers’ Time and Save $600,000 Every Month

Australian company Apate has deployed a global network of 200,000 AI personas that pose as gullible victims, wasting millions of hours of scammers’ time every month. This innovative form of scam-baiting has evolved into an industrial-scale anti-fraud tool that delivers measurable economic benefits to telecommunications companies and banks.

Key result: During six weeks of work with Australian telecom operator TPG, Apate’s bots handled 600,000 scam calls, wasted more than 500 days of scammers’ time, and prevented an estimated $13 million in potential losses.

📊 Apate: Industrial-Scale Scam-Baiting Technology

Apate, a spin-out from Macquarie University, developed a system for deploying conversational AI bots at global scale. These bots imitate the behavior of naive victims who answer scam calls, deliberately prolonging conversations and forcing scammers to waste time on hopeless attempts to defraud them.

One of the company’s most unusual KPIs is the number of swear words frustrated scammers direct at the “stupid” victims. “We’re the only company in the world that tracks the number of F-words as part of our KPIs,” says Apate founder Dali Kaafar.

How the System Works

The system operates according to the following process:

  1. Incoming call interception: A suspicious call is redirected to an AI bot instead of a real subscriber
  2. Persona activation: The bot selects one of thousands of prepared identities
  3. Conversation prolongation: The AI asks follow-up questions and pretends not to understand
  4. Intelligence collection: The bot records phone numbers, bank details, scripts, and other information
  5. Intelligence sharing: The collected data is passed to banks and law enforcement agencies

Every hour a scammer spends talking to a bot is an hour they cannot use to target a real victim. Across 600,000 calls over six weeks, this creates a cumulative effect that drains resources from criminal networks.

🎭 200,000 Unique Personas

Apate maintains a pool of 200,000 different AI personas, each with a unique background and speaking style. This diversity is critical: if all bots behaved the same way, scammers would quickly recognize the deception.

Types of Personas

  • Elderly people: Slow, forgetful, constantly asking for repetition
  • Immigrants: Limited language skills and confusion over terminology
  • Students: Naive and asking many “silly” questions
  • Entrepreneurs: Busy but interested in “profitable opportunities”
  • Government employees: Pedantic and demanding endless confirmations

Each persona has unique characteristics, including age, occupation, and family status. The AI adapts its communication style to each situation, making the interaction as realistic as possible for the scammer.

Psychological effect: Scammers working in call centers operate under KPI pressure. Conversations with “endlessly stupid” victims demotivate them, reduce productivity, and increase staff turnover within criminal organizations.

📱 TPG Telecom Case Study: 600,000 Calls in Six Weeks

The largest deployment of Apate’s technology took place in partnership with Australian telecom operator TPG Telecom. The pilot project began in late 2025 and quickly produced impressive results.

Scale of the Operation

  • 600,000 incoming scam calls — each redirected to an AI bot
  • 500+ cumulative days of scammers’ time wasted
  • ~$13 million saved in prevented customer losses
  • Thousands of unique scammer numbers identified and blocked

TPG Telecom integrated Apate’s solution into its voice-security infrastructure. Mavenir provided integration between its CallShield technology and Apate’s AI bots, creating a multi-layered protection system.

Economic Impact

The savings estimate is based on the average losses associated with successful scam schemes:

  • Average loss per successful scam: $2,000-$5,000
  • Scammer conversion rate: 1-3% (1-3 successful scams per 100 attempts)
  • Prevented successful scams: 6,000-18,000 cases
  • Total prevented losses: $12-90 million

The conservative $13 million estimate reflects only direct financial losses and does not include reputational damage or operational costs associated with processing complaints.

🔍 Intelligence Collection

In addition to distracting scammers, Apate bots perform a critically important role by gathering actionable intelligence on criminal networks.

Types of Information Collected

  • Phone numbers: Outgoing scammer numbers for blocking
  • Bank details: Accounts used to receive “payments” from victims
  • Crypto wallets: Addresses used to receive stolen funds
  • Conversation scripts: Templates used by different call centers
  • Social-engineering methods: New persuasion and manipulation techniques
  • Organizational structure: Hierarchies and roles within criminal groups

This intelligence is shared with banks, telecom operators, and law enforcement agencies across Australia, Asia, Africa, the United Kingdom, and Europe. The data is used to build blacklists, initiate investigations, and coordinate international operations.

Examples of Successful Intelligence Use

  • Identification and blocking of more than 50,000 scam phone numbers
  • Freezing of bank accounts used for money laundering
  • Coordination with Interpol on raids against call centers in Southeast Asia
  • Warnings to customers about new scam schemes before they spread widely

Strategic value: Intelligence allows defenders to move from reactive protection to proactive prevention — stopping new attacks before they begin. This shifts the balance of power toward defenders.

🌐 Global Context: The Scale of the Problem

Scam-baiting technology has emerged as a response to the exponential growth of AI-powered fraud. According to industry reports, AI-enabled scams increased by 1,210% in 2025, far outpacing the 195% growth of traditional fraud.

Threat Statistics

  • Projected losses: $40 billion from AI-powered fraud by 2027
  • AI’s share of fraud: More than 50% of all fraud cases involve AI
  • Average loss: $5,600 per victim in some regions
  • US complaints: 22,364 complaints with $893 million in losses

Evolution of Scamming Methods

Scammers increasingly use AI to improve effectiveness:

  • Voice cloning: Replicating the voices of relatives or executives
  • Deepfake video: Fake video calls from “known” people
  • Personalization: AI analyzes social media to create convincing stories
  • Multilingual capability: Instant communication in any language without an accent
  • Automation: One operator can manage dozens of conversations simultaneously

Traditional anti-fraud methods can no longer keep up with the volume of attacks, which exceeds the capacity of human teams.

🛡️ Other Scam-Baiting Solutions

Apate is not the only company operating in this field. Several other projects are also developing AI-powered scam-baiting concepts.

Re:Scam (New Zealand)

New Zealand organization Netsafe developed Re:Scam, a tool focused on email scam-baiting. The system generates endless variations of responses to phishing emails, dragging scammers into pointless conversations.

Scam Buster (Open Source)

Scam Buster, an open-source tool presented at the Black Hat conference, allows ordinary users to deploy their own AI bots for protection against scammers.

Integration With Traditional Systems

Major telecom operators and banks are integrating scam-baiting solutions:

  • AT&T: Pilot AI-protection programs in the United States
  • HSBC: Voice-bot deployments for customer protection
  • Telefónica: European anti-scam initiatives
  • Singtel: Scam-prevention programs in Asia

Industry trend: Scam-baiting is evolving from entertainment-focused YouTube content into enterprise-grade solutions with measurable ROI.

Economic imperative: With ROI at these levels, deploying scam-baiting systems becomes less a question of “if” and more a question of “when.” Companies that fail to invest in such solutions may face a competitive disadvantage.

⚖️ Ethical and Legal Considerations

Using AI to deceive scammers raises interesting ethical and legal questions.

Legal Status

  • Legality: Deceiving scammers is not a crime in most jurisdictions
  • Recording laws: Rules governing call recording vary by country
  • Entrapment: Entrapment concerns generally do not apply when offenders are already attempting crimes
  • Data protection: Collection of data about scammers must comply with regulations such as GDPR

2026 outlook: Apate predicts that 2026 will become a “reset year” for the scam economy. Reactive protection methods are becoming outdated, requiring a fundamentally new approach.

🎓 Lessons for Businesses and Users

The success of scam-baiting technologies contains important lessons for different stakeholders.

For Telecom Operators and Banks

  1. Invest in AI: Traditional methods cannot cope with the volume of modern threats
  2. Measure ROI: Clear effectiveness metrics justify investment
  3. Collect intelligence: Data is a new weapon in the fight against fraud
  4. Collaborate: Information sharing strengthens protection across organizations
  5. Think proactively: Prevention is cheaper than remediation

For Ordinary Users

  1. Do not engage: The safest approach is not to continue conversations with suspicious callers
  2. Verify independently: Always call back using official phone numbers
  3. Enable protections: Use available spam filters and scam blockers
  4. Report incidents: Reporting scam attempts helps improve protection systems
  5. Educate yourself: Learn common schemes and warning signs

For Security Professionals

  1. Embrace automation: AI can scale protection beyond human capabilities
  2. Measure impact: Quantitative metrics matter more than qualitative descriptions
  3. Think like an attacker: Understanding scammer tactics improves defenses
  4. Share intelligence: Collaboration strengthens the entire ecosystem
  5. Stay current: Threats evolve, and defenses must evolve as well

📊 Comparative Analysis: Traditional vs AI-Based Methods

To understand the value of scam-baiting, it is useful to compare it with traditional approaches.

Effectiveness

Method Scalability Proactivity ROI
Blacklists High Reactive Medium
Human agents Low Reactive Low
Rule-based filters Medium Partially proactive Medium
AI scam-baiting Very high Proactive Very high

Implementation Costs

  • Blacklists: Low initial costs, low ongoing costs
  • Human teams: High initial costs, very high ongoing costs
  • Rule-based systems: Medium initial costs, medium ongoing costs
  • AI scam-baiting: Medium initial costs, low ongoing costs after deployment

Adaptability to New Threats

  • Blacklists: Require manual updates and react slowly
  • Human agents: Can adapt, but scale is limited
  • Rule-based systems: Require manual rule creation
  • AI systems: Can learn and adapt more dynamically

💎 Conclusion: A New Paradigm in the Fight Against Fraud

AI-powered scam-baiting represents a fundamental shift in how fraud is fought. Instead of relying solely on passive protection or reactive responses, these systems actively attack the economics of criminal operations, making scams less profitable and more risky.

Apate’s success demonstrates several key principles:

  1. Scale matters: Only AI can handle millions of interactions simultaneously
  2. Proactivity wins: Preventing attacks is more effective than responding after the fact
  3. Intelligence is critical: Data about scammers is as valuable as blocking their attacks
  4. Economics matters: Changing the ROI of fraud may be the most effective deterrent
  5. Collaboration amplifies impact: Information sharing between organizations multiplies defensive effectiveness

For telecommunications companies and banks, deploying scam-baiting systems is becoming more than a nice-to-have — it is turning into a competitive necessity. With estimated ROI of 2,000-5,000% and a payback period of less than three months, the economic case is compelling.

Strategic imperative: In a world where scammers use AI to scale their operations, defenders must use AI to scale protection. This is no longer simply a choice — it is becoming a requirement for survival in the digital economy.

“The best defense is a good offense. In cybersecurity, that means not merely blocking threats, but actively exhausting attackers’ resources and making their operations unprofitable.”

— Bruce Schneier, cryptography and security expert

26.08.2026, 01:21