Azerbaijan's State Security Service warns of AI-driven cyber-fraud networks

Azerbaijan's State Security Service (Dövlət Təhlükəsizliyi Xidməti) said on 2 October 2026 that organised cybercrime networks operating from outside the country are using artificial intelligence to run more sophisticated fraud schemes against officials, company employees and ordinary citizens, according to its statement carried by APA and Report.az the same day.

What the agency said

• The networks are "leveraging the capabilities of artificial intelligence technologies" to launch "new and sophisticated cyber-attacks," the Security Service said, according to APA.
• Targets include "civil servants, employees of various enterprises and organizations, and ordinary citizens," reached through "artificial intelligence algorithms and specialized software," the agency said, in wording APA and Report.az both carried.
• Fraudsters send messages flagged "urgent" and "important" under "carefully crafted scenarios," then direct victims to fake accounts "posing as law enforcement agencies or other official institutions" to demand transfers to foreign accounts, APA reported.
• "Despite numerous warnings and awareness-raising initiatives... some citizens still fall victim to such fraudulent schemes," the agency said; Report.az's account of the same statement made the identical point.
• The Service asked citizens to "immediately notify law enforcement agencies" of any suspicious inquiry, request or message, APA reported.

Why it matters

The statement adds AI-enabled social engineering to the list of threats Azerbaijani authorities are flagging publicly, without announcing new rules, penalties or a reporting channel beyond existing law enforcement contacts. Azerbaijan's Artificial Intelligence Strategy for 2025–2028, signed by presidential decree to "accelerate AI development" and "improve AI-related technologies and management systems," according to the decree summary, says nothing about fraud response, leaving this warning as a standalone advisory rather than part of a published compliance framework.

What it means for Azerbaijani institutions

For banks, government agencies and large employers, the warning is a signal to update staff training on AI-generated phishing and impersonation attempts, since the Security Service describes attackers impersonating "law enforcement agencies or other official institutions" rather than using generic scam templates. The agency did not publish incident numbers, financial losses or sector breakdowns, so organisations cannot yet benchmark their exposure against official data; the practical takeaway is procedural — verify unsolicited "urgent" requests through a second channel before any transfer — rather than a new regulatory obligation under the AI Strategy.