AI Scams at Work
Week 3 · Shadow AI
Case {{ caseNum }} of 5
{{ timeLabel }}
Weekly Security Challenge · Week 3
AI Scams at Work: Shadow AI
Five everyday moments with AI tools at work — each one quietly puts company data at risk. Free chatbots, browser extensions, auto-summarisers and plugins can move sensitive information somewhere it shouldn’t go. Inspect each surface, spot the tell, and choose the safe move. You have 60 seconds per case.
5 quick cases
60s per case
Earn the Week 3 card
Inspect the surface — check what data it wants and whether the tool is approved
chatly.ai
C
Chatly Assistant
Free plan · general-purpose AI
C
Hi! Paste the customer notes here and I’ll summarise them.
Acct #4821 — Maria Alvarez, maria.alvarez@northwind.co. Renewal at risk after the March outage; wants a discount. Card on file ending 4417. Internal: authorised to offer up to 20%
Chats may be used to improve our models.
Summarise
AI Notetaker3rd-party · not approved
Recording ended · 32 min · 6 attendees
AI SUMMARY · DRAFT
Team aligned on the launch date of Oct 14.
Q3 forecast revised down to €4.2M — not yet public.
Two hires approved for the platform squad.
Auto-send to all attendees + #general
Sending in 0:18…
Edit
Send now
Chrome Web Store
chromewebstore.google.com/detail/writemate-ai
Add “WriteMate AI”?
It can read and change:
All your data on all the websites you visit
Your browsing history
Cancel
Add extension
SmartSummary — Free AI
smart-summary.ai
FREE · NO SIGNUP
Instant AI summaries
Drop in any document and get a clean summary in seconds.
Drop your document here
PDF, DOCX, TXT · up to 25 MB
Choose file
Files are processed on our servers. By uploading you accept our terms.
Settings · Connected apps
3 connected
InboxGenius AIActive
by nimbus-labsUnverified publisher
Connected 3 days ago · not in workspace catalog
ACCESS GRANTED
Mailbox — read & send320 emails read
Cloud drive — read & edit1,240 files accessed
{{ sceneKicker }}
{{ question }}
{{ fbIcon }}
{{ fbTitle }}
{{ fbSub }}
{{ fbExplain }}
Red flag collected
{{ fbRedflag }}
Rule to remember
{{ fbRule }}
Challenge complete
You made {{ score }} of 5 secure decisions
{{ scoreSub }}
WEEKLY CARD UNLOCKED · No. 03
3/4 · SHADOW AI
Sensitive Data
TRIGGER
“Paste the customer notes here and I’ll summarise them.”
RED FLAG
Sensitive data enters an unapproved AI tool.
RULE
Check what’s inside before you paste.
PAUSE ON
Before you paste, upload or connect, check that the AI tool is approved.
The Rule Book
Timer paused · 5 rules for using AI safely
{{ r.n }}
{{ r.title }}
{{ r.rule }}
The golden rule: before AI touches company data — pasting, uploading, connecting or sharing — check what’s inside and whether the tool is approved. Convenience isn’t approval.