AI Scams Are Growing Up Faster Than Kids

three kids with electronic devices on a sofa

Kids are getting online younger than ever, and the Internet they’re stepping into is far more deceptive than the one their parents grew up with. A new Bitwarden survey highlights just how much the landscape has changed — and how unprepared families are for it.

According to the data, 42% of children ages three to five have already shared personal information online. Nearly 80% of kids ages three to twelve have their own tablet. That means by the time most kids enter elementary school, they already have unsupervised access to a device capable of reaching billions of strangers — and increasingly, AI systems that can mimic them.

The illusion of digital fluency

Gen Z parents, many of whom grew up alongside the early web, are the most worried about AI-driven threats to their kids. Eight out of ten fear their child could fall for an AI scam. Yet paradoxically, they’re also the least likely to monitor online activity. Thirty-seven percent say they give their children full autonomy or only lightly supervise device use.

That comfort with technology can be misleading. Knowing how to navigate TikTok or Discord isn’t the same as recognizing when a chatbot is phishing for information or a cloned voice is faking a call for help. The Bitwarden data suggests that this gap in oversight has consequences: Gen Z households reported the highest levels of malware (44%), unauthorized in-app purchases (41%), phishing (40%) and unintentional data sharing (36%).

It’s not that Gen Z parents don’t care—they talk about online safety more than any other generation, with 98% saying they’ve had those conversations. But in a world of convincing AI personas, one-time talks aren’t enough. The threats evolve too quickly, and kids are too trusting.

The AI scam multiplier

Scammers have always followed attention, but AI supercharges their reach. Machine-generated text, cloned voices and deepfake videos make it nearly impossible for kids — or adults — to separate real from fake.

California Governor Gavin Newsom recently signed legislation to combat AI-enhanced deception, underscoring how difficult this has become even for regulators. Families face the same challenge on a smaller scale: what looks like a message from a friend could be synthetic. What sounds like a parent’s voice could be a mimic.

That uncertainty fuels anxiety. Seventy-eight percent of parents across all age groups say they worry their child could fall victim to an AI-assisted scam. Yet nearly half haven’t talked with their kids about how to spot one.

Raising digital resilience, not fear

Bitwarden’s research shows that cybersecurity education has to start much earlier — and it can’t be one-size-fits-all. The same fundamentals that protect adults online — strong passwords, not sharing credentials, keeping software updated and recognizing phishing — apply to children too, but how those lessons are taught must change with age.

For very young kids, the goal is containment. Parents should restrict app access, supervise browsing and manage all credentials. Conversations about “stranger danger” should extend naturally to the digital world: don’t share your name, age, or where you live with people online.

Elementary-age kids can start to understand why security matters. This is when parents can introduce basic password concepts, show how to use shared family vaults, and talk about why messages or links can be risky. It’s also the right time to start simple, age-appropriate conversations about AI — what it can do, and why pretending to be someone else online is never okay.

For teens, security becomes about independence. Shared password managers let parents oversee without invading privacy. The focus should shift toward critical thinking — questioning messages, verifying requests and understanding that privacy and convenience often pull in opposite directions.

Balancing safety and development

Melinda Marks, cybersecurity practice director at Omdia, says technology can be both an opportunity and a risk. “Technology shapes our everyday lives, for the young and the old, because we can apply technological advances in ways to improve our lives, the way we work and live,” she explains. “For parents, mobile devices, including phones and tablets, can provide entertainment or education for children. Unfortunately, attackers will look for ways to take advantage of security and privacy weaknesses as ways to gain access or sensitive information or scam people into paying them money.”

Marks notes that this is a challenge she deals with personally with her own children. She emphasizes that “parents and caretakers need to always evaluate any technological or electrical devices for safety,” including toys and apps that connect over Wi-Fi. She recommends regularly checking privacy settings, enforcing strong passwords or biometric locks and keeping software updated to reduce risk.

But even good digital hygiene isn’t enough on its own. “Supervision is useful, but not always practical,” Marks says. “So education and training is also key. Ideally, if children are using tablets or devices, parental controls are in place to limit what they can do. The continuous training and education is crucial as technology rapidly evolves.”

She also urges parents to think beyond security. Screen time itself can expose children to harmful content or online manipulation. Pediatric guidelines generally recommend no screen time for children under 18 months (other than video chatting), about an hour per day of high-quality content for ages 2–5, and no more than two hours per day for older children. Marks points out that “limiting device usage isn’t just about reducing exposure to threats—it’s about overall well-being.”

From control to coaching

The point isn’t to monitor every click. It’s to build judgment. Parents can set guardrails, but kids need to learn how to recognize red flags themselves. Teaching them to pause before sharing, to verify before trusting and to report when something feels off builds habits that last longer than any parental control app.

Bitwarden’s approach emphasizes collaboration: a shared vault instead of a locked gate. Families can manage credentials together, review activity when needed and make cybersecurity a normal part of household conversation.

Parenting in the age of algorithms

Parenting has always involved preparing children for the world they’ll inherit. Today, that world is algorithmic, persuasive and increasingly autonomous. As AI becomes woven into everyday interactions — from games to homework to chatbots — digital resilience becomes as essential as reading or math.

The data from Bitwarden, along with Marks’ perspective, makes one thing clear: awareness alone isn’t protection. Gen Z parents may be the first generation to understand the mechanics of the Internet, but their children will be the first to grow up in a reality where trust can be manufactured. Teaching them how to question what they see and hear might be the most important life skill of all.

Forbes