Tan Su Shan does not look like a general. As the leader of DBS, the titan of Southeast Asian banking, her daily life usually involves spreadsheets, boardroom negotiations, and the steady hum of institutional growth. But lately, she has been losing sleep over a war that doesn’t use bullets or tanks. This conflict happens in the silent spaces between your smartphone and the bank's servers. It is a war of social engineering, psychological manipulation, and the terrifying speed of generative artificial intelligence.
She calls it the "new war." For a different view, consider: this related article.
It isn't about interest rates or market fluctuations. Those are predictable. Those follow rules. This new struggle is chaotic, predatory, and deeply personal. It targets the one thing a bank cannot fix with a software patch: human nature.
The Midnight Phone Call
To understand the stakes, we have to look away from the glass towers of Singapore and toward a kitchen table at 2:00 AM. Related analysis on this matter has been provided by Business Insider.
A man—let’s call him David—receives a video call from his daughter. She is studying abroad. Her face appears on the screen, frantic. Her voice is strained, trembling as she explains that she’s been in an accident and needs money immediately for a medical deposit. David doesn't hesitate. He sees her eyes. He hears the specific cadence of her panic. He sends the funds.
Ten minutes later, he calls her back to check in. She picks up from her dorm room, sleepy and confused. She hasn't called him in three days.
The "daughter" David saw was a deepfake. The voice was a synthetic clone trained on a thirty-second clip of her Instagram story. The fear David felt was the weapon.
This is the nightmare keeping Tan Su Shan awake. In the past, hackers had to break into the bank. Now, they just have to break into the customer's mind. The perimeter of the bank has shifted from the server room to the palm of your hand.
The Industrialization of Deception
We often think of scammers as lone wolves operating out of basements. That image is dangerously outdated. We are now facing "scam factories"—vast, organized operations that mirror the structure of legitimate tech companies. They have HR departments. They have performance targets. They have scripts refined by psychological experts.
The introduction of generative AI has acted like a shot of adrenaline to these criminal enterprises. Before, you could spot a scam by its broken English or a slightly "off" logo. Today, AI writes perfect, culturally nuanced emails. It creates flawless landing pages. It can carry on a text conversation for weeks, building rapport before striking.
The cost of entry for a criminal has plummeted to near zero. A bot can now send ten thousand personalized phishing messages in the time it takes you to drink a cup of coffee. Each message is tailored to the recipient's LinkedIn profile, their recent purchases, or their social media activity. It is a mass-produced intimacy designed to bypass our natural skepticism.
The scale is staggering. In Singapore alone, victims lost hundreds of millions of dollars last year. These aren't just numbers on a balance sheet. They are retirement funds gone. They are house deposits vanished. They are the psychological scars of people who realize they can no longer trust their own eyes and ears.
The Defensive Paradox
If you make a bank too secure, it becomes unusable. This is the tightrope Tan Su Shan must walk.
Imagine a bank vault that requires twelve keys, a retinal scan, and a blood sample to open. Your money is safe, but you can’t buy groceries. On the flip side, if the door is always unlocked, the money is gone by morning.
Banks have spent billions on "friction." Friction is the intentional slowing down of a transaction. It’s the "Are you sure?" pop-up. It’s the two-minute delay before a new payee is approved. It’s the phone call from an automated system when you try to send money to a crypto exchange at 3:00 AM.
But scammers have found a way to weaponize friction against us. They tell the victim, "The bank will try to stop this. They’ll tell you it’s a scam because they want to hold onto your money. Don't let them."
They turn the bank's protective measures into evidence of a conspiracy. They coach the victim through the security questions. They turn the customer into a trojan horse, walking through the front gate with the keys in their hand.
The Ghost in the Machine
The irony of this "new war" is that the same technology used to attack us is the only thing capable of defending us.
DBS and its peers are now deploying AI "bodyguards." These systems don't just look at passwords; they look at behavior. They know how you hold your phone. They know the speed at which you typically type. They know that you never, ever make transfers while traveling at sixty miles per hour on a Tuesday morning.
When the system detects a deviation—a "behavioral biometrics" mismatch—it triggers a silent alarm.
But even this is a temporary advantage. It is a technological arms race with no finish line. Every time the bank builds a better shield, the scammers find a sharper sword. The battlefield is shifting toward "real-time" defense, where AI fights AI in the milliseconds it takes for a "Send" button to register a click.
Yet, despite the billions of dollars in code, the weakest link remains the most human one: our desire to be helpful, our fear of authority, and our love for our families.
The Cost of Convenience
We have spent the last decade demanding that the world become faster. We wanted "one-click" everything. We wanted instant gratification. We got it. But in our rush to remove every ounce of friction from our lives, we accidentally removed the safety nets.
Speed is the scammer's best friend. They thrive on the "now."
"Your account will be closed in one hour."
"This investment opportunity expires at midnight."
"Your grandson is in jail and needs bail money right now."
By forcing us to move fast, they prevent us from thinking. They bypass the prefrontal cortex—the logical, calculating part of the brain—and go straight for the amygdala, the seat of fear and survival.
Tan Su Shan's anxiety stems from the realization that no amount of banking regulation can regulate human emotion. You can't pass a law against being scared. You can't write code to prevent a father from wanting to help his daughter.
The New Social Contract
The nature of the relationship between a bank and its customer is changing. It used to be a simple transaction: I give you my money, you keep it safe in a big room with a thick door.
Now, the bank has to be a mentor, a psychologist, and a digital guardian. They have to teach us how to live in a world where reality is negotiable. They have to convince us to accept more friction, more delays, and more questions in exchange for a semblance of security.
It is a hard sell. People hate being told what to do with their own money. They hate being questioned by an algorithm. But the alternative is a world where every digital interaction carries the risk of total financial ruin.
The "war" isn't happening in the future. It’s happening in your inbox. It’s happening in the "Unkown Caller" notification on your screen. It’s happening in the deepfake video of a world leader or a celebrity giving away "free" Bitcoin.
We are all combatants in this conflict, whether we like it or not.
The sun rises over the Marina Bay Sands, reflecting off the glass of the banking district. Inside those offices, thousands of engineers are working to build the next generation of defenses. They are searching for patterns in the noise, looking for the digital fingerprints of a ghost.
But down on the street, a woman checks her phone. She sees a message from her bank saying her account has been compromised. Her heart rate spikes. Her thumb hovers over the link.
In that moment, all the billions of dollars of security, all the AI "bodyguards," and all the sleepless nights of CEOs don't matter.
Everything depends on whether she stops to breathe.
One breath.
One moment of doubt.
That is the only territory left that the scammers haven't yet conquered.
