AI Phishing Email Detector: A Review of Transformer-Based NLP, Sender and Url Analysis, and Defence Against AI-Generated Phishing

Phishing emails deceive individuals into revealing credentials and personal data, and attackers can now use large language models to write fluent, personalized phishing messages at scale that slip past rule-based filters. This paper reviews AI techniques for an adaptive phishing email detector that analyses message text, sender information and embedded URLs in real time. It traces detection from structural and feature-based approaches through natural-language analysis of intent and urgency to transformer models such as BERT and RoBERTa fine-tuned for phishing classification. URL analysis with deep character models, sender-authentication checks and behavioural signals are reviewed. Particular attention is given to the new threat of AI-generated phishing, including studies showing that language models can craft convincing spear-phishing emails and that the same models can help detect them. A five-layer architecture comprising email ingestion, multi-view feature extraction, transformer-based and URL classifiers, risk fusion with explanation, and user interaction with feedback is proposed. Research gaps, objectives, a comparison of models and challenges including adversarial adaptation, false positives, privacy and multilingual phishing are discussed. The review concludes that adaptive, explainable, multi-view detection is necessary as phishing becomes AI-assisted.

Authors

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2026-11-07
DOI
https://doi.org/10.5281/zenodo.24035092
Primary Topic
Spam and Phishing Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
NOV
article

AI Phishing Email Detector: A Review of Transformer-Based NLP, Sender and Url Analysis, and Defence Against AI-Generated Phishing

Prof. R. V. Varhade, Prof. S. K. Said, Prof. M. C. Kolse, Kurhade Suyash Rajaram
Zenodo (CERN European Organization for Nuclear Research)
Spam and Phishing Detection
article

AI Phishing Email Detector: A Review of Transformer-Based NLP, Sender and Url Analysis, and Defence Against AI-Generated Phishing

Prof. R. V. Varhade, Prof. S. K. Said, Prof. M. C. Kolse, Kurhade Suyash Rajaram
article en

Abstract

Phishing emails deceive individuals into revealing credentials and personal data, and attackers can now use large language models to write fluent, personalized phishing messages at scale that slip past rule-based filters. This paper reviews AI techniques for an adaptive phishing email detector that analyses message text, sender information and embedded URLs in real time. It traces detection from structural and feature-based approaches through natural-language analysis of intent and urgency to transformer models such as BERT and RoBERTa fine-tuned for phishing classification. URL analysis with deep character models, sender-authentication checks and behavioural signals are reviewed. Particular attention is given to the new threat of AI-generated phishing, including studies showing that language models can craft convincing spear-phishing emails and that the same models can help detect them. A five-layer architecture comprising email ingestion, multi-view feature extraction, transformer-based and URL classifiers, risk fusion with explanation, and user interaction with feedback is proposed. Research gaps, objectives, a comparison of models and challenges including adversarial adaptation, false positives, privacy and multilingual phishing are discussed. The review concludes that adaptive, explainable, multi-view detection is necessary as phishing becomes AI-assisted.

Zenodo (CERN European Organization for Nuclear Research)
Openalex Percentile: Top 10%
Spam and Phishing Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

Laika access coming soon