AI agents that read messages, call tools and move money create a new fraud surface. A taxonomy of the attack patterns emerging against agent workflows, prompt injection, deepfake-assisted social engineering, memory poisoning, tool abuse, with the defenses that work, grounded in Gartner’s 2025-2026 incidence data.