Phishing attacks reported annually (worldwide)

As the artificial intelligence research community has published more papers promising to make the world smarter, cybercriminals have launched more phishing attacks proving that the world is not, in fact, getting smarter. The correlation is 0.968 across thirteen years, which is the kind of number that makes you wonder whether the AI researchers and the phishers are reading each other's work. They are, of course—the phishers are increasingly using the AI to write better scam emails, which is a use case that was conspicuously absent from most grant applications.

AI paper output grew from a few thousand per year to over 30,000 between 2010 and 2022, while phishing attacks exploded from about 170,000 reported incidents to over 4.7 million. Both trends are powered by the same underlying engine: the expansion of the internet and the democratization of sophisticated tools. More users online means more researchers with access to datasets and compute, and more potential victims for increasingly automated scam campaigns. The uncomfortable truth is that AI advancements have genuinely made phishing more effective—large language models can now generate personalized, grammatically flawless phishing emails at scale, erasing the spelling errors that were once the easiest red flag. Both curves are measuring the same internet getting simultaneously more intelligent and more dangerous.

Thirteen years of AI papers and phishing attacks growing together is a correlation that, uniquely on this site, contains a whisper of actual mechanism. The tools we build to make machines smarter are being used to make scams smarter, and the growth curves move in parallel not by coincidence but by consequence. The papers get published, the emails get sent, and the inbox remains hostile.