You see a fun AI trend. Your friends are doing it. The results look amazing. All you have to do is upload a photo. What could go wrong?
Maybe nothing.
Joining a trend, using artificial intelligence, or turning your photo into an ‘80s movie character doesn’t automatically mean you’re doing something dangerous.
The problem starts when wanting to see the result makes you stop asking where you’re clicking and what you’re sharing.
There’s a reason that happens.
When something feels dangerous, we’re careful.
When something feels fun, we’re not always as careful.
Fun Can Lower Your Guard
Imagine receiving two messages.
The first says:
“Your account will be locked. Click here immediately.”
You’ve probably learned to be suspicious of messages like that.
Now imagine:
“See what you’d look like in the ’80s.”
Which one feels more tempting to click?
That’s an important cybersecurity lesson.
Scams don’t have to rely only on fear or urgency. They can also take advantage of curiosity, fun, and the feeling that everyone else is doing something.
That doesn’t mean the trend itself is a scam.
A trend can be completely legitimate.
But when something becomes popular, other people may try to take advantage of all the attention around it.
Scammers Don’t Have to Create the Trend
Imagine a new AI photo tool goes viral.
Millions of people start searching for it.
Someone could create a website that looks almost identical to the real one.
Someone else could release a fake app.
You might see an ad pointing to an unofficial service.
Or a friend could unknowingly forward you a message saying:
“This version is even better. Try it here.”
That’s why your first question should be:
Am I using the real tool?
Don’t trust a service just because a link appeared in a group chat, social media post, or advertisement.
Look for the official website.
Check the app developer.
Pay attention to the web address.
Be suspicious of small spelling changes or strange domains.
Popular doesn’t automatically mean safe.
Why Does This App Need All of That?
You’ve found the legitimate service.
Great.
Now there’s another question:
Do the permissions make sense?
If an app transforms a photograph, it makes sense that it needs access to a photo.
But why would it need all your contacts?
Why would it need your location all the time?
Why would it need your microphone?
Why would it need access to files that have nothing to do with what you’re trying to create?
Here’s an easy rule:
A permission should have a purpose.
If you can’t understand why an app needs something, don’t automatically tap Allow.
Try the 5-Second Rule
You don’t have to quit social media.
You don’t have to avoid AI.
And you definitely don’t have to skip every trend your friends are enjoying.
Instead, create a tiny space between wanting to click and actually clicking.
Five seconds.
Ask yourself four questions:
1. Is this the official tool?
Don’t automatically use the first link you find.
2. Do I trust the company receiving my information?
Know who is behind the service you’re using.
3. Does what they’re asking for make sense?
An AI photo tool may need your photo. That doesn’t mean it needs access to everything else on your device.
4. Would I be comfortable if this information left the app?
If the answer is no, consider using a different photo — or don’t upload it.
That’s it.
Five seconds won’t eliminate every online risk.
But they can interrupt something scammers love:
an automatic decision.
How This Makes You a Cyber Hero
Being a Cyber Hero doesn’t mean being afraid of technology.
It means learning to enjoy technology without automatically giving it your trust.
Use AI.
Have fun with trends.
Share things with your friends.
Just don’t let excitement make every decision for you.
The next time something goes viral, remember:
Stop. Check. Then click.
Sometimes five seconds of doubt can be a great cybersecurity tool.
Daniel Porta
CISO | Cyber Resilience Architect | Enterprise & Workforce Resilience
Founder – Be a Cyber Hero