Skip to main content
Medium reported severity Criminal Charges

Lviv region, Ukraine: prosecutors say a dating-scam call centre used a neural network to turn male voices female in real time; at least 80 victims

Ukrainian prosecutors, the SBU security service and the National Police announced on 14 October 2026 that they had shut down a fraudulent call centre in the Lviv region of Ukraine. According to the Lviv regional prosecutor's office and the Office of the Prosecutor General, the group created fake women's accounts on dating services and messengers and, to make the conversations more convincing, used software with a neural network that changed a male voice to a female one in real time. Victims were persuaded to download a file disguised as a photograph that contained remote-access malware and to share their screens; the group then took control of their banking apps and moved the money to accounts it controlled or into cryptocurrency. Prosecutors say that, on preliminary data, at least 50 Ukrainian citizens and 30 foreigners, including people in Poland, Germany and Georgia, were victims. Three men were notified of suspicion, including under a new criminal-code article on fraudulent call centres in force since September 2026, and were remanded in custody with the option of bail. The statements do not say how many victims heard the altered voice or how much each lost.

AI system
Unidentified voice-changing tool
Occurred
2026
Reported
14 October 2026
Event location
Ukraine
What the AI did
Communicated with the person
Reported harm
Financial Loss
Whose AI use
Someone else’s AI use
Setting
Finance · Relationships · Privacy
Evidence
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account
4 claims: 4 reported. 4 open questions
People reported harmed
At least 80 people

AI system as recorded: Unidentified voice-changing software with a neural network that, according to Ukrainian prosecutors, changed a male voice to a female one in real time during conversations with dating-service contacts; no product is named

What Happened

The scheme. According to the Lviv regional prosecutor's office, as relayed by Lvivskyi Portal and Glavnoe, the group created fake women's accounts on dating services and in messengers. For persuasiveness it used software with a neural network that changed a male voice to a female one in real time. DW, citing the SBU and the Office of the Prosecutor General, gives the same account: to make the conversations more convincing, the suspects used a special neural network that changes a male voice to a female one in real time.

The theft. Having gained the men's trust, the group sent a file disguised as photographs that contained malware; when the victim said the pictures would not open, the victim was persuaded to share the phone screen and change settings, and the group recorded unlock codes and online-banking access. The National Police add that the file carried a remote-access tool that let the group control the phone, bypass two-factor authentication and empty accounts, converting the money into cryptocurrency.

The victims and the case. On preliminary data, prosecutors say at least 50 Ukrainian citizens and 30 foreigners, including people in Poland, Germany and Georgia, were victims. SBU officers detained the three main organisers at the call centre's premises. They were notified of suspicion, including under a new article on fraudulent call centres that came into force in September 2026, and remanded in custody with bail. The statements give no individual loss amounts and do not say how many victims spoke with the altered voice.

Reported harm

Prosecutors say money was taken from the bank accounts of at least 80 people (50 Ukrainian citizens and 30 foreigners) after malware gave the group control of their phones; no amounts per victim are given.

How Harm Occurred

Fraudsters posing as women on dating services spoke with contacts through software that, according to prosecutors, used a neural network to turn a male voice female in real time; having gained trust, they persuaded the contacts to open malware disguised as photographs and to share their screens, then took over their banking apps and moved their money.

Outcome

Pending

Three men were notified of suspicion of fraud, creating or taking part in an electronic-communication fraud group (the new article 255-4) and unauthorised interference with information systems, and were remanded in custody with bail set; nine searches were carried out and phones, computers, bank cards and cash were seized; investigators were still identifying other participants and victims (Lviv regional prosecutor's office, SBU and National Police statements as relayed on 14 October 2026).

What remains unknown

  • When the call centre began operating; the record's year rests on the statements that the suspects were caught at the premises and charged under an article in force since September 2026.
  • How many victims spoke with the altered voice and how much each lost.
  • Which voice-changing software was used and how investigators established it.
  • The outcome of the criminal proceedings.

What the evidence supports

AI involvement: reported. Ukrainian prosecutors, who investigated the group with the SBU and the National Police, say it used software with a neural network that changed a male voice to a female one in real time to make conversations with dating-service contacts convincing; in those conversations the contacts were persuaded to open malware disguised as photographs and share their screens, which gave the group access to their banking. The statements do not name the software, say how prosecutors established its use, or say how many victims heard the altered voice.

4 claims: 4 reported. What the statuses mean

Reported Prosecutors say the group created fake women's accounts on dating services and messengers and, to make conversations convincing, used software with a neural network that changed a male voice to a female one in real time.

Causal attribution. Prosecutors' account (Lviv regional prosecutor's office and Office of the Prosecutor General) from a joint investigation; the outlets relay the same statements, one origin.

  • portal.lviv.ua(opens in new tab) supports · Ukrainian
    'Схема виглядала так: зловмисники створювали фейкові жіночі акаунти на сервісах знайомств та в месенджерах. Для переконливості використовували програмне забезпечення з нейромережею, яка в реальному часі змінювала чоловічий голос на жіночий.'
  • amp.dw.com(opens in new tab) supports · Ukrainian
    'Для того, щоб спілкування було більш переконливим, хлопці використовували спеціальну нейромережу, яка змінює чоловічий голос на жіночий у реальному часу, додають у ОГПУ.'
  • glavnoe.in.ua(opens in new tab) supports · Russian
    'Для общения использовали нейросеть, которая в режиме реального времени меняла мужской голос на женский.'
Reported Victims were persuaded to open a file disguised as photographs that contained remote-access malware and to share their screens; the group then gained access to their online banking and moved their money to accounts it controlled or into cryptocurrency.

Causal attribution. Law-enforcement statements relayed by the outlets; one origin.

  • portal.lviv.ua(opens in new tab) supports · Ukrainian
    'Коли жертва повідомляла, що знімки не відкриваються, її переконували увімкнути демонстрацію екрана мобільного та виконати певні налаштування. У цей момент шахраї фіксували паролі розблокування та доступи до онлайн-банкінгу.'; 'У Нацполіції додали, що надісланий жертвам файл містив прихований ратник (RAT – засіб віддаленого контролю).'
  • amp.dw.com(opens in new tab) supports · Ukrainian
    'Коли підозрювані отримували доступ до банкінгу, вони переказували кошти потерпілих на свої рахунки або переводили у готівку через нелегальний пункт обміну валют, використовуючи криптоактиви.'
Reported On preliminary data, prosecutors say at least 50 Ukrainian citizens and 30 foreigners, including people in Poland, Germany and Georgia, were victims of the group.

Causal attribution. Prosecutors' preliminary figure, relayed by all three outlets; one origin.

  • portal.lviv.ua(opens in new tab) supports · Ukrainian
    'За даними слідства, жертвами стали щонайменше 50 українців та 30 іноземців, зокрема з Польщі, Німеччини та Грузії.'
  • amp.dw.com(opens in new tab) supports · Ukrainian
    'Серед людей, які стали жертвами шахрайського кол-центру, щонайменше 50 громадян України та 30 іноземців, зокрема жителі Польщі, Німеччини та Грузії.'
  • glavnoe.in.ua(opens in new tab) supports · Russian
    'По информации прокуратуры, среди пострадавших — не менее 50 граждан Украины и 30 иностранцев, в частности из Польши, Германии и Грузии.'
Reported SBU officers detained the three main organisers at the call centre's premises; they were notified of suspicion, including for the first time under the new article 255-4 on electronic-communication fraud groups, and remanded in custody with bail.

Causal attribution. Law-enforcement statements; the suspects are presumed innocent and no court has ruled.

  • amp.dw.com(opens in new tab) supports · Ukrainian
    'Кіберфахівці СБУ затримали одразу трьох основних організаторів схеми "на гарячому" у приміщенні кол-центру.'; 'Фігурантам повідомили про підозру за кількома статтями ККУ, зокрема вперше на новою статтею 255-4'
  • glavnoe.in.ua(opens in new tab) supports · Russian
    'Всем троим избрали меру пресечения в виде содержания под стражей с правом внесения залога в размере 998 400 грн для каждого. Работу колл-центра прекратили.'

Sources

3 sources inspected, from 1 underlying account. Sources that repeat one account do not corroborate each other.

How the sources were read, and where the events happened

Read in Ukrainian by the research agent (an AI) on 2026-10-15 and translated by the research agent (an AI) into English; no human translator or reviewer was involved. Regional news report relaying the Lviv regional prosecutor's office, the National Police and the SBU, 14 October 2026; HTTP 200. Applies to s1.

Read in Ukrainian by the research agent (an AI) on 2026-10-15 and translated by the research agent (an AI) into English; no human translator or reviewer was involved. DW Ukrainian service report relaying the SBU and Office of the Prosecutor General press services, 14 October 2026 (AMP page); HTTP 200. Applies to s2.

Read in Russian by the research agent (an AI) on 2026-10-15 and translated by the research agent (an AI) into English; no human translator or reviewer was involved. National news site relaying the Lviv regional prosecutor's office, 14 October 2026; HTTP 200. Applies to s3.

Event countries: Ukraine. Affected-person countries: Ukraine, Poland, Germany, Georgia. Court countries: Ukraine.

The statements place the call centre in the Lviv region of Ukraine and the suspicion and custody decisions in Ukraine. Prosecutors name Ukraine, Poland, Germany and Georgia as victims' countries; other foreign victims' countries are not stated.

Reviewed for publication 2026-10-15: Published as a core case (communicated_with): Ukrainian prosecutors say the group spoke to dating-service contacts through a neural-network voice changer that presented a female persona in real time, and connect those conversations to the malware that let the group take money from at least 80 victims. The suspects are not named; the count is the prosecutors' preliminary minimum.

People described

At least 80 people, 50 of them Ukrainian citizens and 30 foreigners including people in Poland, Germany and Georgia, contacted through fake women's accounts on dating services and messengers

People reported harmed in this case

At least 80 people

0 AI participants · 80 other people harmed

Prosecutors' preliminary figure of at least 50 Ukrainian citizens and 30 foreigners who were victims of the group (Lvivskyi Portal, DW, Glavnoe). The statements describe the voice changer as part of the group's method but do not say how many of these victims heard the altered voice, so the count is of the scheme's reported victims, not of people shown to have spoken with it.

Counted once within this case. The same person may appear in other cases. This count does not establish AI causation.

Cite this case

Compiled per our published methodology: verification statuses, sourcing standards, and corrections process.

APA

NOPE. (2026). Lviv region, Ukraine: prosecutors say a dating-scam call centre used a neural network to turn male voices female in real time; at least 80 victims. AI incidents. https://nope.net/incidents/2026-lviv-region-prosecutors-say-dating-scam-call-centre-used-ai-voice-changer-at-least-80-victims

BibTeX

@misc{2026_lviv_region_prosecutors_say_dating_scam_call_centre_used_ai_voice_changer_at_least_80_victims,
  title = {Lviv region, Ukraine: prosecutors say a dating-scam call centre used a neural network to turn male voices female in real time; at least 80 victims},
  author = {NOPE},
  year = {2026},
  howpublished = {AI incidents},
  url = {https://nope.net/incidents/2026-lviv-region-prosecutors-say-dating-scam-call-centre-used-ai-voice-changer-at-least-80-victims}
}

Related cases

Medium Unidentified video tool

Bengaluru: police say a man paid Rs 1.85 lakh after a dating-app contact threatened to circulate an AI-manipulated obscene video of him

Deccan Herald reports, citing Bengaluru police, that a 23-year-old man lost Rs 1.85 lakh in an alleged sextortion scam. He matched with a woman on a dating app on 27 September 2026 and exchanged numbers; he told police that he then received a WhatsApp video call from her number lasting five to six seconds. Police said he then received an obscene video manipulated using AI and the sender threatened to circulate it unless he paid. Fearing exposure, he borrowed money from a friend and transferred Rs 1.85 lakh to several UPI IDs between 27 and 29 September as the threats continued, a police officer said. Police registered a first information report on his online cybercrime complaint and are trying to trace the suspects. The report does not say how police established that the video was AI-manipulated, and the tool is not named.

Medium Unidentified image tool

Jhansi, Uttar Pradesh: a woman is arrested and later refused bail after a railway officer's wife complained that she sent an AI-made objectionable image of the officer, demanded ₹15 lakh and threatened to circulate pictures of women in the family

Jhansi police arrested a 27-year-old woman in Prayagraj in September 2026 on charges of editing photos with AI, blackmail and extortion, after the wife of a senior railway officer living in Jhansi filed an FIR on 2 August 2026. According to the complaint as relayed by Aaj Tak, UP Tak, Dainik Bhaskar and Amar Ujala, the woman threatened to circulate objectionable pictures of women in the family, demanded ₹15 lakh and threatened to kill the family, and out of fear the family paid her ₹40,000 in total on different dates between January and June 2026. On 31 July she sent an objectionable image of the officer to his wife's phone, an image police say she made with AI. Aaj Tak places the ₹15 lakh demand after that image; Dainik Bhaskar reports the complaint as dating the demand and a death threat to the woman's visit to the family's government house on 2 June. Police recovered two phones and a laptop, and Amar Ujala reports that police will have the images examined forensically. On 1 October 2026 an Additional Sessions Judge in Jhansi rejected the woman's bail plea. In police custody after her arrest she said the FIR against her was fake. The images were not inspected.

High Unidentified image and video tool

Neemuch, Madhya Pradesh: police register a case after a woman's family says a relative from Uttar Pradesh used AI to make obscene photos and videos of her and, over seven to eight months, extorted about ₹50 lakh from her with threats to circulate them and to kill her husband and children

Nai Dunia reported on 1 October 2026 that police in Neemuch City, Madhya Pradesh, had registered a case against a man from Shahjahanpur district, Uttar Pradesh, who is a relative of a local woman through her own family (the complainant husband's in-laws' side). According to the complaint filed by her husband, the man used AI to edit photos and videos of the woman into obscene, objectionable material, sent them to her phone and blackmailed her. When she resisted he threatened to kill her husband and two children, and he threatened to spread the material to shame her socially and within the family. Over about seven to eight months, the complaint says, he sent QR codes of 20 to 25 different people to her phone and extracted roughly ₹50 lakh in 50 to 60 payments, which she sent through a neighbour and other women. The man had lived in the family's home and worked at the husband's business for about six months two to two and a half years earlier, which the complainant says gave him knowledge of the family's income and property. Nai Dunia reported that police were investigating and trying to arrest the accused. The account is the complainant's as reported by one newspaper; the images were not inspected.

Medium Unidentified video tool (suspected)

China: Shanghai woman loses 800,000 yuan to a fake army officer met on a matchmaking platform; Pudong police point to a sign of AI synthesis in her screenshot of him

In May 2026 a 50-year-old woman in Shanghai met a man on a matchmaking platform who said he was an army regiment commander about to retire and sent officer and identity card photos. He also made a video call on his own initiative, in which he quickly covered his face with his hand to show he was not using AI face-swap. He then steered her into a fake investment platform, and within about a month she put in 800,000 yuan, almost all of it borrowed, and could not withdraw it. A Pudong police anti-fraud officer said that AI synthesis could still be detected and that in her screenshot the man's thumb was clearly longer than a normal person's. The report gives no direct statement that face-swap software was used. The case was under further investigation.

If you or someone you know is struggling, free and confidential support is available. Find a helpline near you at Signpost.