An attacker does not need to alter votes to undermine election confidence. Creating confusion can suffice. While election systems may be secure, voters remain vulnerable to manipulation. In 2024, Iranian cyber actors stole campaign materials, seeking to influence the election. Similarly, U.S. intelligence attributed a fake video of ballot destruction in Pennsylvania to Russian operatives. Both approaches aimed to exploit divisions and weaken trust.
Artificial intelligence complicates this issue. It makes deception cheaper, faster, and more personalizable, but the threat extends beyond more convincing fakes. Dishonest actors can discredit genuine evidence by alleging AI generation.
Social engineering targets trust, decision-making, and emotional reactions. Elections present attackers with emotions, public figures, and crucial information. Imagine a candidate-sounding call soliciting an urgent donation. Or a text falsely changing your polling place. AI can amplify such tactics, producing credible imitations quickly.
Attacks also target campaign workers. An impersonated colleague might request an authentication code using a cloned voice. Successful deceit can lead to leaking or altering communications to support a misleading story.
These attacks may originate from a social media post, proceed through a fake site, and end with a text. Repetition does not equate to verification. The deeper issue is turning deception awareness into total disbelief. Legal experts Bobby Chesney and Danielle Citron call this the “liar’s dividend.” As deepfake awareness spreads, dishonest parties find it easier to dismiss authentic evidence as AI-generated. Recognizing that fakes are possible illustrates technological capabilities but does not confirm specific information as false.
Voters must learn to scrutinize doubtful content without dismissing everything as fake. They need habits to resist manipulation:
- Pause before acting on urgent messages: Urgency, outrage, and fear warrant scrutiny. Verify requests through separate channels before donating, sharing, or altering voting plans.
- Seek independent confirmation: Repeated clips across accounts may rely on a single unverified source. Credible reporting should establish information origin.
- Verify with authorities: Confirm registration, polling locations, and deadlines with state or local offices. Directly visit campaign websites for communications instead of unsolicited links. Official statements clarify campaign positions, while credible reporting evaluates claims.
- Adopt patience: Expressing uncertainty is acceptable. Delaying decisions while waiting for evidence is prudent, regardless of personal biases.
Responsibility extends beyond voters. Campaigns must secure accounts, maintain original communications, and react swiftly to impersonation. Platforms require effective reporting and escalation processes for deceptive content. Organizations like Defending Digital Campaigns offer cybersecurity resources to support such efforts.
AI’s defensive potential parallels its offensive capabilities. It helps identify malicious activities, connect coordinated operations across channels, and disrupt campaigns early. Yet technology alone cannot solve trust issues. As synthetic content spreads, authentic information must become easier to verify. Reliable sources should confirm statements from campaigns and election officials, with quick responses to impersonation.
The threat lies in people believing fabrications, as well as in potential trust collapse. Election security involves safeguarding vote-counting systems and maintaining voter confidence in reality.