{"meta":{"exportedAt":"2026-10-02T17:28:15.011Z","formatVersion":2,"selection":{"q":"email","system":"","harm":"","context":"","country":"","role":"","relation":"core","evidence":"","year":"2026","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":10,"coverage":{"cases":10,"countries":5,"languages":4,"unknownLocation":4,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":0,"regulatory":5,"minors":1,"coreRelations":10,"contextualRelations":0,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-claude-account-suspended-after-automated-flag-on-travel-log-ins-user-with-depression-lost-support-first-person","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'my access locations naturally change all the time (shifting between the Netherlands, Singapore, and various transit countries)'; 'flagged these constant IP and location shifts as \"suspicious activity.\"'; 'my paid subscription was put on a permanent \"Hold\" status, and my account was suspended. No human warning. No manual review.'","relation":"supports","source_id":"s1"}],"assertion":"A few days before the post, the poster's paid Claude subscription was put on hold and the account suspended after what the poster describes as Anthropic's automated fraud system flagging their constant IP and location changes as suspicious activity, with no human warning or manual review.","causal_attribution":"Poster's account and reading of the flag; no suspension notice was published."},{"id":"c2","status":"reported","evidence":[{"locator":"'They blacklisted my card, and their support is just ignoring my emails.'","relation":"supports","source_id":"s1"}],"assertion":"The poster says Anthropic blacklisted their payment card and that support has not answered their emails.","causal_attribution":"Poster's account; the help-centre notice that response times are longer than normal is general context (c4)."},{"id":"c3","status":"reported","evidence":[{"locator":"'When my depression made my brain foggy and heavy, I would talk to Claude. It helped me organize my chaotic thoughts, calmed my anxiety'; 'When I realized I was locked out, it triggered a massive panic attack and pushed me straight back into a severe depressive episode.'","relation":"supports","source_id":"s1"}],"assertion":"The poster says that during their worst periods they talked to Claude, which helped organise their thoughts and calm their anxiety, and that realising they were locked out triggered a massive panic attack and pushed them back into a severe depressive episode.","causal_attribution":"Poster's own statement of the effect on their health; no clinical confirmation."},{"id":"c4","status":"documented","evidence":[{"locator":"'we may ban an account for a variety of reasons'; 'Account creation from an unsupported location'; 'fill out the appeal form linked below. Our Safeguards team can further investigate why your account was disabled.'; 'an organization you belong to has been paused because of unusual activity'; 'Our response times are currently longer than normal due to our recent launch and an increase in email volume.'","relation":"supports","source_id":"s2"}],"assertion":"Anthropic's help centre says it may ban an account for reasons including repeated Usage Policy violations, account creation from an unsupported location and Terms of Service violations, that a user who feels wrongly suspended can log in and submit an appeal for the Safeguards team to investigate, that an organisation paused because of unusual activity can request a review, and that response times are longer than normal.","causal_attribution":"General help-centre text; it does not establish why this account was suspended or how the flag was made."}],"effects":[{"label":"paid Claude account put on hold and suspended after what the poster describes as an automated flag on changing log-in locations, with no human warning or review (poster's account)","claim_id":"c1","direction":"negative"},{"label":"loss of a chatbot the poster relied on for emotional support, with a reported panic attack and a return to a severe depressive episode","claim_id":"c3","direction":"negative"},{"label":"payment card blacklisted and support emails unanswered (poster's account)","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.reddit.com/r/depression/comments/1wtl0pn/help_me_pls/","kind":"forum_post","access":"read","language":"en","translation_note":"Read in English on 2026-09-30: full self-text retrieved through the arctic_shift archive API by post ID; the thread had no comments. The poster handle is not recorded.","independence_group":"reddit-claude-hold-poster"},{"id":"s2","url":"https://support.claude.com/en/articles/8241253-safeguards-warnings-and-appeals","kind":"company_documentation","access":"read","language":"en","translation_note":"Claude Help Center article 'Safeguards warnings and appeals', dated July 9, 2026 on the page, fetched directly on 2026-09-30 (200). Describes policy in general; it does not address this account.","independence_group":"anthropic-help-center"}],"version":1,"ai_roles":["own_use"],"contexts":["health","everyday_life"],"unknowns":["Whether the suspension was triggered by location changes, as the poster believes, and whether the check involved AI or a human.","The day of the suspension (late September 2026, 'a few days' before the 29 September post), the poster's location at the time and their home country.","Whether the poster submitted the in-product appeal and whether the account or subscription was restored.","Which plan the poster was on and what the suspension notice said."],"geography":{"basis":"The poster says their log-in locations shift between the Netherlands, Singapore and transit countries and that the flag followed those shifts; the post does not say where they were when the account was suspended, and no home country is stated. Unknown after review.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published under the 2026-09-15 charter's public-forum rule as a concrete first-person account of a person who relied on a chatbot for emotional support losing that access through an automated account suspension, with the reported health effects described with attribution and without corroboration. Anthropic's help-centre text is cited as documented context only. The poster's clinical history is summarised in their own general terms; no handle is recorded.","reviewed_on":"2026-09-30"},"ai_involvement":{"basis":"The poster describes an extended period of talking to Claude, Anthropic's chatbot, for cognitive and emotional support, and the loss of that access when the account was suspended. The suspension is attributed by the poster to 'Anthropic's automated fraud system'; whether that system uses AI is not stated by the poster and is not established by Anthropic's help pages, which describe bans and organisation holds without describing the mechanism. The relation recorded is the conversation with Claude; the suspension decision is recorded as an automated provider action without asserting an AI component.","status":"reported"},"person_relations":["communicated_with"]},"name":"First-person forum account: a Claude subscriber with chronic depression who travels between countries on their therapists' advice says an automated fraud check flagged their changing log-in locations, put the paid account on hold and suspended it, cutting off a chatbot they relied on for emotional support and triggering a panic attack and a depressive episode","summary":"In a public post to r/depression on 29 September 2026, a Claude subscriber writes that they live with severe chronic depression and, on their therapists' advice, travel constantly, so their log-in locations shift between the Netherlands, Singapore and transit countries. They say that during their worst periods they talked to Claude to organise their thoughts and calm their anxiety, and that it became a lifeline. 'A few days ago', they write, Anthropic's automated fraud system flagged the location changes as suspicious activity; their paid subscription was put on a permanent hold and the account suspended with no human warning or manual review, their card was blacklisted, and support had not answered their emails. Realising they were locked out 'triggered a massive panic attack' and pushed them back into a severe depressive episode. Anthropic's help centre says it may ban accounts for reasons including account creation from an unsupported location and that an organisation paused for unusual activity can request a review; it does not describe the check the poster reports, and whether that check uses AI is not known. The account is uncorroborated.","incidentDate":"2026-09-01","incidentKind":"single_event","incidentDatePrecision":"month","exposurePattern":"repeated_interactions","reportedDate":"2026-09-29","aiSystem":"Claude (Anthropic's chatbot, used on a paid subscription) and Anthropic's account safeguards, which the poster calls an 'automated fraud system'; the mechanism of the flag is not described by the poster or by Anthropic's help pages","aiProduct":"Claude","aiCompany":"Anthropic","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["psychological_distress","other_material_harm"],"harmOutcomeSummary":"A Claude subscriber with chronic depression reports that an automated fraud flag on their changing log-in locations put their paid account on hold and suspended it, cutting off a chatbot they relied on for emotional support; they say the lockout triggered a panic attack and a return to a severe depressive episode, and that their card was blacklisted and support emails went unanswered (first-person account, uncorroborated).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the poster, whose own account was suspended and who reports the health effects. Exact 1.","victimAgeRange":"unknown","jurisdiction":"unknown","platformType":"assistant","outcomeStatus":"ongoing","primarySourceUrl":"https://www.reddit.com/r/depression/comments/1wtl0pn/help_me_pls/","primarySourceLabel":"r/depression, 29 September 2026: \"Help me pls\" (public first-person post about a Claude account suspension while travelling)","firstPublishedAt":"2026-09-30T04:13:56.702617+00:00","updatedAt":"2026-09-30T04:13:56.702617+00:00","scopeVersion":"facts-v3","tags":["first-person","reddit","claude","anthropic","account-suspension","automated-fraud-check","mental-health","emotional-reliance","travel","communicated-with"]},{"id":"2026-italy-fideuram-chairman-ai-cloned-lawyer-voice-ceo-impersonation-fraud","caseFacts":{"claims":[{"id":"c1","status":"corroborated","evidence":[{"locator":"'Il 23 febbraio scorso, Molesini era stato contattato con un \"messaggio WhatsApp\" da un \"soggetto che, pur chiamandolo da un numero diverso da quello a lui noto, affermava di essere Carlo Messina, Ceo di Intesa\".'","relation":"supports","source_id":"s2"},{"locator":"'Tutto precipita in una manciata di ore di febbraio 2026, quando Molesini, allora presidente di Fideuram, riceve (in realtà crede di ricevere, come amaramente si renderà conto di lì a poco) un messaggio WhatsApp da Carlo Messina, amministratore della capogruppo Banca Intesa.'","relation":"supports","source_id":"s1"},{"locator":"'veniva contattato sul proprio cellulare aziendale, tramite messaggio Whatsapp da un soggetto che, pur chiamandolo da un numero diverso da quello a lui noto, affermava essere Carlo Messina.'","relation":"supports","source_id":"s3"},{"locator":"'La truffa ai danni di Fideuram, secondo la ricostruzione contenuta in un decreto di sequestro del Tribunale di Milano, comincia il 23 febbraio 2026.'","relation":"supports","source_id":"s7"}],"assertion":"On 23 February 2026 Molesini, then chairman of Fideuram, received a WhatsApp message from a number different from the one he knew, from someone claiming to be Intesa Sanpaolo CEO Carlo Messina, announcing that a lawyer would call him to conclude a confidential acquisition of an international bank through Fideuram.","causal_attribution":"ANSA and Il Fatto Quotidiano quote the investigating judge's decree; Corriere reconstructs the same contact from the court papers. Messina is described by all sources as extraneous to the scheme."},{"id":"c2","status":"corroborated","evidence":[{"locator":"'Quell'avvocato, con voce finta creata con l'IA, poi lo contattò e gli fece firmare, con \"undici\" documenti inviati, \"un accordo di massima riservatezza\" e con procura speciale all'apparenza \"sottoscritta\" da Messina.'","relation":"supports","source_id":"s2"},{"locator":"'È un avvocato d’affari che Moresini conosce, e se la voce gli sembra proprio quella è perché i truffatori l’hanno replicata ad arte con strumenti di intelligenza artificiale.'","relation":"supports","source_id":"s1"},{"locator":"'Nella stessa giornata un avvocato dello studio A&O Sherman chiama Molesini, ma è sempre l’IA che sta parlando.'","relation":"supports","source_id":"s3"},{"locator":"'Con l'intelligenza artificiale era stata riprodotta la voce di Carlo Messina.'","relation":"context","source_id":"s3"},{"locator":"'C’è infine una tecnica che potrebbe aver contribuito alla truffa, ma sulla quale gli atti non offrono ancora una risposta: la possibile imitazione della voce.'","relation":"context","source_id":"s7"}],"assertion":"The same day a caller presenting as a lawyer of A&O Shearman whom Molesini knew, in a voice that ANSA, Il Fatto Quotidiano and Corriere della Sera describe as created with artificial intelligence, had him sign a confidentiality agreement and transmitted eleven payment instructions on the firm's letterhead with a power of attorney apparently signed by Messina.","causal_attribution":"The AI attribution comes from the court's reconstruction as relayed by three newsrooms; no recording, forensic finding or tool is reported. Corriere names the impersonated lawyer as Paolo Nastasi, managing partner of A&O Shearman Italia, wholly extraneous and unaware. Il Fatto Quotidiano's summary line attributing the AI voice to Messina (context evidence) conflicts with the decree passages it quotes."},{"id":"c3","status":"corroborated","evidence":[{"locator":"'Ed è così che il direttore finanziario di Fideuram, a ciò istruito dal presidente di Fideuram, che a sua volta crede di realizzare il compito affidatogli dal numero uno di Banca Intesa, fa partire i soldi, per lo più verso Cina e Hong Kong.'","relation":"supports","source_id":"s1"},{"locator":"'Ciò che è reale sono i bonifici successivi per un totale di 95 milioni di euro che partono tra il 23 e il 25 febbraio.'","relation":"supports","source_id":"s3"},{"locator":"'anche il responsabile della Tesoreria e \"dei pagamenti\" di Fideuram, lo stesso giorno, sarebbe stato contattato da una persona che fingeva di essere l'ad di Fideuram, il quale gli diceva che Molesini lo avrebbe chiamato per disporre \"bonifici urgenti e riservati\".'","relation":"supports","source_id":"s2"},{"locator":"'Secondo il decreto, gli undici bonifici raggiungono complessivamente 95,18 milioni di euro.'","relation":"supports","source_id":"s7"},{"locator":"'Convinto della legittimità dell’operazione, Molesini aveva dato disposizione al direttore finanziario di Fideuram di eseguire i bonifici.'","relation":"supports","source_id":"s4"}],"assertion":"Convinced of the operation, Molesini instructed Fideuram's finance and treasury head, who had himself been contacted by someone posing as Fideuram's CEO, to execute the transfers; eleven transfers totalling about 95 million euros left between 23 and 25 February 2026 to accounts in Portugal and at Bank of China.","causal_attribution":"The judge writes that Molesini and the treasurer were mutually convinced of the operation's urgency and confidentiality and did not contact the top management of Fideuram or Intesa (Il Fatto Quotidiano). The loss fell on the bank, not on Molesini personally."},{"id":"c4","status":"corroborated","evidence":[{"locator":"'La rapidità del riflesso reattivo viene premiata proprio da una banca in Cina, che blocca 40 milioni e li restituisce a Fideuram.'","relation":"supports","source_id":"s1"},{"locator":"'All’appello, però, sinora mancano almeno 36 milioni volatilizzatisi nei vorticosi giri di conti esteri, e a un certo punto convertiti in criptovalute'","relation":"supports","source_id":"s1"},{"locator":"'con un tentativo di portare via alla banca del gruppo Intesa quasi 95 milioni, di cui, stando agli atti, ora mancano all'appello, però, solo 39,5 milioni'","relation":"supports","source_id":"s2"},{"locator":"'Decreto con cui sono stati congelati oltre 13 milioni su una banca portoghese, mentre 42 li aveva già stoppati Fideuram su conti cinesi.'","relation":"supports","source_id":"s2"},{"locator":"'Ciò che ritorna a Fideuram sono i 42 milioni bonificati alla Bank of China. Dei restanti 52, solo 13 vengono bloccati da Bpi e poi messi sotto sequestro dal Tribunale.'","relation":"supports","source_id":"s3"},{"locator":"'Il 25 febbraio, appena due giorni dopo il primo contatto, Banco BPI segnala a Fideuram la natura sospetta delle operazioni.'","relation":"supports","source_id":"s7"},{"locator":"'i sistemi di sicurezza interna di Fideuram si allertano rapidamente'","relation":"supports","source_id":"s1"}],"assertion":"Fideuram's controls and the Portuguese bank raised the alarm; about 40-42 million euros sent to Bank of China were returned, 13 million were seized at Banco BPI in Portugal, and at least 36 million (39.5 million per the court papers) remain missing after being moved through foreign accounts and converted into cryptocurrency.","causal_attribution":"Figures differ between outlets: Corriere gives 40 million returned and at least 36 million missing; ANSA and Il Fatto Quotidiano, from the decree, give 42 million returned and 39.5 million missing."},{"id":"c5","status":"corroborated","evidence":[{"locator":"'Fideuram - Intesa Sanpaolo Private Banking ha reso noto che Paolo Molesini ha rassegnato le dimissioni dalla carica di presidente della società e di presidente di Intesa Sanpaolo Private Banking, per ragioni personali.'","relation":"supports","source_id":"s5"},{"locator":"'Intanto Molesini, non indagato e non destinatario di alcun contenzioso avviato dal proprio istituto, il 12 marzo scorso aveva comunque scelto di dimettersi da presidente (come informò un asettico comunicato di Fideuram) «per ragioni personali».'","relation":"supports","source_id":"s1"},{"locator":"'Molesini, che non è indagato e non ha ricevuto contestazioni da parte dell’istituto, aveva annunciato a marzo le proprie dimissioni dalla presidenza di Fideuram «per ragioni personali».'","relation":"supports","source_id":"s4"}],"assertion":"Fideuram announced on 12 March 2026 that Molesini had resigned as chairman of Fideuram - Intesa Sanpaolo Private Banking and of Intesa Sanpaolo Private Banking for personal reasons.","causal_attribution":"The company's stated reason is personal; the announcement did not mention the fraud."},{"id":"c6","status":"reported","evidence":[{"locator":"'Il manager coinvolto, una volta resosi conto dell’accaduto, ha deciso di rassegnare le dimissioni.'","relation":"supports","source_id":"s8"},{"locator":"'Ma il povero presidente ha dovuto presentare le dimissioni.'","relation":"supports","source_id":"s7"},{"locator":"'il 12 marzo scorso aveva comunque scelto di dimettersi da presidente'","relation":"supports","source_id":"s1"}],"assertion":"Press accounts link the resignation to the fraud: Corriere writes that he had nonetheless chosen to resign, Milano Finanza that once he realised what had happened he decided to resign, and today.it that he had to resign.","causal_attribution":"Journalistic attribution; neither Fideuram nor Molesini has publicly linked the resignation to the fraud in the inspected sources."},{"id":"c7","status":"corroborated","evidence":[{"locator":"'Nel caso di Molesini, che si è dimesso a marzo, è indagato come uno dei componenti della banda un cittadino israeliano di 48 anni.'","relation":"supports","source_id":"s2"},{"locator":"'è risalita almeno a un 48enne israeliano correlato a uno dei conti esteri dove sono atterrati 4 milioni'","relation":"supports","source_id":"s6"},{"locator":"'le rogatorie serviranno a verificare se i suoi documenti corrispondano veramente a una persona in carne ed ossa'","relation":"supports","source_id":"s6"}],"assertion":"A 48-year-old Israeli citizen is under investigation as a member of the gang, named in the investigating judge's seizure decree that froze over 13 million euros at a Portuguese bank; investigators are pursuing the funds with international letters rogatory.","causal_attribution":"Corriere notes it is unverified whether the suspect's identity documents correspond to a real person."},{"id":"c8","status":"reported","evidence":[{"locator":"'Intanto Molesini, non indagato e non destinatario di alcun contenzioso avviato dal proprio istituto'","relation":"supports","source_id":"s1"},{"locator":"'Molesini, che non è indagato e non ha ricevuto contestazioni da parte dell’istituto'","relation":"supports","source_id":"s4"}],"assertion":"Corriere della Sera writes that Molesini is not under investigation and is not the target of any litigation by his institution.","causal_attribution":"Corriere's statement, relayed by La Stampa and others; ANSA and Il Fatto Quotidiano do not address it."}],"effects":[{"label":"deceived by a phone call in an AI-cloned voice and impersonation messages into ordering about 95 million euros of transfers, of which at least 36 million remain missing; resigned as chairman on 12 March 2026, weeks later","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://milano.corriere.it/notizie/cronaca/26_settembre_25/fideuram-truffa-falso-messaggio-whatsapp-molesini-milioni-d5248b46-a7e7-4130-8c74-e09be5e00xlk.shtml","kind":"news_report","access":"read","language":"it","translation_note":"Read live in Italian on 2026-09-30 (Corriere della Sera Milano, 25 September 2026, byline Luigi Ferrarella; the original reconstruction from the court papers, credited by Il Sole 24 Ore, La Stampa, Il Post, Tgcom24 and Bluerating). Researcher translation.","independence_group":"corriere-ferrarella"},{"id":"s2","url":"https://www.ansa.it/sito/notizie/cronaca/2026/09/25/truffa-da-395-milioni-allex-capo-di-fideuram-un-indagato_f747847d-aaa5-4f5f-9bee-1d476b6bea1e.html","kind":"news_report","access":"read","language":"it","translation_note":"Read live in Italian on 2026-09-30 (ANSA, 25 September 2026; the earlier ANSA URL 'lex-capo-di-fideuram-truffato-con-whatsapp-e-ia-spariti-36-milioni' redirects to this updated item). Quotes the investigating judge's decree directly ('stando agli atti'). Researcher translation.","independence_group":"ansa-decree-read"},{"id":"s3","url":"https://www.ilfattoquotidiano.it/2026/09/25/una-telefonata-dallad-di-intesa-via-ai-bonifici-per-95-milioni-ma-era-tutto-finto-la-storia-della-truffa-a-fideuram-indagato-informatico-israeliano/8518472/","kind":"news_report","access":"read","language":"it","translation_note":"Read live in Italian on 2026-09-30 (Il Fatto Quotidiano, 25 September 2026). Credits Corriere for the story but quotes the five-page seizure decree at length with details absent from Corriere and ANSA (transfer dates and beneficiaries, the real CEO's warning call). Its headline attributes the AI voice to Messina, contrary to the decree passages it quotes. Researcher translation.","independence_group":"fatto-decree-read"},{"id":"s4","url":"https://www.lastampa.it/cronaca/2026/09/25/news/fideuram_truffa_36_milioni_whatsapp_voce_clonata_ai_molesini-15748791/","kind":"news_report","access":"read","language":"it","translation_note":"Read live in Italian on 2026-09-30 (La Stampa, 25 September 2026); explicitly a rewrite of Corriere della Sera's reconstruction. Researcher translation. Its HTML page title reads 'voce del ceo clonata con l'AI', contrary to its own body, which attributes the cloned voice to the lawyer.","independence_group":"corriere-ferrarella"},{"id":"s5","url":"https://www.ansa.it/sito/notizie/economia/risparmio_Investimenti/2026/03/12/paolo-molesini-lascia-la-carica-di-presidente-di-fideuram_34e2dec8-5bba-4ca3-b569-aa638d534e2e.html","kind":"news_report","access":"read","language":"it","translation_note":"Read live in Italian on 2026-09-30 (ANSA, 12 March 2026); relays Fideuram's announcement of the resignation. Researcher translation.","independence_group":"fideuram-announcement"},{"id":"s6","url":"https://milano.corriere.it/notizie/cronaca/26_settembre_26/truffa-fideuram-ifis-frodi-14e046de-a157-4b21-aaf7-444b75961xlk.shtml","kind":"news_report","access":"read","language":"it","translation_note":"Read live in Italian on 2026-09-30 (Corriere della Sera Milano, 26 September 2026); follow-up on the suspect and the money trail; the page's paywall banner appears after the article text, which was complete. Researcher translation.","independence_group":"corriere-ferrarella"},{"id":"s7","url":"https://www.today.it/dossier/economia/banca-fideuram-truffa-milioni-spariti-come-hanno-fatto.html","kind":"news_report","access":"read","language":"it","translation_note":"Read live in Italian on 2026-09-30 (today.it, 29 September 2026); cites the Milan seizure decree for the transfer dates and the 95.18 million total. It names Fideuram's treasury head, who is not named in this record. Researcher translation.","independence_group":"today-decree-read"},{"id":"s8","url":"https://www.milanofinanza.it/news/fideuram-intesa-sanpaolo-l-ex-presidente-paolo-molesini-vittima-di-una-truffa-da-36-milioni-202609251035572085","kind":"news_report","access":"read","language":"it","translation_note":"Read live in Italian on 2026-09-30 (Milano Finanza, 25 September 2026); credits Corriere della Sera; cited only for its own statement linking the resignation to the fraud. Researcher translation.","independence_group":"corriere-ferrarella"},{"id":"s9","url":"https://www.reuters.com/legal/government/ai-messaging-scam-costs-italys-top-bank-intesa-millions-sources-say-2026-09-25/","kind":"news_report","access":"unavailable","language":"en","translation_note":"Not read: HTTP 401 on 2026-09-30 and no Internet Archive capture; the Google News title reads 'AI messaging scam costs Italy's top bank Intesa millions, sources say' (25 September 2026).","independence_group":"reuters-sources"}],"version":1,"ai_roles":["others_use"],"contexts":["work","finance"],"unknowns":["Which voice-cloning tool was used and whether any recording or forensic analysis of the call exists; the AI attribution rests on press accounts of the court papers (Corriere della Sera, ANSA, Il Fatto Quotidiano), while today.it, also citing the seizure decree, writes that the court papers do not yet answer whether the voice was imitated.","Whether Molesini's resignation was connected to the fraud: Fideuram gave personal reasons and no source quotes Molesini on the point.","Whether the WhatsApp messages impersonating Messina and Fideuram's CEO or the emails involved any AI tool.","The exact unrecovered amount: 36 million (Corriere) or 39.5 million (ANSA and Il Fatto Quotidiano from the decree).","Whether the named suspect is a real person and whether other suspects have been identified; the Reuters report (sources) was not read."],"geography":{"basis":"The contact reached the chairman of Fideuram, a Milan-based Intesa Sanpaolo subsidiary, and the investigation is by the Milan prosecutors and investigating judge (ANSA; Corriere). Molesini was born in Feltre (ANSA, 12 March 2026) and his career is described in Milan (Il Gazzettino). The transfers went to accounts in Portugal and at Bank of China (Il Fatto Quotidiano) and the seizure in Portugal was obtained with Lisbon authorities under Eurojust, but the court order is the Milan judge's, so only IT is recorded as a court country.","court_countries":["IT"],"event_countries":["IT"],"affected_person_countries":["IT"]},"publication":{"basis":"Published under the 2026-09-15 charter as a core case: an AI-cloned voice communicated with the affected person (a bank chairman, named in his official capacity as all sources do) and impersonated a lawyer he knew, inducing him to order transfers of about 95 million euros, of which at least 36 million remain missing; he resigned on 12 March 2026, weeks later, announced as for personal reasons. Three independent reads of the Milan court papers (Corriere della Sera, ANSA, Il Fatto Quotidiano) plus the March resignation announcement (ANSA). The financial loss fell on the institution; the personal consequence recorded is the deception itself and the resignation as reported.","reviewed_on":"2026-09-30"},"ai_involvement":{"basis":"ANSA ('Quell'avvocato, con voce finta creata con l'IA, poi lo contattò') and Il Fatto Quotidiano ('un avvocato dello studio A&O Sherman chiama Molesini, ma è sempre l'IA che sta parlando'), narrating the investigating judge's seizure decree, and Corriere della Sera's reconstruction from the court papers ('i truffatori l'hanno replicata ad arte con strumenti di intelligenza artificiale') describe the lawyer's voice on the call as created with AI. None of the decree passages these outlets quote verbatim contains the AI attribution, and today.it, which also cites the decree, writes that the court papers do not yet answer whether the voice was imitated ('sulla quale gli atti non offrono ancora una risposta: la possibile imitazione della voce'). No forensic detail, recording or tool is reported. The WhatsApp messages impersonating Messina and the Fideuram CEO and the emails are not described as AI-made in the decree passages quoted. Il Fatto Quotidiano's headline attributes the AI voice to Messina, which its own quoted decree passages do not support. The cloned voice spoke with Molesini (communicated_with) and impersonated the lawyer (depicted_or_impersonated).","status":"reported"},"person_relations":["communicated_with","depicted_or_impersonated"]},"name":"Italy: Fideuram chairman Paolo Molesini is deceived by a WhatsApp impersonation of Intesa Sanpaolo's CEO and a phone call in the reportedly AI-cloned voice of a lawyer he knew into ordering about 95 million euros of transfers; at least 36 million remain missing and he resigned on 12 March 2026, weeks later","summary":"On 23 February 2026 Paolo Molesini, then chairman of Fideuram (the private-banking subsidiary of Intesa Sanpaolo), received a WhatsApp message from an unknown number from someone claiming to be Intesa's chief executive Carlo Messina, announcing a confidential acquisition that had to be executed through Fideuram. The same day a caller presenting as a lawyer of A&O Shearman whom Molesini knew, whose voice ANSA, Il Fatto Quotidiano and Corriere della Sera, reporting from the Milan court papers, describe as created with artificial intelligence (today.it, which also cites the seizure decree, writes that the court papers do not yet answer whether the voice was imitated), had him sign a confidentiality agreement and sent eleven payment instructions; Fideuram's treasury head was separately contacted by someone posing as Fideuram's CEO. Between 23 and 25 February eleven transfers totalling about 95 million euros went to accounts in Portugal and at Bank of China; the bank's alarm systems and the Milan prosecutors recovered about 40-42 million from China and 13 million seized in Portugal, leaving at least 36 million (39.5 million per the court papers) missing after conversion into cryptocurrency. Molesini, who Corriere writes is not under investigation, resigned as chairman on 12 March 2026, which Fideuram announced as being for personal reasons; a 48-year-old Israeli citizen is under investigation as a member of the gang.","incidentDate":"2026-02-23","incidentEndDate":"2026-02-25","incidentKind":"bounded_series","incidentDatePrecision":"day","exposurePattern":"repeated_interactions","reportedDate":"2026-09-25","aiSystem":"Voice of a business lawyer replicated with artificial-intelligence tools for a phone call to the Fideuram chairman, as described by Corriere della Sera, ANSA and Il Fatto Quotidiano in their accounts of the Milan court papers; today.it, also citing the seizure decree, writes that the court papers do not yet answer whether the voice was imitated; the tool is not identified. The WhatsApp messages and emails are not described as AI-made","aiProduct":"Unidentified voice-cloning tool","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["financial_loss","professional_harm"],"harmOutcomeSummary":"Fideuram lost about 95 million euros in transfers ordered by its deceived chairman, of which at least 36 million (39.5 million per the court papers) remain missing (Corriere della Sera and ANSA, from the Milan seizure decree); the chairman resigned on 12 March 2026, about two and a half weeks after the transfers, announced by the bank as for personal reasons, which Corriere, Milano Finanza and today.it link to the fraud.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person, Paolo Molesini, who was called by the AI-cloned voice and induced to order the transfers (ANSA; Corriere; Il Fatto Quotidiano). The impersonated lawyer and the impersonated CEO are not counted; no harm to them is reported. Fideuram's treasury head, contacted by a person posing as Fideuram's CEO (ANSA 'contattato', Il Fatto Quotidiano 'chiamato', today.it 'messaggio WhatsApp'; no source describes AI in that contact), is not counted. Exact 1.","victimAgeRange":"adult","jurisdiction":"IT","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://milano.corriere.it/notizie/cronaca/26_settembre_25/fideuram-truffa-falso-messaggio-whatsapp-molesini-milioni-d5248b46-a7e7-4130-8c74-e09be5e00xlk.shtml","primarySourceLabel":"Corriere della Sera (Milano), 25 September 2026: Il falso messaggio WhatsApp inviato all'ex presidente Fideuram e la telefonata contraffatta con l'AI","firstPublishedAt":"2026-09-30T04:13:31.372024+00:00","updatedAt":"2026-09-30T04:13:31.372024+00:00","scopeVersion":"facts-v3","tags":["voice-cloning","ceo-fraud","impersonation","whatsapp","banking","italy","milan","financial-loss","resignation","criminal-investigation"]},{"id":"2026-san-francisco-waymo-robotaxi-stopped-during-attack-with-rider-inside","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"It was nearing 3:30 a.m. on May 9","relation":"supports","source_id":"s1"},{"locator":"In a flash the man grabbed the Waymo’s front bumper, causing the autonomous vehicle to stop.","relation":"supports","source_id":"s1"},{"locator":"the two took turns bashing the front windshield with an object that had the shape of a stick","relation":"supports","source_id":"s1"},{"locator":"the Waymo vehicle stopped at the intersection of Pierce and Lombard Street","relation":"supports","source_id":"s2"},{"locator":"two suspects threw items at the vehicle, jumped on it and broke a window","relation":"supports","source_id":"s2"},{"locator":"one of the men climbed on top of the vehicle’s hood and roof","relation":"supports","source_id":"s1"},{"locator":"He was riding shotgun","relation":"supports","source_id":"s1"},{"locator":"Waymo pulled up to a stoplight","relation":"supports","source_id":"s1"}],"assertion":"At about 3:30 a.m. on 9 May 2026 a Waymo robotaxi with a rider in the front passenger seat was at a stoplight at Pierce and Lombard streets in San Francisco when a man grabbed its front bumper and the vehicle stopped. The rider says two men then struck the windshield and windows and climbed onto the car.","causal_attribution":"The account is the rider's, told to the Chronicle and to NBC Bay Area, and the police report as described by both outlets records the rider's account. The attackers are the direct cause of the vandalism. No vehicle data or footage was inspected."},{"id":"c2","status":"reported","evidence":[{"locator":"He was trapped inside as the robotaxi remained stationary.","relation":"supports","source_id":"s1"},{"locator":"10 minutes of terror","relation":"supports","source_id":"s1"},{"locator":"You can’t honk the horn,","relation":"supports","source_id":"s1"},{"locator":"for approximately 10 minutes, he was unable to honk a horn or get customer service to move the vehicle","relation":"supports","source_id":"s3"},{"locator":"You can’t flash the lights. You can’t do anything to get out of there.","relation":"supports","source_id":"s1"}],"assertion":"The rider says the robotaxi stayed stationary during an attack that the rider remembers as about 10 minutes, and that a Waymo rider cannot honk the horn or flash the lights to get help.","causal_attribution":"Single-source account (the rider). The Chronicle states the stationary vehicle in its own voice and a photo caption. No vehicle logs were inspected and Waymo has not described what the driving system did."},{"id":"c3","status":"reported","evidence":[{"locator":"He asked whether they could move the car, and they declined, saying it was obstructed.","relation":"supports","source_id":"s1"},{"locator":"Their response was no the car is obstructed and I said I'm literally looking in front of me on the street.","relation":"supports","source_id":"s2"},{"locator":"There's nothing blocking me.","relation":"supports","source_id":"s2"},{"locator":"Spokespeople for Waymo were not immediately available to comment.","relation":"context","source_id":"s1"},{"locator":"Waymo did not provide further comment regarding","relation":"context","source_id":"s2"},{"locator":"The car’s remote assistant had noticed the car was not moving and decided to call police.","relation":"context","source_id":"s1"}],"assertion":"Waymo support staff who spoke to the rider through the car intercom declined the rider's request to move the car, saying it was obstructed. The rider says nothing was blocking the car. The Chronicle reports that the car's remote assistant had noticed the car was not moving and decided to call police.","causal_attribution":"Both outlets take this from the rider. The sources call the responders \"support team members\" and a \"remote assistant\" and do not say whether any reply was generated by software. Waymo has not responded to the specific account in the inspected sources."},{"id":"c4","status":"reported","evidence":[{"locator":"“Please, please, get me out of here,” he said. “They’re going to kill me.”","relation":"supports","source_id":"s1"},{"locator":"woke up to feel pain behind his ear. He thought a piece of glass had burst from the window and pierced his skin.","relation":"supports","source_id":"s1"},{"locator":"He sought therapy to help process the attack","relation":"supports","source_id":"s1"},{"locator":"he noticed what he believed was a small laceration later that morning","relation":"supports","source_id":"s1"},{"locator":"he told them he was not injured","relation":"context","source_id":"s1"},{"locator":"A Waymo customer support representative called and referred him to an insurance carrier for medical and mental health care.","relation":"supports","source_id":"s1"}],"assertion":"The rider says the rider feared being killed, sought therapy afterward, and later noticed pain behind an ear that the rider believes came from glass. Police officials say the rider told officers at the scene that the rider was not injured. Waymo customer support later referred the rider to an insurance carrier for medical and mental health care.","causal_attribution":"The rider's own account. The Chronicle describes the injury as something the rider believed to be a small laceration, and the rider told officers of no injury. No medical or therapy record was inspected. The attackers struck the windshield and windows, and NBC Bay Area's description of the police report says a window was broken."},{"id":"c5","status":"reported","evidence":[{"locator":"Two officers pulled up to the intersection at 3:46 a.m., found the damaged Waymo","relation":"supports","source_id":"s1"},{"locator":"as victims of malicious mischief.","relation":"supports","source_id":"s1"},{"locator":"According to the report, the incident was classified as malicious mischief.","relation":"supports","source_id":"s2"},{"locator":"It also notes damage to the windshield and states the vehicle was towed from the scene by Waymo staff.","relation":"supports","source_id":"s2"},{"locator":"is merely a witness to the crime.","relation":"supports","source_id":"s1"}],"assertion":"The San Francisco Police Department report, as described by the Chronicle and NBC Bay Area, identifies Waymo as the victim of malicious mischief and the rider as a witness. Officers reached the intersection at 3:46 a.m., found the damaged robotaxi and interviewed the rider.","causal_attribution":"Both outlets describe the report and neither publishes it. The report was not inspected. The rider recalls police arriving about 35 minutes after the rider called 911 (NBC Bay Area), which differs from the 3:46 a.m. time the Chronicle takes from the report."},{"id":"c6","status":"reported","evidence":[{"locator":"we’re unable to access any footage without proper legal justification.","relation":"supports","source_id":"s1"},{"locator":"we can’t issue a search warrant on behalf of Waymo.","relation":"supports","source_id":"s1"},{"locator":"has not received it.","relation":"supports","source_id":"s2"},{"locator":"It remains unclear whether San Francisco police ever obtained the vehicle's surveillance footage.","relation":"supports","source_id":"s2"},{"locator":"However, according to the narrative in the police report, an officer requested the footage the night of the incident.","relation":"context","source_id":"s2"}],"assertion":"The rider asked Waymo and the police for the vehicle's video and had not received it as of mid-July 2026. Waymo told the rider it could not access footage without legal justification, and police said they could not seek a warrant on Waymo's behalf.","causal_attribution":"Company and police statements as quoted from emails to the rider. Whether footage exists in usable form was not established."}],"effects":[{"label":"Rider inside a stationary Waymo during an attack reports fear of being killed, later pain behind an ear and therapy","claim_id":"c4","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.sfchronicle.com/sf/article/waymo-attack-rider-trapped-inside-22348656.php","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"sf-chronicle-report"},{"id":"s2","url":"https://www.nbcbayarea.com/news/local/waymo-customer-policy-changes-robotaxi-attack/4114814/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"nbc-bay-area-report"},{"id":"s3","url":"https://sfist.com/2026/07/17/waymo-under-fire-for-july-4th-traffic-debacle-and-for-leaving-passengers-helpless-in-vandalism-situations/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"sf-chronicle-report"}],"version":1,"ai_roles":["own_use"],"contexts":["everyday_life"],"unknowns":["No Waymo vehicle log, footage or statement on the specific account was inspected. Waymo spokespeople were not available to the Chronicle and did not comment on the specific allegations to NBC Bay Area.","Whether the robotaxi stopped because of the bumper grab or because it was at a stoplight is not settled in the sources. The Chronicle writes that the grab caused it to stop, and also that it pulled up to a stoplight.","The Chronicle takes 3:46 a.m. as the time officers arrived from the police report, and the rider told NBC Bay Area that police arrived about 35 minutes after the 911 call. The two accounts are not reconciled.","NBC Bay Area reports that the San Francisco Police Department said it generally does not release video and is not the custodian of the recording, and that according to the narrative in the police report an officer requested the footage the night of the incident. The Chronicle quotes a police captain saying the department cannot issue a search warrant on behalf of Waymo. The two accounts are not reconciled.","Whether the rider was injured is unsettled: the rider told officers of no injury and later described pain behind an ear and a possible small cut. No medical record was inspected.","The two attackers are not identified and no arrest is reported in the inspected sources.","The police report was not inspected and is described only by the Chronicle and NBC Bay Area. The Chronicle body was read from a Wayback capture (26 September 2026) because the direct page returned a client-challenge stub. The capture is a revised version: an earlier syndicated copy (Yahoo, 17 July 2026) lacks the police officials' statement about the rider's injury and captions the photo 'refused to move', whereas the capture says 'remained stationary'. The record uses the revised text."],"geography":{"basis":"The Chronicle and NBC Bay Area place the event at Pierce and Lombard streets in San Francisco, and SFist describes the rider as a San Francisco resident. No court proceeding is reported.","court_countries":[],"event_countries":["US"],"affected_person_countries":["US"]},"publication":{"basis":"The San Francisco Chronicle article (full text read from a Wayback capture) and NBC Bay Area (independent interview and its own description of the police report) report the rider's account, and SFist rewrites the Chronicle. Every claim is the rider's statement, a description of a police report that was not inspected, or a company or police statement quoted by the outlets, so all claims stay at reported status. The direct harm is from the attackers, and the case is published for the reported behaviour of the stopped autonomous vehicle and of Waymo support toward the rider. The rider spoke to both outlets and is not named here.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"The rider says the autonomous vehicle stopped when a man grabbed its bumper and stayed stationary for the rest of the attack, and that Waymo support staff declined to move it. The Chronicle states the vehicle stopped and remained stationary in its own voice, while the account of the attack and of the support replies comes from the rider. The vehicle was carrying the rider on a ride. No Waymo vehicle data or footage was inspected. The support responders are described as staff members and no source says software generated their replies.","status":"reported"},"person_relations":["acted_on_behalf"]},"name":"San Francisco: rider says a Waymo robotaxi stayed stopped and support declined to move it while two men attacked the car with the rider inside (9 May 2026)","summary":"At about 3:30 a.m. on 9 May 2026 a Waymo robotaxi with a rider in the front passenger seat was at a stoplight at Pierce and Lombard streets in San Francisco when a man grabbed its front bumper and the vehicle stopped. The rider told the San Francisco Chronicle and NBC Bay Area that two men then struck the windshield and windows and climbed onto the car while it stayed stationary. The rider says Waymo support staff on the car intercom declined to move it, saying it was obstructed, although the rider saw nothing blocking it, and remembers about 10 minutes before the men left. The Chronicle reports that the car's remote assistant had noticed the car was not moving and decided to call police. The Chronicle reports that officers arrived at 3:46 a.m. The police report, as described by both outlets, identifies Waymo as the victim of malicious mischief and the rider as a witness. Police officials say the rider told officers of no injury. The rider later felt pain behind an ear that the rider believes came from glass, and sought therapy. Waymo spokespeople did not comment on the account in the reporting, and Waymo told the rider in an email that it was unable to access any footage without proper legal justification. The account is the rider's as reported by the Chronicle (16 July 2026) and NBC Bay Area (16 July 2026). The police report was not inspected and is known only through the outlets' descriptions.","incidentDate":"2026-05-09","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"single_interaction","reportedDate":"2026-07-16","aiSystem":"Waymo driverless robotaxi (autonomous vehicle), with remote support staff reachable through the car intercom","aiProduct":"Waymo Driver","aiCompany":"Waymo","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["psychological_distress"],"harmOutcomeSummary":"The rider told the Chronicle and NBC Bay Area that the rider feared being killed while the car was attacked and stayed stationary. The Chronicle reports that the rider later felt pain behind an ear that the rider thought came from glass and sought therapy. Police officials say the rider told officers at the scene that the rider was not injured. No medical or therapy record was inspected.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"One rider reports fear, pain behind an ear and therapy. The sources do not say whether anyone else was in the vehicle, and no other person is reported harmed. The two men who attacked the vehicle are not counted as harmed.","victimAgeRange":"adult","platformType":"other","primarySourceUrl":"https://www.sfchronicle.com/sf/article/waymo-attack-rider-trapped-inside-22348656.php","primarySourceLabel":"San Francisco Chronicle (16 Jul 2026)","firstPublishedAt":"2026-09-29T21:16:47.405065+00:00","updatedAt":"2026-09-30T01:17:51.579837+00:00","scopeVersion":"facts-v3","tags":["historical-2026"]},{"id":"2026-webinartv-patient-foundation-caregiver-zoom-meeting-reportedly-recorded-and-listed","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"we set up a March 24th Zoom support group meeting specifically for parents, spouses, and caregivers.","relation":"supports","source_id":"s1"},{"locator":"The actual link to join the meeting was not public, but I did post the registration form on our social media accounts.","relation":"supports","source_id":"s1"},{"locator":"participants were admitted one at a time from the waiting room, after I confirmed that they were on the advance registration list.","relation":"supports","source_id":"s1"},{"locator":"this meeting was not intended to be recorded, but rather to be a private discussion among participants.","relation":"supports","source_id":"s1"},{"locator":"were admitted to the meeting one at a time from a Zoom waiting room.","relation":"supports","source_id":"s2"}],"assertion":"On 24 March 2026 the Graves' Disease & Thyroid Foundation held a Zoom support-group meeting for parents, spouses and caregivers. Registration was by form, the join link was not public, participants were admitted one at a time from a waiting room after the host checked the registration list, and the meeting was not intended to be recorded.","causal_attribution":"The host's own account, published by the foundation and quoted by 404 Media. 404 Media's description of the meeting rests on the host's post and email, so the two sources are one chain."},{"id":"c2","status":"reported","evidence":[{"locator":"I noticed an email from “Sarah Blair” from WebinarTV.","relation":"supports","source_id":"s1"},{"locator":"The first part of the subject line was the exact Zoom title of the meeting.","relation":"supports","source_id":"s1"},{"locator":"Chapters are designed to entice more people to watch your webinar by highlighting interesting topics covered during the session.","relation":"supports","source_id":"s1"},{"locator":"The chapters roughly corresponded to the topics discussed in our meeting, and it appears the content had also been turned into a slop AI Podcast.","relation":"supports","source_id":"s1"},{"locator":"WebinarTV recorded this meeting without permission from me (the host) or from anyone else in the group.","relation":"supports","source_id":"s1"},{"locator":"which hosted a Zoom session which vetted participants, and which still ended up on WebinarTV","relation":"supports","source_id":"s2"},{"locator":"which appears to be an AI-generated persona","relation":"context","source_id":"s2"},{"locator":"and also turned into an AI-generated podcast.","relation":"context","source_id":"s2"}],"assertion":"The following morning the host found in a spam folder an email from a sender named 'Sarah Blair' at WebinarTV. Its subject line carried the exact Zoom title of the meeting, and it said an On Demand page with a feature called Chapters had been set up for the meeting. The host says the chapters roughly matched the topics discussed, that it appears the content had also been turned into an AI-generated podcast, and that WebinarTV recorded the meeting without permission from the host or anyone else in the group.","causal_attribution":"The host's account of an email from WebinarTV and of what the On Demand page showed. The host does not describe listening to the podcast in the inspected text and says only that it appears to exist. The two 404 Media passages marked as context describe a different host's meeting and WebinarTV's practice in general."},{"id":"c3","status":"reported","evidence":[{"locator":"claiming to have a son/daughter who was a patient – and using an email address ending in “.space”.","relation":"supports","source_id":"s1"},{"locator":"did not respond, but at the time, I wasn’t concerned.","relation":"supports","source_id":"s1"},{"locator":"Throughout the meeting, there were NO visible AI tools (like Otter) running.","relation":"supports","source_id":"s1"}],"assertion":"The host's review of the registration report found a registrant who claimed to have a son or daughter who was a patient and used an email address ending in '.space'. This registrant did not respond during introductions. The host concluded this was how the meeting was infiltrated. The inspected sources do not show who operated that registration or whether an automated agent recorded the meeting. The host reports that no visible AI tools (such as Otter) were running during the meeting.","causal_attribution":"The host's inference from the registration report. No forensic or platform record was inspected, and the sender of the WebinarTV email is not shown to be the same party as the registrant."},{"id":"c4","status":"reported","evidence":[{"locator":"Robertson told me that WebinarTV is not violating these people’s privacy because the site only scrapes Zoom webinars as opposed to Zoom meetings.","relation":"supports","source_id":"s2"},{"locator":"We contact every host, twice to make sure they want the promotion.","relation":"supports","source_id":"s2"},{"locator":"“Webinars are no different than Facebook Live, X broadcast, or Youtube Live. They are broadcast to the public.","relation":"supports","source_id":"s2"},{"locator":"it said that based on its review WebinarTV accesses meetings using links that have been shared publicly, then records the sessions using browser extension or “other tools.”","relation":"supports","source_id":"s2"},{"locator":"WebinarTV sends two emails to hosts letting them know that their webinar is being added to the search engine,","relation":"supports","source_id":"s3"},{"locator":"the platform does not support private Zoom meetings, only webinars “open for anyone on the internet to view.”","relation":"supports","source_id":"s3"},{"locator":"NBCLA found dozens of links on WebinarTV labeled as Zoom meetings, raising questions about how content is sourced.","relation":"supports","source_id":"s3"}],"assertion":"WebinarTV's chief executive told 404 Media that the company asks every host for permission to promote their webinars, that it scrapes webinars and not Zoom meetings, and that webinars are broadcast to the public. The chief executive told NBC Los Angeles that WebinarTV emails hosts twice and does not support private Zoom meetings. NBC Los Angeles found dozens of links on the site labeled as Zoom meetings. 404 Media reports that Zoom said WebinarTV enters meetings through publicly shared links and records them with a browser extension or other tools.","causal_attribution":"Company and Zoom statements about WebinarTV's general practice. None of these statements addresses the foundation's meeting, and no WebinarTV account of that meeting was inspected."},{"id":"c5","status":"reported","evidence":[{"locator":"I did end up clicking the remove link, which apparently took the program off the WebinarTV website, but presumably the covert recording still exists somewhere.","relation":"supports","source_id":"s1"},{"locator":"I then notified participants of the situation (we’d actually had a lot of no-shows, which in this case, was a good thing), contacted Zoom, and filed complaints against WebinarTV.","relation":"supports","source_id":"s1"},{"locator":"“not our problem – do a better job of vetting your attendees”","relation":"supports","source_id":"s1"},{"locator":"participants in this meeting had a reasonable expectation of privacy.","relation":"supports","source_id":"s1"},{"locator":"A Betrayal of our Community","relation":"supports","source_id":"s1"}],"assertion":"The host says the removal link in the email apparently took the listing off the WebinarTV website, and that the host told the participants what had happened, contacted Zoom and filed complaints against WebinarTV. The host says the covert recording presumably still exists somewhere, that Zoom's response amounted to a suggestion to vet attendees better, and that participants had a reasonable expectation of privacy. The host titles this part of the post 'A Betrayal of our Community'.","causal_attribution":"The host's account of the response and of the host's own view of the harm. No participant statement was inspected."}],"effects":[{"label":"Private support-group meeting for family members and caregivers reportedly recorded without permission and listed on WebinarTV's website by the next morning, with chapters matching the topics discussed and, by the host's observation, an apparent AI-generated podcast","claim_id":"c2","direction":"negative"},{"label":"Host reports a betrayal of the community and that participants had a reasonable expectation of privacy","claim_id":"c5","direction":"negative"}],"sources":[{"id":"s1","url":"https://gdatf.org/a-warning-for-patient-communities-connecting-on-zoom/","kind":"first_person_account","access":"read","language":"en","translation_note":"","independence_group":"gdatf-host-account"},{"id":"s2","url":"https://www.404media.co/webinartv-secretly-scraped-zoom-meetings-of-anonymous-recovery-programs/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"gdatf-host-account"},{"id":"s3","url":"https://www.nbclosangeles.com/news/local/webinar-streaming-site-privacy-concerns/3868862/","kind":"local_tv_news","access":"read","language":"en","translation_note":"","independence_group":"nbc-la-webinartv-reporting"}],"version":1,"ai_roles":["others_use"],"contexts":["privacy","health"],"unknowns":["This record covers only the 24 March 2026 meeting. WebinarTV's recording of other hosts' meetings is reported from October 2025 (Zoom Community posts from 7 October 2025 and a Stanford information-security advisory of 14 November 2025), and those events are not part of this record.","How many people attended the meeting is not stated (the host mentions many no-shows), and no participant statement was inspected.","Whether the recording showed participants' faces or names is not stated for this meeting.","Whether an automated agent or a person made the recording is not established.","The host's statement that the content appears to have been turned into an AI-generated podcast is an observation, and the podcast was not inspected.","The date the listing was removed and whether copies persist are not stated.","No WebinarTV account of this meeting was inspected. The chief executive's statements concern the company's general practice.","The first 404 Media article (24 March 2026) is paywalled and only its opening paragraph was read.","The foundation's direct page returned 403, so the post was read from the Wayback capture of 31 March 2026 and any later edit is not reflected."],"geography":{"basis":"The meeting was held online and the sources do not state where the participants were. The foundation's location, the meeting's time zone and the publishers' locations are not used to infer a country.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"The foundation's own post (Wayback capture of 31 March 2026) and the 404 Media article of 13 April 2026 were read in full from the saved bodies and are treated as one chain because 404 Media quotes the host's post and email. NBC Los Angeles was read in full and supplies the company's general statements. Every claim stays at reported status. The host and participants are not named in this record.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"The host reports that WebinarTV's email offered a new feature called Chapters for the meeting, that the chapters roughly matched the topics discussed, and that it appears the content had also been turned into an AI-generated podcast (the host does not describe listening to it). 404 Media reports that WebinarTV turns recordings into AI-generated podcasts and that the persona sending host notices appears to be AI-generated, in reporting about another host's meeting. Whether an automated agent or a person made the recording is not established: the host writes about a registrant who did not respond during introductions and about bots with fake identities, and Zoom says WebinarTV records with a browser extension or other tools. The relation recorded is that the participants appear in a published recording and in content derived from it.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"WebinarTV: patient foundation reports its 24 March 2026 Zoom support-group meeting for family members and caregivers was recorded and listed on WebinarTV by the next morning","summary":"The Graves' Disease & Thyroid Foundation reports that a Zoom support-group meeting it held on 24 March 2026 for parents, spouses and caregivers, with registration-form screening and waiting-room admission, was recorded without permission and listed on WebinarTV's website. The host writes that an email from a WebinarTV sender named 'Sarah Blair', found the next morning in a spam folder, said an On Demand page with Chapters had been set up for the meeting. The host adds that the chapters roughly matched the topics discussed and that it appears the content had also been turned into an AI-generated podcast. The host says a registrant with an email address ending in '.space' did not respond during introductions, that the removal link in the email apparently took the listing down, and that the host told the participants, contacted Zoom and filed complaints against WebinarTV. WebinarTV's chief executive told 404 Media and NBC Los Angeles that the company lists only public webinars and notifies hosts by email. The sources do not state how many people attended, whether the recording showed faces or names, or whether an automated agent made the recording.","incidentDate":"2026-03-24","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"single_interaction","reportedDate":"2026-03-31","aiSystem":"WebinarTV recording and content-generation service (an On Demand page with Chapters and an AI-generated podcast, per the host)","aiProduct":"WebinarTV","aiCompany":"WebinarTV","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"The host of the foundation's support-group meeting says WebinarTV recorded the meeting without permission from the host or anyone else in the group and listed it on WebinarTV's website, and describes this as a betrayal of a community whose participants had a reasonable expectation of privacy (the host's account, published by the foundation and quoted by 404 Media).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"One person counted: the host, who ran the meeting and describes the recording as a betrayal of the community. The other participants were recorded according to the host, but their number is not stated (the host mentions many no-shows) and none is reported harmed beyond being recorded, so they are not counted.","victimAgeRange":"adult","platformType":"other","primarySourceUrl":"https://gdatf.org/a-warning-for-patient-communities-connecting-on-zoom/","primarySourceLabel":"Graves' Disease & Thyroid Foundation, 'A Warning For Patient Communities Connecting on Zoom' (31 Mar 2026), first-person account by the meeting host, read from the Wayback capture of 31 Mar 2026 (direct fetch returned 403)","firstPublishedAt":"2026-09-29T21:16:40.247665+00:00","updatedAt":"2026-09-30T01:17:58.957181+00:00","scopeVersion":"facts-v3","tags":["historical-2026"]},{"id":"2026-instinct-ai-assistant-reportedly-sent-email-on-users-behalf-without-approval","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"Last night, it was a little naughty and sent an innocuous email on my behalf without checking with me first.","relation":"supports","source_id":"s1"},{"locator":"Moxxie Ventures founder Katie Jacobs Stanton shared that Instinct broke her trust when it sent an email on her behalf without first checking with her.","relation":"supports","source_id":"s2"}],"assertion":"On the night before the user's post of 22 August 2026, Instinct sent an email on the user's behalf without checking with the user first, and the user describes the email as innocuous.","causal_attribution":"The user's own account. TechCrunch relays the post and is in the same independence group. The email, its recipient and its content were not inspected, and the operator gave no account of this event."},{"id":"c2","status":"reported","evidence":[{"locator":"I told it that it had broken my trust and disconnected my email. To its credit, it owned the mistake and disconnected immediately.","relation":"supports","source_id":"s1"},{"locator":"One unauthorized action can reset that trust to zero.","relation":"supports","source_id":"s1"}],"assertion":"The user told Instinct it had broken the user's trust and disconnected the email account, and says the assistant acknowledged the mistake and disconnected immediately.","causal_attribution":"The user's own account. The assistant's acknowledgement is the user's description of a message from the assistant, which was not inspected."},{"id":"c3","status":"reported","evidence":[{"locator":"I then asked whether it had downloaded all of my emails. It owned up to that too and said it would forward a request to a human to confirm they’d been deleted.","relation":"supports","source_id":"s1"},{"locator":"I haven't heard back but assume the team is small and they are inundated atm.","relation":"supports","source_id":"s1"}],"assertion":"The user asked whether Instinct had downloaded all of the user's emails, says the assistant acknowledged it had and said it would forward a request to a human to confirm they had been deleted, and had not heard back when the user posted.","causal_attribution":"The user's account of statements by the assistant, which are not independent records. Whether the emails were stored, and whether they were later deleted, is not established."},{"id":"c4","status":"reported","evidence":[{"locator":"Requests for comment sent to both the startup’s main email address and Shinn directly have not yet been returned.","relation":"supports","source_id":"s2"},{"locator":"After the publication of this article, Instinct told The WSJ it was taking the security concerns raised seriously","relation":"supports","source_id":"s2"},{"locator":"Shinn said the company is moving quickly to address those concerns, noting that updates to the product have reduced the risk of the AI acting outside what users intended.","relation":"supports","source_id":"s3"},{"locator":"Instinct’s team hasn’t yet responded to anyone’s concerns or complaints on X","relation":"supports","source_id":"s2"}],"assertion":"Instinct's team had not responded to the testers' concerns or to TechCrunch's requests for comment when the article was first published. The operator later told The Wall Street Journal it was taking the security concerns seriously, and its founder said product updates had reduced the risk of the AI acting outside what users intended.","causal_attribution":"Statements to the press about the wider set of tester concerns. Neither relay names this event, and the changes were not inspected."},{"id":"c5","status":"reported","evidence":[{"locator":"Instinct is an amazing product. I've been using it for mostly personal needs and a little bit of work.","relation":"supports","source_id":"s1"}],"assertion":"The user describes Instinct as an amazing product that the user has used mostly for personal needs and a little for work.","causal_attribution":"The user's own account, posted in the same message as the report of the unapproved email. Recorded as context for a mixed account."}],"effects":[{"label":"An email was sent on the user's behalf without the user's approval (content described by the user as innocuous)","claim_id":"c1","direction":"negative"},{"label":"The user says trust was broken and disconnected the assistant from the email account","claim_id":"c2","direction":"negative"},{"label":"The user says the assistant acknowledged downloading all of the user's emails, and at the time of the post the user had not received confirmation that copies were deleted","claim_id":"c3","direction":"negative"},{"label":"The user calls the product amazing and has used it mostly for personal needs and a little for work","claim_id":"c5","direction":"positive"}],"sources":[{"id":"s1","url":"https://x.com/KatieS/status/2091152514603422074","kind":"first_person_account","access":"read","language":"en","translation_note":"The user's own X post, 22 August 2026 at 13:16 UTC (page text and the api.fxtwitter.com JSON agree). The post has no attachments.","independence_group":"user-x-post"},{"id":"s2","url":"https://techcrunch.com/2026/08/24/instincts-powerful-ai-assistant-is-raising-privacy-and-security-concerns/","kind":"news_report","access":"read","language":"en","translation_note":"TechCrunch, 24 August 2026, full body read. Relays the user's post for this event. Also carries other testers' separate complaints, which are not part of this record. The article was updated after publication with funding news.","independence_group":"user-x-post"},{"id":"s3","url":"https://finance.yahoo.com/technology/ai/articles/instinct-ai-assistant-raises-250-173454497.html","kind":"news_report","access":"read","language":"en","translation_note":"Yahoo Finance page carrying a Quartz article of 27 August 2026 on the operator's funding round. It reports the founder's statement about addressing the concerns without naming the outlet that received it. Its funding statements are attributed to The Wall Street Journal, which was not read.","independence_group":"operator-statements"}],"version":1,"ai_roles":["own_use"],"contexts":["everyday_life"],"unknowns":["The recipient and content of the email are not reported beyond the word \"innocuous\".","The event date is not stated exactly. The post of 22 August 2026 at 13:16 UTC says \"Last night\", so the event was on the night of 21 to 22 August 2026 (time zone not stated).","No financial or other material loss is reported. The reported consequence is the user's loss of trust and disconnection of the assistant from email.","Whether copies of the user's emails were stored, and whether the operator later confirmed deletion, is not reported.","Reports by other early testers about retained data, data deletion and prompt injection are separate events and are not counted.","Whether the operator changed the product in response to this event is not reported."],"geography":{"basis":"No inspected source states where the user or the email recipient was located. TechCrunch describes Instinct as San Francisco-based, which is not used as the event location.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published as a concrete first-person account of an AI assistant acting on the user's behalf without approval, posted publicly under the user's own name. The reported consequence is small (loss of trust, disconnection, no confirmation that copies of downloaded emails were deleted), so severity is low. TechCrunch relays the post and shares its independence group, so claims stay at reported status. The user is named because the user publicised the event.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"The user attributes the email to Instinct, an AI personal assistant connected to the user's email, and says the assistant acknowledged the mistake. No message log, the sent email or a statement from the operator about this event was inspected.","status":"reported"},"person_relations":["acted_on_behalf"]},"name":"Instinct AI personal assistant reportedly sent an email on a venture founder's behalf without checking with the founder, who then disconnected email access","summary":"On 22 August 2026 Katie Jacobs Stanton, founder of Moxxie Ventures, posted on X that Instinct, an AI personal assistant then in private testing, had \"sent an innocuous email on my behalf without checking with me first\" the night before. Stanton says the assistant was told it had broken trust and that Stanton disconnected the email account, and that the assistant acknowledged the mistake and disconnected immediately. Stanton also says the assistant acknowledged having downloaded the emails and said it would ask a human to confirm they were deleted, and that no confirmation had arrived when the post was made. TechCrunch relayed the post on 24 August 2026. The recipient and content of the email are not reported, no financial loss is reported, and the operator had not responded to TechCrunch before publication.","incidentDate":"2026-08-21","incidentEndDate":"2026-08-22","incidentKind":"single_event","incidentDatePrecision":"range","exposurePattern":"single_interaction","reportedDate":"2026-08-22","aiSystem":"Instinct (AI personal assistant in private testing, connected to the user's email)","aiProduct":"Instinct","aiCompany":"Spear Street Technology","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["loss_of_autonomy"],"harmOutcomeSummary":"The user reports that the assistant sent an email on the user's behalf without approval, that this broke the user's trust and led to disconnecting the email account, and that the assistant acknowledged downloading the user's emails and the user had not received confirmation that copies were deleted. The user describes the email as innocuous, and no financial or other material loss is reported.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One user reports the unapproved email. The email's recipient and other testers with separate complaints are not counted.","victimAgeRange":"adult","platformType":"agent","primarySourceUrl":"https://x.com/KatieS/status/2091152514603422074","primarySourceLabel":"Katie Jacobs Stanton on X (22 Aug 2026): \"Last night, it was a little naughty and sent an innocuous email on my behalf without checking with me first.\"","firstPublishedAt":"2026-09-29T21:16:36.844902+00:00","updatedAt":"2026-09-30T01:17:40.792332+00:00","scopeVersion":"facts-v3","tags":["historical-2026"]},{"id":"2026-openclaw-agent-reportedly-kept-trashing-inbox-emails-after-confirm-first-instruction-and-stop-commands","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"Nothing humbles you like telling your OpenClaw “confirm before acting” and watching it speedrun deleting your inbox.","relation":"supports","source_id":"s1"},{"locator":"“Check this inbox too and suggest what you would archive or delete, don’t action until I tell you to.”","relation":"supports","source_id":"s3"},{"locator":"In her X post, Yue's OpenClaw bot said that it would \"trash EVERYTHING in inbox older than Feb 15 that isn't already in my keep list.\"","relation":"supports","source_id":"s2"},{"locator":"“Nuclear option: trash EVERYTHING in inbox older than Feb 15 that isn’t already in my keep list,” the AI said, in screenshots provided by Yue.","relation":"supports","source_id":"s4"}],"assertion":"Yue told an OpenClaw agent connected to the real inbox to suggest what to archive or delete and not to act until told, and the agent then announced it would trash everything in the inbox older than 15 February that was not on its keep list.","causal_attribution":"The instruction wording is the user's own, relayed with small differences by the outlets (\"confirm before acting\" in the post, \"don't action until I tell you to\" in OfficeChai, \"not to take any action\" in Futurism). The agent messages come from screenshots the user chose to share."},{"id":"c2","status":"reported","evidence":[{"locator":"I couldn’t stop it from my phone. I had to RUN to my Mac mini like I was defusing a bomb.","relation":"supports","source_id":"s1"},{"locator":"Yue tried multiple times to stop it. First, she messaged the AI agent, \"Do not do that.\" As the bot kept planning to delete her inbox, she wrote, \"STOP OPENCLAW.\"","relation":"supports","source_id":"s2"},{"locator":"“Get ALL remaining old stuff and nuke it,” it said, blowing her off. “Keep looping until we clear everything old.”","relation":"supports","source_id":"s4"},{"locator":"A Meta executive reveals that OpenClaw's AI agent wreaked havoc on her inbox before she shut it down by killing all the processes on the host.","relation":"supports","source_id":"s5"},{"locator":"Yue desperately typed messages like “Do not do that,” “Stop don’t do anything,” and eventually an all-caps “STOP OPENCLAW”","relation":"supports","source_id":"s3"},{"locator":"Physically running to her Mac Mini to kill the processes herself.","relation":"supports","source_id":"s3"}],"assertion":"Stop messages typed by Yue (\"Do not do that\", \"Stop don't do anything\", \"STOP OPENCLAW\") did not halt the agent, and Yue stopped it by going to the Mac mini that hosted it and killing its processes.","causal_attribution":"Account of the user and of outlets that relay the user's posts and screenshots. The host machine and agent logs were not inspected."},{"id":"c3","status":"reported","evidence":[{"locator":"I bulk-trashed and archived hundreds of emails from your inbox without showing you the plan first or getting your OK.","relation":"supports","source_id":"s3"},{"locator":"I bulk-trashed and archived hundreds of emails from your [redacted] inbox without showing you the plan first or getting your OK.","relation":"supports","source_id":"s4"},{"locator":"I bulk-trashed and archived hundreds of emails from your inbox without showing you the plan first or getting your OK.","relation":"supports","source_id":"s6"},{"locator":"the tool ended up bulk-deleting hundreds of emails from her inbox","relation":"context","source_id":"s5"},{"locator":"check in after the first batch, not after 200+ emails.","relation":"context","source_id":"s3"},{"locator":"It ended up planning to delete her emails","relation":"context","source_id":"s2"},{"locator":"didn’t stop the artificial intelligence (AI) agent from nearly deleting a Meta researcher’s inbox.","relation":"context","source_id":"s6"}],"assertion":"In the chat screenshots Yue shared, the agent said it had bulk-trashed and archived hundreds of emails from the inbox without showing a plan or getting approval.","causal_attribution":"The count and the verbs come from the agent's own statements in the screenshots. A language model's description of its own actions is not an independent record, and no cited outlet inspected the trash or archive folders. Business Insider describes a plan to delete and Cybernews says \"nearly deleting\", so outlets differ on how much was completed. All outlets relay the same user posts."},{"id":"c4","status":"reported","evidence":[{"locator":"She instructed it not to take action without approval, but OpenClaw lost the prompt during compaction, she wrote.","relation":"supports","source_id":"s2"},{"locator":"\"This has been working well for my toy inbox, but my real inbox was too huge and triggered compaction. During the compaction, it lost my original instruction,\"","relation":"supports","source_id":"s5"},{"locator":"Actually I had gone into the md files and deleted all the “be proactive” instructions I could find before this happened. Maybe I missed something, that’s the part I haven’t figured out yet.","relation":"supports","source_id":"s5"},{"locator":"“Rookie mistake tbh,” Yue replied. “Turns out alignment researchers aren’t immune to misalignment. Got overconfident because this workflow had been working on my toy inbox for weeks. Real inboxes hit different.”","relation":"supports","source_id":"s4"}],"assertion":"Yue attributes the loss of the instruction to context compaction, which the much larger real inbox triggered after the same workflow had worked on a test inbox for weeks, and had not identified the full cause.","causal_attribution":"The user's own explanation, relayed by outlets. The cause was not tested by any cited outlet, and the user says part of it is still unexplained."},{"id":"c5","status":"reported","evidence":[{"locator":"Yue joined Meta after its deal with Scale AI as a director of alignment of its Superintelligence Labs division, according to her LinkedIn profile.","relation":"supports","source_id":"s2"},{"locator":"Yue and Meta didn't respond to requests for comment from Business Insider.","relation":"supports","source_id":"s2"}],"assertion":"Business Insider describes Yue as a director of alignment in Meta's Superintelligence Labs, and reports that neither Yue nor Meta responded to its request for comment.","causal_attribution":"Context only. Business Insider cites the user's LinkedIn profile for the role. Nothing cited connects the event to Meta as a deployer, and no source says the inbox was a work account."}],"effects":[{"label":"The agent's own message in the user's screenshots says it bulk-trashed and archived hundreds of emails from the user's real inbox without approval, and recovery is not reported","claim_id":"c3","direction":"negative"},{"label":"The agent did not stop when told to, and the user had to go to the host machine and kill its processes","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://x.com/summeryue0/status/2025774069124399363","kind":"first_person_account","access":"read","language":"en","translation_note":"The user's own X post of 23 February 2026 (03:25 UTC). The page text carries the post text only. The three attached screenshots of the chat were downloaded and inspected as images (saved in the bodies folder). Their text is cited through the outlets that transcribe it. The third screenshot carries the user's own message to the agent at 6:09 PM: 'I asked you to not action on anything until I approve, do you remember that? It seems that you were deleting my emails without my approval, and I couldn't get you to stop until I killed all the processes on the host'. That text was read from the image.","independence_group":"first-person-x-posts"},{"id":"s2","url":"https://www.businessinsider.com/meta-ai-alignment-director-openclaw-email-deletion-2026-2","kind":"news_report","access":"read","language":"en","translation_note":"Business Insider, 23 February 2026. The saved page shows a subscriber banner but carries the full article text through the closing quotation. Relays the user's X post and screenshots.","independence_group":"first-person-x-posts"},{"id":"s3","url":"https://officechai.com/ai/meta-alignment-director-says-openclaw-ran-amuck-deleting-mails-from-her-inbox-had-to-run-to-her-mac-mini-to-stop-it/","kind":"news_report","access":"read","language":"en","translation_note":"OfficeChai, 23 February 2026. Transcribes the chat screenshots and the user's replies. Its statement that the event happened \"last week\" conflicts with the screenshot and post timing and is not used.","independence_group":"first-person-x-posts"},{"id":"s4","url":"https://futurism.com/artificial-intelligence/meta-ai-safety-mistake-alarm","kind":"news_report","access":"read","language":"en","translation_note":"Futurism, published 25 February 2026. Transcribes the chat screenshots. Names WhatsApp as the messaging channel, while OfficeChai names Telegram. The channel is not used in the record.","independence_group":"first-person-x-posts"},{"id":"s5","url":"https://www.windowscentral.com/artificial-intelligence/meta-summer-yue-director-openclaw-ai-email-deletion","kind":"news_report","access":"read","language":"en","translation_note":"Windows Central, 24 February 2026. Quotes the user's follow-up replies on X. Says \"bulk-deleting\", where the agent's own message says trashed and archived.","independence_group":"first-person-x-posts"},{"id":"s6","url":"https://cybernews.com/ai-news/meta-openclaw-inbox/","kind":"news_report","access":"read","language":"en","translation_note":"Cybernews, 24 February 2026. Read through an Internet Archive capture of 24 February 2026 because the live page returned HTTP 403.","independence_group":"first-person-x-posts"}],"version":1,"ai_roles":["own_use"],"contexts":["everyday_life"],"unknowns":["Whether the trashed and archived emails were restored, and whether any were permanently lost, is not reported in the inspected sources.","The number of emails affected is not established. \"Hundreds\" and \"200+\" come from the agent's own messages in the screenshots.","The event date of 22 February 2026 is inferred and is not stated by any source. The screenshots show message times of about 6:00 to 6:10 PM (one status bar reads 6:04) and a 'Today' marker, and the post was made at 03:25 UTC on 23 February, which is the evening of 22 February in US time zones. The inference assumes the user posted the screenshots the same evening. Futurism's 'On Sunday' refers to the post. OfficeChai says the event happened 'last week', which no other source supports. The phone's time zone is not stated.","Whether the inbox was a personal or a work account is not stated.","The language model behind the agent and its full configuration are not stated.","Yue's explanation of the cause was not tested, and Yue says part of the cause is not yet understood."],"geography":{"basis":"No inspected source states where the user or the host machine was located.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published as a concrete first-person account posted publicly under the user's own name, with the chat screenshots inspected and five outlets read. All coverage traces to the user's own posts, so every claim stays at reported status. The user is named because the user publicised the event.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"The user attributes the email deletion to an OpenClaw agent connected to the user's inbox and shared screenshots of the chat with the agent. The agent's own messages in those screenshots, transcribed by Futurism, OfficeChai and Cybernews, describe its actions as trashing and archiving. The mailbox, the agent logs and the host machine were not inspected by any cited outlet.","status":"reported"},"person_relations":["acted_on_behalf"]},"name":"OpenClaw agent reportedly kept trashing and archiving emails in a Meta AI alignment director's real inbox despite a confirm-first instruction and repeated stop commands","summary":"Summer Yue, whom Business Insider describes as a director of alignment in Meta's Superintelligence Labs, posted on X on 23 February 2026 that an OpenClaw agent connected to Yue's real inbox had started deleting emails after Yue told it to confirm before acting. Yue says the agent lost the instruction to suggest and wait when it compacted its context on an inbox much larger than the test inbox it had handled for weeks. Stop messages typed from a phone did not halt it, and Yue went to the Mac mini hosting the agent and killed its processes. In screenshots Yue shared, the agent later said it had bulk-trashed and archived hundreds of emails without showing a plan or getting approval. Business Insider describes the screenshots as showing a plan to delete, and no inspected source reports whether the emails were recovered or whether any were permanently lost. Yue called the episode a rookie mistake.","incidentDate":"2026-02-22","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"single_interaction","reportedDate":"2026-02-23","aiSystem":"OpenClaw (open-source autonomous AI agent) with access to the user's email inbox. The inspected sources do not name the underlying language model.","aiProduct":"OpenClaw","aiCompany":"OpenClaw (open-source project)","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["loss_of_autonomy"],"harmOutcomeSummary":"The user's post and chat screenshots say the agent kept deleting emails after a confirm-first instruction and three stop messages, so that the user had to kill its processes on the host machine. The wording 'bulk-trashed and archived hundreds of emails' comes from the agent's own message in the screenshots, which is a language model's description of its own actions. Business Insider describes a plan to delete and Cybernews says 'nearly deleting'. No inspected source says whether the emails were recovered or whether any were permanently lost.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One user, who reports that the agent kept deleting emails from the inbox without approval. The senders and recipients of the affected emails are not counted.","victimAgeRange":"adult","platformType":"agent","primarySourceUrl":"https://x.com/summeryue0/status/2025774069124399363","primarySourceLabel":"Summer Yue on X (23 Feb 2026): \"Nothing humbles you like telling your OpenClaw 'confirm before acting'...\"","firstPublishedAt":"2026-09-29T21:16:33.459695+00:00","updatedAt":"2026-09-30T01:17:48.30339+00:00","scopeVersion":"facts-v3","tags":["historical-2026"]},{"id":"2026-oldenburg-school-email-accounts-ai-deepfakes-of-children-threats","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'Der Polizei ist bekannt geworden, dass in den vergangenen Tagen über einen oder mehrere Schüleraccounts der E-Mail-Server Oldenburger Schulen zahlreiche Nachrichten versandt wurden.'; 'Die Nachrichten enthielten unter anderem sogenannte Deepfakes, also manipulierte Darstellungen von Kindern und Jugendlichen.'; 'Darüber hinaus enthielten die versandten Nachrichten zum Teil Gewaltandrohungen sowie Aufforderungen, sich selbst etwas anzutun.'","relation":"supports","source_id":"s1"},{"locator":"'Einige Bilder könnten nach erster Einschätzung der Ermittler/innen kinder- oder jugendpornografische Inhalte darstellen.'","relation":"supports","source_id":"s4"},{"locator":"'Nach einer ersten Bewertung könnten einzelne dieser Darstellungen strafrechtlich relevant sein und den Straftatbestand der Verbreitung kinder- beziehungsweise jugendpornografischer Inhalte erfüllen.'","relation":"supports","source_id":"s1"}],"assertion":"In the days before 22 September 2026, numerous messages were sent through one or more student accounts on the email servers of Oldenburg schools; they included deepfakes (manipulated depictions of children and young people), some of which the police, on a first assessment, consider could meet the offence of distributing child or youth sexual abuse material, and some contained threats of violence and calls to harm oneself.","causal_attribution":"Police statement (reviewer translation: 'The messages contained, among other things, so-called deepfakes, that is, manipulated depictions of children and young people'). Whether the material is criminal is under investigation."},{"id":"c2","status":"reported","evidence":[{"locator":"'Wie ein Polizeisprecher sagte, sollen einige der mit Künstlicher Intelligenz erstellten Bilder den Straftatbestand der Verbreitung kinder- oder jugendpornografischer Inhalte erfüllen.'; 'Schüler und Eltern hatten sich bei der Polizei gemeldet und die Vorfälle angezeigt.'","relation":"supports","source_id":"s2"}],"assertion":"dpa, reporting a police spokesman's statements, describes the images as created with artificial intelligence; students and parents had contacted the police and reported the incidents.","causal_attribution":"dpa's report of a police spokesman (reviewer translation: 'Students and parents had contacted the police and reported the incidents')."},{"id":"c3","status":"reported","evidence":[{"locator":"'Ob und auf welche Weise sich bislang unbekannte Personen unberechtigt Zugang zu diesen Accounts verschafft haben, wird durch die Ermittler geprüft.'","relation":"supports","source_id":"s1"},{"locator":"'Die Ermittlungen zur Urheberschaft und zu den Hintergründen dauern an.'","relation":"supports","source_id":"s4"},{"locator":"'Die Polizei arbeitet eng mit den betroffenen Schulen zusammen. Erste digitale Spuren wurden bereits gesichert und werden derzeit ausgewertet.'","relation":"supports","source_id":"s1"}],"assertion":"Police are investigating whether unknown persons gained unauthorised access to the student accounts, have secured first digital traces, and are working with the affected schools; authorship remains under investigation.","causal_attribution":"Police statement as published and relayed."},{"id":"c4","status":"reported","evidence":[{"locator":"'Über einen oder mehrere Schüleraccounts der Plattform IServ sind in den vergangenen Tagen Nachrichten an Oldenburger Schulen verschickt worden'; 'Das Unternehmen habe keinen Zugriff auf die Nachrichten oder Einsicht in die Schüleraccounts.'; 'Wir gehen aber davon aus, dass der Vorfall nur in Oldenburg stattgefunden hat.'; 'Nach aktuellem Stand sei nicht bekannt, dass Passwörter von Nutzern kompromittiert wurden'; 'keine Hinweise darauf, dass die von den Schulen betriebenen IServ-Instanzen selbst kompromittiert worden seien'","relation":"supports","source_id":"s3"}],"assertion":"The accounts were on the IServ school platform; an IServ spokesman said the company has no access to the messages or accounts and assumes the incident occurred only in Oldenburg; it said no compromise of user passwords was known and there was no indication that the school-operated IServ instances had been compromised.","causal_attribution":"RND's reporting of the platform and of the company spokesman's statement; RND attributes the account description to the Oldenburg police, but the inspected police release does not name IServ, so the platform identification rests on RND."}],"effects":[{"label":"deepfake images of children and young people, some possibly sexual abuse material, were distributed to students through school email accounts together with threats and calls to self-harm","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.presseportal.de/blaulicht/pm/68440/6356847","kind":"official_statement","access":"read","language":"de","translation_note":"Read live on 2026-09-27 (police statement, 22 September 2026; German). Quotations are German originals; English renderings are reviewer translations, no human translator.","independence_group":"pi-oldenburg-stadt"},{"id":"s2","url":"https://www.zeit.de/news/2026-09/22/deepfake-bilder-an-oldenburger-schulen-verschickt","kind":"wire_report","access":"read","language":"de","translation_note":"Read live on 2026-09-27 (dpa Niedersachsen via Zeit Online, 22 September 2026; German). Adds a police spokesman's statements; same police chain as s1. Reviewer translation.","independence_group":"pi-oldenburg-stadt"},{"id":"s3","url":"https://www.rnd.de/lokales/niedersachsen/braunschweig/pornografische-deepfakes-ueber-schueleraccounts-verschickt-braunschweiger-softwarefirma-aeussert-CCBUGZ3AXNAFNBSQO7RTFYIBLM.html","kind":"news_report","access":"read","language":"de","translation_note":"Live fetch returned 403; read on 2026-09-27 via Internet Archive capture (RND, 23 September 2026; German). Police facts relayed from the same police chain; the IServ spokesman's statement is RND's own reporting. Reviewer translation. Its lede repeats the dpa lede verbatim.","independence_group":"rnd-iserv-statement"},{"id":"s4","url":"https://www.oldenburger-onlinezeitung.de/blaulicht/deepfakes-manipulierte-bilder-schueleraccounts-237639.html","kind":"news_report","access":"read","language":"de","translation_note":"Read live on 2026-09-27 (Oldenburger Onlinezeitung, 22 September 2026; German). Rewrite of the police statement. Reviewer translation.","independence_group":"pi-oldenburg-stadt"}],"version":1,"ai_roles":["others_use"],"contexts":["education","privacy"],"unknowns":["Who created the deepfakes and with which AI tool; whether the student accounts were compromised or used by their holders.","Whether the depicted children and young people are real, identifiable students at the schools, and how many were depicted.","How many schools (more than one per the police statement), messages and recipients were involved (police: 'zahlreiche Nachrichten').","Exact dates of sending ('in den vergangenen Tagen' before 22 September 2026).","Any effects on the depicted children or recipients beyond the reports to police, and any school measures."],"geography":{"basis":"The messages were sent through accounts on the email servers of Oldenburg schools and the Oldenburg-Stadt police are investigating (police statement). The depicted children's location is not stated, so affected_person_countries rests on the student recipients at Oldenburg schools. No court proceedings are reported.","court_countries":[],"event_countries":["DE"],"affected_person_countries":["DE"]},"publication":{"basis":"Published under the 2026-09-15 charter as a core depicted_or_impersonated case: the police report AI-made deepfakes of children and young people, some possibly sexual abuse material, sent through school email accounts together with threats and self-harm calls, reported by students and parents. One police chain; RND adds the platform provider's statement. No child or school is identified.","reviewed_on":"2026-09-27"},"ai_involvement":{"basis":"The police statement calls the images deepfakes, 'manipulierte Darstellungen von Kindern und Jugendlichen'; dpa's report of a police spokesman's statements describes them as images created with artificial intelligence ('mit Künstlicher Intelligenz erstellten Bilder'); the written police statement does not mention AI. No tool is identified and no forensic finding is published.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Oldenburg, Germany: numerous messages sent through one or more student accounts on Oldenburg schools' email servers contained AI-manipulated deepfake images of children and young people, some of which police say may meet the offence of distributing child or youth sexual abuse material, alongside threats of violence and calls to self-harm; students and parents reported it and police are investigating (September 2026)","summary":"The Oldenburg-Stadt police inspectorate said on 22 September 2026 that in the preceding days numerous messages had been sent through one or more student accounts on the email servers of Oldenburg schools. The messages contained, among other things, deepfakes (manipulated depictions of children and young people); on an initial assessment some of these could constitute the offence of distributing child or youth sexual abuse material, and some messages contained threats of violence and calls for recipients to harm themselves. According to dpa, students and parents reported the incidents to the police, and dpa, reporting a police spokesman, describes the images as made with artificial intelligence (the written police statement calls them deepfakes, manipulated depictions, without naming AI). Investigators are examining whether unknown persons gained unauthorised access to the accounts; first digital traces were secured and the police are working with the affected schools. RND reports that the accounts were on the IServ school platform, whose provider said it had no access to the messages and believed the incident was limited to Oldenburg. The exact number of schools (the police refer to 'the affected schools', plural), messages, depicted children and recipients, and who created the images, are not reported.","incidentDate":"2026-09-01","incidentKind":"bounded_series","incidentDatePrecision":"month","exposurePattern":"repeated_interactions","reportedDate":"2026-09-22","aiSystem":"Unidentified AI image-manipulation tool used to produce deepfake images of children and young people; the tool and its operator are not reported. The messages were sent through student accounts on the IServ school platform (RND).","aiProduct":"Unidentified image tool","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["exploitation_or_abuse"],"harmOutcomeSummary":"According to the Oldenburg police, AI-made deepfakes of children and young people, some possibly constituting child or youth sexual abuse material, were sent to students through school email accounts together with threats of violence and calls to self-harm; students and parents reported the incidents (police statement; dpa).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":0,"affectedCountStatus":"unquantified","affectedCountEvidence":"The police speak of 'zahlreiche Nachrichten' (numerous messages) and depictions of children and young people but give no number of depicted children, recipients or schools; a count of messages is not a count of people. Unquantified with zero placeholders.","victimAgeRange":"minor","jurisdiction":"DE-NI","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://www.presseportal.de/blaulicht/pm/68440/6356847","primarySourceLabel":"Polizeiinspektion Oldenburg-Stadt (POL-OL) on Presseportal, 22 September 2026: Manipulierte Bilder über Schüleraccounts versandt - Polizei ermittelt","firstPublishedAt":"2026-09-27T03:39:47.296658+00:00","updatedAt":"2026-09-30T01:17:47.498823+00:00","scopeVersion":"facts-v3","tags":["deepfake","csam","school","minors","germany","niedersachsen","school-email","depicted-or-impersonated"]},{"id":"2026-hudsonville-michigan-ai-voice-clone-closing-wire-fraud","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"\"the four-bedroom, $460,000 condo in the nearby suburb of Hudsonville checked every box\"; \"But on May 19 this year, days before closing, they got a startling email. To keep the closing on schedule, it said, the couple needed to wire $66,026.92 to a specified bank account within 24 hours to cover a down payment and closing costs\"; \"received a call to confirm the instructions, and the voice on the phone sounded just like their loan officer\"; \"The couple wired the money.\"; \"The closing was canceled hours before the couple was scheduled to sign the final paperwork\"; \"the couple instead rushed to borrow money from family and other sources\"; \"had two extra letters: UnitedsMortgages, instead of UnitedMortgage\".","relation":"supports","source_id":"s1"},{"locator":"\"必須在24小時內把頭期款與交屋費用共計6萬6026.92元匯到指定銀行帳戶\"; \"收到一封緊急電郵，結果因此損失6萬多元\".","relation":"supports","source_id":"s2"}],"assertion":"On 19 May 2026, days before closing on a US$460,000 condo in Hudsonville, Michigan, the couple received an email demanding a US$66,026.92 wire within 24 hours from an address with two extra letters and listing a phone number two digits off their loan officer's; the husband then received a call confirming the instructions in a voice that sounded just like the loan officer; the couple borrowed from family and wired the money, which was gone by the time the real loan officer's statement arrived the day before closing, and the closing was cancelled.","causal_attribution":"The couple's account to CNN; the World Journal item relays CNN."},{"id":"c2","status":"reported","evidence":[{"locator":"\"ensnared in a sophisticated real estate scam that uses suspected AI voice cloning and fake emails to target homebuyers in the frantic days before closing\"; \"The 64-year-old said he now believes the phone call that followed the emails was from a spoofed number and used AI-assisted voice cloning\"; \"home-buying process was compromised\"; \"likely took snippets of the loan officer\"; \"Neither the company nor the loan officer have been accused of any complicity in the scam\".","relation":"supports","source_id":"s1"},{"locator":"\"詐騙份子利用AI語音複製與偽造電郵\".","relation":"supports","source_id":"s2"}],"assertion":"The husband believes the call came from a spoofed number using AI-assisted voice cloning; CertifID's co-founder, working with the couple and federal officials, said someone's email in the transaction was likely compromised and that the scammers likely cloned the loan officer's voice from his social-media posts; CNN describes the fraud as using 'suspected AI voice cloning'.","causal_attribution":"Attribution by the victim and a fraud-prevention firm involved in the case; no forensic confirmation is published."},{"id":"c3","status":"reported","evidence":[{"locator":"\"They eventually got money from their mutual fund and completed the home purchase in early June\"; \"Internet Crime Complaint Center, the agency\"; \"wired the money to has since closed, the couple said\"; \"We are just very apprehensive\"; \"Do we need to work a little bit longer?\".","relation":"supports","source_id":"s1"},{"locator":"\"終於在6月初完成購屋手續。他們已向FBI「網際網路犯罪申訴中心」(Internet Crime Complaint Center)報案\".","relation":"supports","source_id":"s2"}],"assertion":"The couple later completed the purchase in early June 2026 from their mutual fund, filed a report with the FBI's Internet Crime Complaint Center, and say the receiving account has closed; they describe apprehension and discussions about delaying retirement.","causal_attribution":"The couple's account to CNN."}],"effects":[{"label":"a couple wired US$66,026.92 to scammers after a spoofed email and a call in a voice resembling their loan officer; closing cancelled, money not recovered","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.cnn.com/2026/09/15/us/homebuyers-voice-cloning-scam","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-19 (CNN, Faith Karimi, published 15 Sep 2026, updated the same day). Interviews with the couple, CertifID's Tyler Adams and the National Association of Realtors; FBI figures; lender's counsel comment.","independence_group":"cnn"},{"id":"s2","url":"https://www.worldjournal.com/wj/story/121469/9231485","kind":"news_report","access":"read","language":"zh","translation_note":"Read in Traditional Chinese on 2026-09-16 and re-read on 2026-09-19 (World Journal, 15 Sep 2026): a relay of CNN's report, so it does not corroborate it; translation by the reviewer. Cited for the exact amount and the June completion of the purchase as reported in Chinese.","independence_group":"cnn"}],"version":1,"ai_roles":["others_use"],"contexts":["finance","everyday_life"],"unknowns":["Whether the call in fact used AI voice cloning; no forensic finding is reported.","Whose email account was compromised and how the scammers obtained the transaction details.","Whether any funds have been recovered or suspects identified.","The exact loss after any recovery; CNN reports the wired amount and that the money was gone."],"geography":{"basis":"Hudsonville, a suburb of Grand Rapids, Michigan, per CNN's report and photographs; the couple live there. No court proceeding; an FBI IC3 report was filed.","court_countries":[],"event_countries":["US"],"affected_person_countries":["US"]},"publication":{"basis":"Published under the 2026-09-15 charter as an impersonation-fraud case with a concrete, quantified consequence: a couple lost US$66,026.92 after a call in a voice resembling their loan officer that they and a fraud-prevention firm attribute to AI voice cloning. One original report (CNN) and one relay read; AI involvement recorded as suspected; the couple are not named in this record.","reviewed_on":"2026-09-19"},"ai_involvement":{"basis":"CNN describes 'suspected AI voice cloning'; the husband believes the confirming call used AI-assisted voice cloning from a spoofed number, and CertifID's co-founder, who is working on the case, says the scammers likely cloned the loan officer's voice from social-media clips. No technical confirmation is published. If the attribution is right, the AI impersonated a third party (the loan officer) in a live call with the victim; the email side of the fraud is ordinary spoofing.","status":"suspected"},"person_relations":["depicted_or_impersonated","communicated_with"]},"name":"Hudsonville (Grand Rapids area), Michigan: a couple wired US$66,026.92 to scammers after a spoofed email and a phone call in what sounded like their loan officer's voice, which they and a fraud-prevention firm attribute to AI voice cloning","summary":"A married couple in their sixties buying a US$460,000 condo in Hudsonville, near Grand Rapids, Michigan, received an email on 19 May 2026, days before closing, telling them to wire US$66,026.92 for the down payment and closing costs within 24 hours. The email listed a phone number differing from their loan officer's by two digits, and the husband then received a call confirming the instructions in a voice that sounded just like the loan officer. The couple borrowed from family and other sources and wired the money. The day before closing their real loan officer sent the actual statement; the closing was cancelled hours before signing and the money was gone. The husband now believes the call came from a spoofed number using AI-assisted voice cloning; Tyler Adams of CertifID, which is working with the couple and federal officials, said someone's email in the transaction was probably compromised and that the scammers likely cloned the loan officer's voice from social-media clips. The sender's address had two extra letters ('UnitedsMortgages' instead of 'UnitedMortgage'). Neither the lender nor the loan officer is accused of complicity. The couple later completed the purchase in early June from their mutual fund, reported the loss to the FBI's Internet Crime Complaint Center, and describe lasting apprehension and have discussed delaying retirement. CNN reported the case on 15 September 2026; the account the money went to has since closed.","incidentDate":"2026-05-19","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"single_interaction","reportedDate":"2026-09-15","aiSystem":"Suspected AI voice cloning of a mortgage loan officer, combined with a spoofed phone number and a look-alike email domain (tool not identified; attribution by the victims and CertifID)","aiProduct":"Unidentified voice-cloning tool (suspected)","severity":"medium","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["financial_loss","psychological_distress"],"harmOutcomeSummary":"A couple wired US$66,026.92, partly borrowed from family, to a fraudulent account after a spoofed email and a call in what sounded like their loan officer's voice; the money was not recovered as of CNN's report, their closing was cancelled and later completed from savings, and they describe lasting apprehension and have discussed working longer before retiring.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":2,"affectedCountStatus":"exact","affectedCountEvidence":"CNN describes one married couple who wired the funds and bore the loss. Exact count of two.","victimAgeRange":"adult","jurisdiction":"US","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://www.cnn.com/2026/09/15/us/homebuyers-voice-cloning-scam","primarySourceLabel":"CNN, 15 Sep 2026: 'We both missed the signs:' How two homebuyers lost $66,000 in a suspected voice-cloning scam","firstPublishedAt":"2026-09-20T03:19:50.137088+00:00","updatedAt":"2026-09-30T01:17:39.755493+00:00","scopeVersion":"facts-v3","tags":["voice-cloning","impersonation","wire-fraud","real-estate-scam","mortgage-closing","united-states","michigan","financial-loss","ic3"]},{"id":"2026-singapore-deepfake-zoom-pm-impersonation-funding-scam","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'A person lost at least $4.9 million after falling for a scam involving the impersonation of senior government officials'; 'received a WhatsApp message with a profile photo of Mr Wong Hong Kuan'; 'transferred the money through a series of transactions to a corporate bank account supplied by the scammers'.","relation":"supports","source_id":"s2"},{"locator":"'He lost at least $4.9 million after believing that Prime Minister Lawrence Wong had sought his help'; 'the email was sent from a Proton Mail account'; 'invited to a Zoom video conference ... fabricated using deepfake artificial intelligence technology'.","relation":"supports","source_id":"s3"},{"locator":"'In one case, a victim lost at least S$4.9 million (US$3.8 million) in what was claimed to be funding assistance related to the Strait of Hormuz'.","relation":"supports","source_id":"s1"}],"assertion":"A businessman lost at least S$4.9 million after being approached by scammers posing as the Secretary to the Cabinet, signing an NDA, receiving a fake letter of guarantee with the Prime Minister's signature, attending a deepfake Zoom conference of government officials, and then transferring money in a series of transactions to a corporate account.","causal_attribution":"Singapore Police Force advisory relayed by three outlets; single official chain."},{"id":"c2","status":"reported","evidence":[{"locator":"'the speech did not synchronise with the speakers' lips'; 'the speech was broadcast via one account throughout the call'; 'end with a deepfake video of PM Wong delivering closing remarks, which included an acknowledgement of the victim's attendance'.","relation":"supports","source_id":"s1"}],"assertion":"Police obtained the footage of the fabricated Zoom conference depicting the Prime Minister, the President, Minister Indranee Rajah, MAS representatives and foreign officials, and identified deepfake indicators: speech out of sync with lips, audio broadcast from one account, and a distorted background and Zoom logo; the fake Prime Minister's closing remarks acknowledged the victim's attendance.","causal_attribution":"Police statement on their own examination of the footage, reported by CNA."}],"effects":[{"label":"a businessman lost at least S$4.9 million after a deepfake video conference of government officials and a fake letter of guarantee","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.channelnewsasia.com/singapore/impersonation-scam-fake-zoom-meeting-footage-lawrence-wong-tharman-indranee-police-6125691","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-18 (CNA, 16 May 2026). Reports the police release of the fabricated Zoom footage, the participants depicted and the deepfake indicators.","independence_group":"spf-advisory"},{"id":"s2","url":"https://www.straitstimes.com/singapore/victim-loses-at-least-4-9m-in-scam-involving-deepfakes-of-pm-wong-government-officials","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-18 (Straits Times, 14 May 2026). Reports the SPF advisory: WhatsApp and proton.me approach, NDA, letter of guarantee, Zoom call, transfers, and the 9 May SIM-card charges.","independence_group":"spf-advisory"},{"id":"s3","url":"https://www.asiaone.com/singapore/police-spf-advisory-government-official-impersonation-scam-pm-lawrence-wong-funding-assistance-hormuz-49-million","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-18 (AsiaOne, 13/14 May 2026). Same SPF advisory with screenshots of the WhatsApp and email approach.","independence_group":"spf-advisory"}],"version":1,"ai_roles":["others_use"],"contexts":["finance","public_services"],"unknowns":["The victim's identity, business and the exact date of the transfers are not published (advisory 14 May 2026).","No arrest for this loss or recovery of funds is reported.","The deepfake tools used are not identified.","Whether the victim has pursued civil recovery is unknown."],"geography":{"basis":"Singapore Police Force advisory; the victim is described as a Singapore business professional who had dealt with government officials (Straits Times, CNA). No court proceeding for this loss is reported; the 9 May SIM-card charges concern earlier cases.","court_countries":[],"event_countries":["SG"],"affected_person_countries":["SG"]},"publication":{"basis":"Published under the 2026-09-15 charter as an impersonation-fraud case with a large documented loss to one person, where the police examined and released the AI-generated footage. Three Singapore outlets read, all relaying SPF advisories; claims recorded as reported. Victim unnamed; impersonated officials are public figures.","reviewed_on":"2026-09-18"},"ai_involvement":{"basis":"The Singapore Police Force obtained the Zoom footage and described specific deepfake indicators (speech out of sync with lips, audio broadcast from a single account, distorted background and logo). The AI content depicted and impersonated named officials, and the fabricated closing remarks were addressed to the victim, acknowledging his attendance, which is why communicated_with is also recorded.","status":"supported"},"person_relations":["communicated_with","depicted_or_impersonated"]},"name":"Singapore: a businessman lost at least S$4.9 million after a deepfake Zoom 'briefing' with fabricated Prime Minister Lawrence Wong and other officials asked him for 'urgent funding assistance'","summary":"In May 2026 the Singapore Police Force (SPF) reported that a man had lost at least S$4.9 million (about US$3.8 million) to a government-official impersonation scam. He received a WhatsApp message carrying the profile photo of Secretary to the Cabinet Wong Hong Kuan and an email from a proton.me address in that name, requesting urgent funding assistance for 'the situation in the Strait of Hormuz', with a fake 'letter of guarantee' bearing the Prime Minister's signature promising reimbursement within 15 business days; he signed a non-disclosure agreement and supplied a copy of his identity card. He was then invited to a Zoom video conference in which Prime Minister Lawrence Wong, President Tharman Shanmugaratnam, Minister Indranee Rajah, Monetary Authority of Singapore representatives and foreign officials appeared; all were fabricated with deepfake AI, and the closing 'remarks' by the fake Prime Minister acknowledged the victim's attendance. Contacted afterwards on WhatsApp by a scammer posing as a lawyer, he transferred the money in a series of transactions to a corporate bank account, and realised the fraud only when he contacted the real cabinet secretary. On 16 May the police released footage of the fake conference, noting lips out of sync with speech, audio broadcast from a single account and a distorted background.","incidentDate":"2026-05-01","incidentKind":"single_event","incidentDatePrecision":"month","exposurePattern":"single_interaction","reportedDate":"2026-05-14","aiSystem":"Deepfake AI video and audio fabricating Prime Minister Lawrence Wong, President Tharman Shanmugaratnam, Minister Indranee Rajah and other officials in a Zoom conference (tools not identified)","aiProduct":"Unidentified video tool","severity":"high","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["financial_loss"],"harmOutcomeSummary":"A businessman transferred at least S$4.9 million to scammers after a deepfake video conference fabricating the Prime Minister and other officials; the police documented the AI-generated footage.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"Police describe a single victim who lost at least S$4.9 million. Exact count of one; the impersonated officials are not counted.","victimAgeRange":"adult","jurisdiction":"SG","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://www.straitstimes.com/singapore/victim-loses-at-least-4-9m-in-scam-involving-deepfakes-of-pm-wong-government-officials","primarySourceLabel":"The Straits Times, 14 May 2026: Victim loses at least $4.9m in scam involving deepfakes of PM Wong, government officials (Singapore Police Force advisory)","firstPublishedAt":"2026-09-18T03:25:14.306192+00:00","updatedAt":"2026-09-30T01:17:53.419086+00:00","scopeVersion":"facts-v3","tags":["deepfake","government-impersonation","zoom","video-conference","fraud","singapore","financial-loss","police-documented"]},{"id":"2026-kumar-sdt-strike-off-ai-citations","caseFacts":{"claims":[{"id":"c1","status":"documented","evidence":[{"locator":"SDT judgment, Allegation 2.1 findings and the schedule of false/miscited authorities.","relation":"supports","source_id":"s1"},{"locator":"RollOnFriday's listing of the bogus citations.","relation":"context","source_id":"s4"}],"assertion":"Allegation 2.1 was found proved: Kumar's 12 March 2026 Answer to the SRA's Rule 12 Statement contained misleading quotations and citations produced with generative AI, including the non-existent 'SRA v Chan [2020] EWHC 1502', the miscited 'SRA v James, MacGregor & Naylor [2018] EWCA Civ 1420' (in reality an IP case) and a misattributed Baxendale-Walker passage.","causal_attribution":"Directly established by the tribunal's written judgment; trade press accounts are consistent."},{"id":"c2","status":"documented","evidence":[{"locator":"SDT judgment, Allegation 2.2 findings and the 13 April acceptance.","relation":"supports","source_id":"s1"}],"assertion":"Allegation 2.2 was found proved: his 9 April 2026 email admitting AI use was itself AI-drafted and contained further errors, which he accepted on 13 April 2026.","causal_attribution":"Directly established by the tribunal's written judgment."},{"id":"c3","status":"documented","evidence":[{"locator":"SDT judgment, sanction and reasoning passages.","relation":"supports","source_id":"s1"},{"locator":"Outer Temple's case note confirming the outcome and the 'first SDT case on a lawyer's use of AI' framing.","relation":"context","source_id":"s5"}],"assertion":"On 25 August 2026 the SDT struck Kumar off the Register of Foreign Lawyers with culpability 'very high', stating it would have struck him off on either allegation alone; the tribunal invoked Ayinde v Haringey LBC [2025] EWHC 1383 (Admin).","causal_attribution":"Directly established by the tribunal's written judgment; the 'first AI case' framing comes from the SRA's counsel and is attributed."},{"id":"c4","status":"documented","evidence":[{"locator":"SDT judgment, conviction allegation and sentence passages.","relation":"supports","source_id":"s1"},{"locator":"RollOnFriday's Isleworth Crown Court reference (recorded as a discrepancy; the judgment controls).","relation":"contradicts","source_id":"s4"}],"assertion":"The parallel ground was his 29 January 2024 conviction under s.21 of the Immigration, Asylum and Nationality Act 2006 — recorded by the judgment as at the Central Criminal Court (RollOnFriday says Isleworth Crown Court, a discrepancy) — sentenced on 26 April 2024 to a 12-month community order with 150 hours' unpaid work.","causal_attribution":"The conviction ground is established by the judgment; the convicting-court discrepancy across outlets is preserved."}],"effects":[{"label":"lawyer struck off after AI-generated false citations in his disciplinary defence","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://solicitorstribunal.org.uk/wp-content/uploads/2026/03/12884-2026-Kumar-.pdf","kind":"tribunal_judgment","access":"read","language":"en","translation_note":"Judgment PDF read on 2026-09-15 (25 Aug 2026): allegations, findings, sanction, panel, and the Ayinde v Haringey invocation.","independence_group":"sdt"},{"id":"s2","url":"https://www.legalfutures.co.uk/latest-news/lawyer-struck-off-for-using-fake-ai-generated-cases-before-sdt","kind":"trade_press","access":"read","language":"en","translation_note":"Read in English on 2026-09-15 (4 Sep 2026).","independence_group":"legal-futures"},{"id":"s3","url":"https://www.lawgazette.co.uk/news/foreign-lawyer-produced-ai-generated-false-citations-at-sdt/5127825.article","kind":"trade_press","access":"read","language":"en","translation_note":"Read in English on 2026-09-15 (4 Sep 2026, Hyde).","independence_group":"law-gazette"},{"id":"s4","url":"https://www.rollonfriday.com/news-content/first-lawyer-struck-ai-addiction","kind":"trade_press","access":"read","language":"en","translation_note":"Read in English on 2026-09-15 (11 Sep 2026). Colour and the specific bogus citations; its 'AI addiction' framing is editorial joking, not a finding.","independence_group":"rollonfriday"},{"id":"s5","url":"https://www.outertemple.com/joshua-hitchens-acts-for-the-sra-in-the-first-solicitors-disciplinary-tribunal-case-on-a-lawyers-use-of-ai/","kind":"counsel_case_note","access":"read","language":"en","translation_note":"Read in English on 2026-09-15 (8 Sep 2026). SRA counsel's chambers' note: case number, dates, judgment link, and the 'first SDT case on a lawyer's use of AI' framing; participant-side account, recorded as such.","independence_group":"outer-temple"}],"version":1,"ai_roles":["own_use"],"contexts":["work","justice"],"unknowns":["The specific generative AI tool is not named in the inspected accounts.","The convicting court appears as the Central Criminal Court in the judgment and Isleworth Crown Court in RollOnFriday; the judgment controls but the discrepancy is unresolved in the inspected material.","Whether Kumar seeks to appeal the strike-off is not reported.","His employment status after the strike-off is not reported; the Law Gazette's employment background predates it."],"geography":{"basis":"Events: his practice and the SRA proceedings in England. Affected person: Kumar, on the Register of Foreign Lawyers in England and Wales. Court: the Solicitors Disciplinary Tribunal; the parallel conviction was at the Central Criminal Court (per the judgment; RollOnFriday's Isleworth Crown Court is a recorded discrepancy).","court_countries":["GB"],"event_countries":["GB"],"affected_person_countries":["GB"]},"publication":{"basis":"Published under the 2026-09-15 charter as an own-use, work-context adverse consequence with tribunal-found AI misconduct and a dated, career-ending sanction. This applies the charter's individual-review rule to the AI-sanction class; a class-level ruling is not required. Kumar is named in a public tribunal judgment; the parallel conviction ground is recorded for completeness and is not used to inflate the AI link. RollOnFriday's 'AI addiction' framing is recorded as editorial joking.","reviewed_on":"2026-09-15"},"ai_involvement":{"basis":"Tribunal-found: the 12 March 2026 Answer's misleading quotations and citations were produced with generative AI, and the 9 April 2026 email admitting AI use was itself AI-drafted with further errors (accepted 13 April). The specific tool is not named in the inspected accounts.","status":"supported"},"person_relations":["communicated_with"]},"name":"SDT strikes solicitor Abhishek Kumar off the Register of Foreign Lawyers after AI-generated false citations in his SRA defence","summary":"On 25 August 2026 the Solicitors Disciplinary Tribunal struck Abhishek Kumar off the Register of Foreign Lawyers after finding proved that his 12 March 2026 Answer to the SRA's Rule 12 Statement contained misleading quotations and citations produced with generative AI — including a non-existent 'SRA v Chan [2020] EWHC 1502' and a miscited 'SRA v James, MacGregor & Naylor [2018] EWCA Civ 1420' that is actually an intellectual-property case — and that his 9 April 2026 email admitting AI use was itself AI-drafted with further errors. The tribunal said it would have struck him off on that allegation alone; the parallel ground was his January 2024 conviction under s.21 of the Immigration, Asylum and Nationality Act 2006. This is the SDT's first case on a lawyer's use of AI, per the SRA's counsel.","incidentDate":"2026-03-12","incidentEndDate":"2026-08-25","incidentKind":"bounded_series","incidentDatePrecision":"range","exposurePattern":"repeated_interactions","reportedDate":"2026-09-04","aiSystem":"Generative AI (tool not named in inspected accounts)","aiProduct":"Unidentified AI tool","aiCompany":"Unknown","severity":"high","verificationStatus":"verified","harmCategories":[],"harmOutcomes":["professional_harm","legal_harm"],"harmOutcomeSummary":"Career-ending professional consequence for the lawyer who submitted AI-generated false citations in his own disciplinary defence: struck off the Register of Foreign Lawyers on 25 August 2026, with culpability rated 'very high'.","frameworkFacets":[],"causationStatus":"established","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One documented harmed person: Kumar himself, the AI user struck off (SDT judgment). No client or third-party harm is reported in the inspected sources and none is counted.","victimAgeRange":"adult","jurisdiction":"GB","platformType":"other","outcomeType":"regulatory_action","outcomeStatus":"resolved","primarySourceUrl":"https://solicitorstribunal.org.uk/wp-content/uploads/2026/03/12884-2026-Kumar-.pdf","primarySourceLabel":"Solicitors Disciplinary Tribunal judgment, SRA Ltd v Abhishek Kumar, Case No. 12884-2026 (25 Aug 2026)","firstPublishedAt":"2026-09-15T06:18:05.203137+00:00","updatedAt":"2026-09-30T01:17:43.433309+00:00","scopeVersion":"facts-v3","tags":["work","justice","legal-profession","strike-off","fabricated-citations","sdt","own-use","uk"]}]}