{"meta":{"exportedAt":"2026-10-09T08:43:34.414Z","formatVersion":2,"selection":{"q":"security","system":"","harm":"","context":"","country":"","role":"","relation":"core","evidence":"","year":"","response":"regulatory","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":6,"coverage":{"cases":6,"countries":5,"languages":4,"unknownLocation":0,"locationPending":0,"unknownLanguage":0,"unknownDate":1,"lawsuits":0,"regulatory":6,"minors":2,"coreRelations":6,"contextualRelations":0,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-bhopal-suspected-ai-cloned-friend-voice-call-security-guard-rs35000-loss","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'In a suspected case of AI-enabled cyber fraud, a 50-year-old security guard from the TT Nagar area was cheated of nearly Rs 35,000 after a cybercriminal impersonated his friend by mimicking his voice'; 'impersonated his friend using a suspected AI-cloned voice'","relation":"supports","source_id":"s1"}],"assertion":"A 50-year-old security guard from the TT Nagar area of Bhopal was cheated of nearly Rs 35,000 after a caller impersonated a friend by mimicking the friend's voice, which the outlet describes as a suspected case of AI-enabled cyber fraud.","causal_attribution":"One outlet, citing unnamed reports; the AI cloning is described as suspected and its basis is not given."},{"id":"c2","status":"reported","evidence":[{"locator":"'received a call from an unidentified person on Sep 30'; 'The caller spoke in a voice that sounded like that of his friend and claimed to urgently need Rs 15,000'; 'He also sent a QR code for the money transfer'","relation":"supports","source_id":"s1"}],"assertion":"On 30 September the guard received a call from an unidentified person who spoke in a voice that sounded like the friend, claimed to need Rs 15,000 urgently and sent a QR code.","causal_attribution":"One outlet, citing unnamed reports."},{"id":"c3","status":"reported","evidence":[{"locator":"'transferred Rs 5,000 to the account linked to the QR code'; 'he transferred another Rs 10,000 after receiving a further request'; 'asked for Rs 20,000 more, which the victim transferred to the same QR code'","relation":"supports","source_id":"s1"}],"assertion":"The guard transferred Rs 5,000, another Rs 10,000 the following day after a further request, and Rs 20,000 more after the caller made contact again, all to the same QR code.","causal_attribution":"One outlet, citing unnamed reports."},{"id":"c4","status":"reported","evidence":[{"locator":"'contacted his friend on his actual mobile number the next day to ask when the money would be returned'; 'he was shocked to learn that his friend had neither called him nor asked for any money'","relation":"supports","source_id":"s1"}],"assertion":"The guard learned of the fraud on reaching the friend on the friend's actual mobile number; the friend had neither called nor asked for money.","causal_attribution":"One outlet, citing unnamed reports."},{"id":"c5","status":"reported","evidence":[{"locator":"'TT Nagar police have registered a case and launched an investigation'","relation":"supports","source_id":"s1"}],"assertion":"TT Nagar police registered a case and opened an investigation.","causal_attribution":"Reported by one outlet; no police document was inspected."}],"effects":[{"label":"lost about Rs 35,000 after calls in a voice that sounded like a friend, suspected to be AI-cloned","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.freepressjournal.in/bhopal/bhopal-cyber-fraud-ai-voice-cloning-scam-dupes-security-guard-of-35000","kind":"news_report","access":"read","language":"en","translation_note":"Read in English by the research agent (an AI) on 2026-10-05 (HTTP 200); no translation was involved and no human reviewer read the article. Staff Reporter byline; attributes the facts to unnamed reports.","independence_group":"fpj-bhopal-voice"}],"version":1,"ai_roles":["others_use"],"contexts":["finance","everyday_life"],"unknowns":["Whether the voice was AI-generated; the report calls it suspected and cites no police or forensic finding.","Who made the calls and whether anyone has been identified or any money recovered.","The dates of the third transfer and of the call to the friend; the report gives only Sep 30 for the first call and relative days after it.","Which tool, if any, was used."],"geography":{"basis":"The report describes a security guard from the TT Nagar area of Bhopal, Madhya Pradesh, India, and a case registered by TT Nagar police. No court proceeding is reported.","court_countries":[],"event_countries":["IN"],"affected_person_countries":["IN"]},"publication":{"basis":"Published under the 2026-09-15 charter as a core case with AI involvement recorded as suspected: a caller in a voice that sounded like a friend obtained about Rs 35,000 from a Bhopal security guard, and police registered a case, according to one outlet. The guard is named in the source and not named here.","reviewed_on":"2026-10-05"},"ai_involvement":{"basis":"Free Press Journal describes a suspected case of AI-enabled cyber fraud and a suspected AI-cloned voice; the caller spoke in a voice that sounded like the friend. If the voice was AI-made, it was the channel through which the guard was spoken to (communicated_with) and it impersonated the friend (depicted_or_impersonated). No police statement, recording or forensic finding on the voice is reported.","status":"suspected"},"person_relations":["communicated_with","depicted_or_impersonated"]},"name":"Bhopal: a security guard lost about Rs 35,000 to a caller whose voice sounded like a friend, reported as a suspected AI voice-cloning fraud","summary":"Free Press Journal reported on 4 October 2026 that a 50-year-old security guard from the TT Nagar area of Bhopal, Madhya Pradesh, was cheated of nearly Rs 35,000 after a caller impersonated a friend by mimicking the friend's voice. According to the report, the call came on 30 September from an unidentified person who claimed to need money urgently and sent a QR code. The guard made three transfers (Rs 5,000, Rs 10,000 and Rs 20,000), then reached the friend on the friend's own number and learned that the friend had not called. The outlet calls it a suspected case of AI-enabled fraud with a suspected AI-cloned voice. TT Nagar police registered a case and opened an investigation. No source confirms that the voice was AI-generated.","incidentDate":"2026-09-30","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"repeated_interactions","reportedDate":"2026-10-04","aiSystem":"A suspected AI-cloned voice imitating the victim's friend on a phone call, as described by Free Press Journal (tool not identified; AI use not confirmed)","aiProduct":"Unidentified voice-cloning tool (suspected)","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["financial_loss"],"harmOutcomeSummary":"A Bhopal security guard lost about Rs 35,000 in three transfers to a caller whose voice sounded like a friend, in what Free Press Journal reports as a suspected AI voice-cloning fraud.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"One person, the security guard who transferred about Rs 35,000 (Free Press Journal). The friend whose voice was imitated is not reported to have been harmed and is not counted. Exact 1.","victimAgeRange":"adult","jurisdiction":"IN","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://www.freepressjournal.in/bhopal/bhopal-cyber-fraud-ai-voice-cloning-scam-dupes-security-guard-of-35000","primarySourceLabel":"Free Press Journal, 4 October 2026: Bhopal Cyber Fraud: AI Voice Cloning Scam Dupes Security Guard Of Rs 35,000","firstPublishedAt":"2026-10-05T03:16:27.48142+00:00","updatedAt":"2026-10-05T03:16:27.48142+00:00","scopeVersion":"facts-v3","tags":["voice-cloning","impersonation-scam","fraud","bhopal","madhya-pradesh","india","depicted-or-impersonated"]},{"id":"2026-thanh-hoa-fabricated-sexual-images-extortion-threats-officials","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'Từ đầu tháng 10/2026 đến nay'; 'Có nạn nhân bị yêu cầu chuyển tới 1,5 tỷ đồng'; 'đã tiếp nhận trình báo của gần 20 trường hợp bị đe dọa, tống tiền bằng hình ảnh, video nhạy cảm bị cắt ghép'","relation":"supports","source_id":"s1"},{"locator":"'Gần 20 người ở Thanh Hóa trình báo công an với nội dung bị đe dọa, tống tiền bằng hình ảnh, video nhạy cảm được cắt ghép bằng công nghệ'","relation":"supports","source_id":"s3"}],"assertion":"Thanh Hóa Provincial Police said that since the start of October 2026 its cybersecurity division had received reports from nearly 20 people threatened and extorted with spliced sexual images and videos, and that one victim was asked to transfer as much as 1.5 billion dong.","causal_attribution":"Police account of complaints received; no individual case is detailed in the release."},{"id":"c2","status":"reported","evidence":[{"locator":"'sử dụng công nghệ để cắt ghép, chỉnh sửa hình ảnh, video theo hướng nhạy cảm'; 'các đối tượng có xu hướng nhắm vào cán bộ, công chức'; 'thu thập hình ảnh cá nhân của nạn nhân trên mạng xã hội'; 'rồi gửi cho chính nạn nhân kèm lời đe dọa sẽ phát tán công khai nếu không chuyển tiền'; 'trong đó có cả cán bộ lãnh đạo cấp xã'","relation":"supports","source_id":"s1"}],"assertion":"According to the police, the senders collected victims' personal images from social media, used technology to splice and edit them into sexual images and videos, and sent them to the victims with threats to publish them unless money was transferred; they tended to target officials and civil servants, including commune-level leaders.","causal_attribution":"The police describe the method as splicing with technology without naming AI."},{"id":"c3","status":"reported","evidence":[{"locator":"'Theo thông tin tổng hợp từ Phòng An ninh mạng'; 'Các đối tượng sử dụng trí tuệ nhân tạo (AI), công nghệ deepfake để ghép khuôn mặt nạn nhân vào hình ảnh có nội dung nhạy cảm'; 'Sau đó, chúng liên tục nhắn tin, gọi điện, đe dọa phát tán hình ảnh nhằm gây tâm lý bất an, buộc nạn nhân chuyển tiền'","relation":"supports","source_id":"s2"}],"assertion":"Báo Thanh Hóa, reporting information compiled from the police cybersecurity division, says the senders used AI and deepfake technology to put victims' faces onto sexual images and then repeatedly texted and called to force them to pay.","causal_attribution":"One outlet's statement within a section attributed to police information; it is not a direct police quote, and the police release says only 'technology'."},{"id":"c4","status":"reported","evidence":[{"locator":"'Một người bị đe dọa cho biết, khi không trả lời, các đối tượng tiếp tục nhắn tin, dọa đưa hình ảnh lên mạng xã hội để làm mất uy tín'; 'Những lời đe dọa liên tiếp khiến người này hoang mang'","relation":"supports","source_id":"s2"}],"assertion":"Báo Thanh Hóa reports that one threatened person said the senders kept texting and threatening to post the images on social media when the person did not reply, and reports that the threats left the person distressed.","causal_attribution":"Account of one unnamed person as reported by one outlet."},{"id":"c5","status":"reported","evidence":[{"locator":"'đối tượng phát tán hàng loạt hình ảnh giả mạo vào các hội nhóm trên mạng xã hội'","relation":"supports","source_id":"s2"}],"assertion":"Báo Thanh Hóa reports that in some cases, when threats failed, the senders spread the fake images in social media groups.","causal_attribution":"Reported by one outlet; the number of such cases is not given."},{"id":"c6","status":"reported","evidence":[{"locator":"'Nhờ được tuyên truyền, hướng dẫn kịp thời'; 'nhiều trường hợp đã không mắc bẫy'","relation":"supports","source_id":"s1"}],"assertion":"The police say many of those targeted did not pay after police guidance.","causal_attribution":"Police statement; whether anyone paid is not reported."}],"effects":[{"label":"sent fabricated sexual images of themselves with demands for money and threats to publish them","claim_id":"c1","direction":"negative"},{"label":"distress from repeated threats to post the fabricated images on social media","claim_id":"c4","direction":"negative"}],"sources":[{"id":"s1","url":"https://conganthanhhoa.gov.vn/phong-chong-toi-pham/thong-bao-tim-chu-so-huu-phuong-tien/kip-thoi-ngan-chan-nhieu-vu-tong-tien-tren-khong-gian-mang.html","kind":"official_statement","access":"read","language":"vi","translation_note":"Thanh Hóa Provincial Police portal post of 3 October 2026, read in Vietnamese on 2026-10-04 (HTTP 200). Researcher translation. 'Nhạy cảm' (literally 'sensitive') is rendered 'sexual', its usual sense in Vietnamese reporting of image-based extortion; the source does not describe the images further.","independence_group":"cong-an-thanh-hoa"},{"id":"s2","url":"https://baothanhhoa.vn/canh-bao-thu-doan-ghep-hinh-anh-nhay-cam-de-de-doa-tong-tien-304059.htm","kind":"news_report","access":"read","language":"vi","translation_note":"Báo Thanh Hóa, 3 October 2026, read in Vietnamese on 2026-10-04 (HTTP 200). Researcher translation. Draws on information compiled from the same police division, so it shares the police group; it is the only source for the AI and deepfake wording, the threatened person's account and the spreading of images in social media groups. 'Nhạy cảm' (literally 'sensitive') is rendered 'sexual', its usual sense in Vietnamese reporting of image-based extortion; the source does not describe the images further.","independence_group":"cong-an-thanh-hoa"},{"id":"s3","url":"https://dantri.com.vn/phap-luat/hang-loat-can-bo-nguoi-dan-bi-doa-tung-video-nhay-cam-de-tong-tien-20261004072130428.htm","kind":"news_report","access":"read","language":"vi","translation_note":"Dân trí, 4 October 2026, read in Vietnamese on 2026-10-04 (HTTP 200). Researcher translation. Restates the police release; it dates the police information 4 October, which conflicts with the portal post of 3 October.","independence_group":"cong-an-thanh-hoa"}],"version":1,"ai_roles":["others_use"],"contexts":["privacy","finance","work"],"unknowns":["The exact number of people threatened and whether any paid.","Whether the images were made with AI: the police release says only 'technology'.","Which tool was used and who sent the threats.","How many people had images spread in social media groups.","Whether any arrest has been made."],"geography":{"basis":"Thanh Hóa Provincial Police report complaints it received from people in Thanh Hóa province, Vietnam (police portal; Dân trí: 'Gần 20 người ở Thanh Hóa'). Where the senders operated is unknown; Báo Thanh Hóa reports servers abroad. No court proceeding is reported.","court_countries":[],"event_countries":["VN"],"affected_person_countries":["VN"]},"publication":{"basis":"Published as a core case (depicted_or_impersonated), consistent with existing AI sexual-image extortion rows: provincial police reported nearly 20 complaints of extortion with fabricated sexual images of the victims, and the provincial newspaper, reporting the same police division's information, says AI and deepfake face-swapping was used. One police-derived chain; no victim is identified.","reviewed_on":"2026-10-04"},"ai_involvement":{"basis":"Báo Thanh Hóa, in a section introduced as information compiled from the provincial police cybersecurity division, says the senders used AI and deepfake technology to put victims' faces onto sexual images; the victims were depicted in that material (depicted_or_impersonated). The police portal post itself says only that technology was used to splice and edit images and videos. No tool or forensic finding is reported.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Thanh Hóa, Vietnam: police say nearly 20 people were threatened with fabricated sexual images of themselves unless they paid; one demand was 1.5 billion dong","summary":"Thanh Hóa provincial police said on 3 October 2026 that their cybersecurity and high-tech crime division had, since the start of October, received reports from nearly 20 people threatened with extortion using sexual images and videos spliced from their own photos, which senders threatened to publish unless money was transferred. One victim was asked for as much as 1.5 billion dong, and officials, including commune-level leaders, were among the targets. The police release says the material was made with technology; Báo Thanh Hóa, reporting information compiled from the same police division, says the senders used AI and deepfake technology to put victims' faces onto sexual images. No payment, arrest or named victim is reported.","incidentDate":"2026-10-01","incidentKind":"bounded_series","incidentDatePrecision":"month","exposurePattern":"unknown","reportedDate":"2026-10-03","aiSystem":"AI and deepfake face-swapping used to put victims' faces onto sexual images, according to Báo Thanh Hóa reporting police information; the police release itself says only that technology was used to splice and edit images and videos (tool not identified)","aiProduct":"Unidentified image and video tool","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["exploitation_or_abuse","psychological_distress"],"harmOutcomeSummary":"Nearly 20 people in Thanh Hóa were sent fabricated sexual images of themselves with demands for money and threats to publish them, one asked for 1.5 billion dong; one threatened person described distress, according to provincial police and Báo Thanh Hóa.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"partial","affectedCountEvidence":"Police say they received reports of 'gần 20 trường hợp' (nearly 20 cases; Dân trí renders this 'Gần 20 người', nearly 20 people); an approximate figure is not a lower bound and is not recorded as 20. One threatened person whose account Báo Thanh Hóa gives is counted; the others are unquantified. Partial: 1 counted plus unquantified others.","victimAgeRange":"unknown","jurisdiction":"VN","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://conganthanhhoa.gov.vn/phong-chong-toi-pham/thong-bao-tim-chu-so-huu-phuong-tien/kip-thoi-ngan-chan-nhieu-vu-tong-tien-tren-khong-gian-mang.html","primarySourceLabel":"Thanh Hóa Provincial Police, 3 October 2026: many cyberspace extortion cases stopped in time","firstPublishedAt":"2026-10-04T03:29:19.486676+00:00","updatedAt":"2026-10-07T03:21:31.913865+00:00","scopeVersion":"facts-v3","tags":["deepfake","sextortion","non-consensual-imagery","extortion","officials-targeted","vietnam","thanh-hoa","depicted-or-impersonated"]},{"id":"2026-murcia-ai-real-time-face-modification-forged-dni-video-checks-electronic-signature-certificates","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'El investigado aparecía personalmente en los vídeos de verificación de la empresa mostrando el DNI falsificado mientras que, gracias a la inteligencia artificial, su rostro en pantalla se modificaba en tiempo real para ser idéntico al de la fotografía del documento. De este modo realizó 38 intentos sobre más de 30 identidades de ciudadanos reales.'","relation":"supports","source_id":"s1"},{"locator":"'Durante las videoconferencias de verificación, aparecía físicamente ante la cámara, mientras un programa modificaba sus facciones en tiempo real para que coincidieran con las de la persona cuya identidad estaba suplantando.'","relation":"supports","source_id":"s2"},{"locator":"'The unnamed man allegedly made 38 attempts to impersonate 30 people and obtain digital certificates in their names, succeeding on multiple occasions.'","relation":"supports","source_id":"s3"}],"assertion":"Police say the suspect appeared in an electronic-certificate company's verification videos showing forged DNI cards while AI software modified the suspect's face in real time to match the photo on the forged document and the features of the person being impersonated, making 38 attempts on more than 30 identities of real citizens.","causal_attribution":"Police allegation in a press release; untested in court."},{"id":"c2","status":"reported","evidence":[{"locator":"'logrando suplantar la identidad de múltiples víctimas.'","relation":"supports","source_id":"s1"},{"locator":"'con el objetivo final de conseguir firmas digitales autorizadas que posteriormente pudieran ser utilizadas para cometer estafas económicas.'","relation":"supports","source_id":"s2"},{"locator":"'Police did not say how many of the 38 attempts succeeded, only that certificates were issued on \"multiple\" occasions.'","relation":"supports","source_id":"s3"}],"assertion":"Police say the suspect succeeded in impersonating multiple victims, with the final aim of obtaining authorised digital signatures for later economic scams; they did not say how many attempts succeeded.","causal_attribution":"Police statement; no later fraud using the certificates is reported."},{"id":"c3","status":"reported","evidence":[{"locator":"'Durante apenas un segundo, la máscara digital de su víctima desapareció de la pantalla, dejando al descubierto el rostro real del sospechoso ante el personal de seguridad de la entidad emisora.'; 'culminando con la detención del investigado como presunto responsable de un delito continuado de falsedad documental en documento oficial.'","relation":"supports","source_id":"s1"},{"locator":"'A search of his home yielded a laptop protected by high-grade encryption, several mobile phones, storage devices, and documents, according to police.'","relation":"supports","source_id":"s3"}],"assertion":"During one live video identification the face-modification program lagged and for about a second the victim's digital mask disappeared, exposing the suspect's real face to the issuer's security staff; police then arrested the suspect as the alleged perpetrator of a continuing offence of falsifying official documents and seized an encrypted laptop, phones and storage devices.","causal_attribution":"Police account of the detection and arrest."},{"id":"c4","status":"reported","evidence":[{"locator":"'Los agentes identificaron más de 320 líneas telefónicas asociadas a 24 dispositivos móviles distintos. La mayoría de estas líneas habían sido contratadas utilizando identidades suplantadas y adquiridas en puntos de venta localizados en Murcia.'","relation":"supports","source_id":"s2"}],"assertion":"Investigators identified more than 320 phone lines on 24 mobile devices, most contracted with impersonated identities and bought at points of sale in Murcia.","causal_attribution":"Police statement; the phone lines are not described as involving AI."}],"effects":[{"label":"identities of more than 30 real citizens used on forged ID cards and impersonated with real-time AI face modification to apply for signature certificates","claim_id":"c1","direction":"negative"},{"label":"police say the impersonation succeeded for multiple victims","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.h50.es/la-policia-nacional-detiene-a-un-ciberdelincuente-que-utilizaba-una-tecnica-pionera-mediante-ia-para-obtener-certificados-de-firma-electronica/","kind":"news_report","access":"read","language":"es","translation_note":"Read live in Spanish on 2026-10-02 (h50 Digital Policial, 11 August 2026); the text reproduces the Policía Nacional release. Researcher translation.","independence_group":"policia-nacional-release-2026-08-11"},{"id":"s2","url":"https://www.la7tv.es/articulo/sucesos/detenido-murcia-ciberdelincuente-que-usaba-ia-obtener-certificados-digitales/20260811095847072087.html","kind":"news_report","access":"read","language":"es","translation_note":"Read live in Spanish on 2026-10-02 (La 7 TV Región de Murcia, 11 August 2026); a rewrite of the same police release. Researcher translation.","independence_group":"policia-nacional-release-2026-08-11"},{"id":"s3","url":"https://www.theregister.com/security/2026/08/11/deepfake-hiccup-unmasks-suspected-digital-certificate-fraudster/5285934","kind":"news_report","access":"read","language":"en","translation_note":"Read live in English on 2026-10-02 (The Register, 11 August 2026); summarises the police release and quotes it in machine translation.","independence_group":"policia-nacional-release-2026-08-11"}],"version":1,"ai_roles":["others_use"],"contexts":["privacy","finance"],"unknowns":["When the attempts took place and when the arrest was made; the police release is dated 11 August 2026.","How many certificates were issued and whether any was used in a later fraud.","Which face-modification program was used.","Where the issuing company is based and where the impersonated citizens live.","Any charge decision or court proceeding."],"geography":{"basis":"Policía Nacional arrested the suspect in Murcia, and most of the more than 320 phone lines were bought at points of sale in Murcia. The issuing company's location is not stated in the inspected bodies, and the residence of the impersonated citizens is not stated (a DNI is not used to infer residence). No court proceeding is reported.","court_countries":[],"event_countries":["ES"],"affected_person_countries":[]},"publication":{"basis":"Published as a core case (depicted_or_impersonated): police say a suspect used real-time AI face modification in video identity checks to impersonate more than 30 real citizens on forged ID cards, succeeding for multiple victims. One police chain (Policía Nacional release) read in Spanish via h50 and La 7 TV and in English via The Register; every claim is reported. The suspect and the impersonated citizens are not named. Event date unknown; reported 11 August 2026.","reviewed_on":"2026-10-02"},"ai_involvement":{"basis":"Policía Nacional states that the suspect used artificial intelligence to modify the suspect's face in real time during video identity checks so that it matched the photo on forged DNI cards, combined with deepfake techniques; police call the AI-altered face 'la máscara digital de su víctima'. The tool is not named and the videos were not inspected. The allegation is untested in court. The AI output impersonated the real citizens (depicted_or_impersonated).","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Spanish police arrest a man in Murcia suspected of using real-time AI face modification and forged ID cards to impersonate more than 30 real people in video identity checks for electronic signature certificates","summary":"Spain's Policía Nacional said on 11 August 2026 that it had arrested in Murcia a suspect who tried to obtain electronic signature certificates in other people's names from a company that issues them. During the company's video identity checks the suspect appeared on camera holding a forged DNI identity card while AI software modified the suspect's face in real time to match the photo on the forged document. Police say the suspect made 38 attempts using the identities of more than 30 real citizens and succeeded in impersonating multiple victims, aiming to use the signatures for later scams. A short processing delay in the face-modification software made the digital mask disappear for barely a second, exposing the suspect's real face to the issuer's security staff.","incidentKind":"bounded_series","incidentDatePrecision":"unknown","exposurePattern":"unknown","reportedDate":"2026-08-11","aiSystem":"AI software that modified the suspect's face in real time during live video identity checks to match the photo on forged DNI cards, described by police as deepfake techniques; the program is not named","aiProduct":"Unidentified video tool","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"Police say the identities of more than 30 real citizens were used on forged ID cards and impersonated with real-time AI face modification in 38 attempts to obtain electronic signature certificates, succeeding for multiple victims (Policía Nacional release via h50 and La 7 TV; The Register).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":30,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"The Policía Nacional release (h50; La 7 TV) says the suspect, showing a forged DNI while AI altered the suspect's face on camera, 'De este modo realizó 38 intentos sobre más de 30 identidades de ciudadanos reales': each of these real citizens had their identity placed on a forged DNI and impersonated in a live video check, and the release calls the person impersonated in the attempt that failed 'su víctima'. Documented minimum 30 (more than 30). The count is of people whose identities were used, not of issued certificates: impersonation succeeded for 'múltiples víctimas', a number police did not give (The Register). The certificate-issuing company and the people whose identities were used for the 320 phone lines are not counted (the phone-line identities are not tied to the AI use).","victimAgeRange":"unknown","jurisdiction":"ES","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://www.h50.es/la-policia-nacional-detiene-a-un-ciberdelincuente-que-utilizaba-una-tecnica-pionera-mediante-ia-para-obtener-certificados-de-firma-electronica/","primarySourceLabel":"h50 Digital Policial, 11 August 2026: La Policía Nacional detiene en Murcia a un ciberdelincuente que utilizaba una técnica pionera mediante IA","firstPublishedAt":"2026-10-02T03:25:55.932181+00:00","updatedAt":"2026-10-02T03:25:55.932181+00:00","scopeVersion":"facts-v3","tags":["deepfakes","identity-impersonation","identity-verification-bypass","electronic-signature","arrest","spanish-language"]},{"id":"2026-jau-sp-school-ai-fake-nude-images-classmate","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'As montagens foram feita com o uso de Inteligência Artificial (IA) e repassadas em um grupo de WhatsApp com outros sete alunos.'; 'O caso veio à tona depois que a escola particular onde os adolescentes estudam identificou a circulação das imagens e entrou em contato com as famílias.'","relation":"supports","source_id":"s1"},{"locator":"'Segundo o registro policial, o adolescente e outros sete colegas do 9º ano, todos meninos de 15 anos, mantinham um grupo no WhatsApp no qual usavam programas digitais para manipular imagens da estudante e simular fotos dela sem roupa.'","relation":"supports","source_id":"s2"},{"locator":"'foram compartilhadas fotos íntimas falsas de uma colega de classe, criadas por meio de inteligência artificial (IA)'","relation":"supports","source_id":"s4"}],"assertion":"A private school in Jaú identified the circulation of fake intimate images of a female classmate made with artificial intelligence; according to the police report, eight ninth-grade boys aged 15 kept a WhatsApp group in which they used digital programs to manipulate images of the student so that she appeared unclothed.","causal_attribution":"The account originates in the school's alert, the police report and a father's statements; the AI tool and the individual roles of the eight boys are not established."},{"id":"c2","status":"reported","evidence":[{"locator":"'Os oito estudantes, todos meninos de 15 anos e alunos do 9º ano, foram suspensos pela instituição. Os pais da adolescente que aparece nas imagens também foram informados.'; 'Ele encontrou os arquivos relacionados às montagens no aparelho, foi quando o levou junto ao celular até uma delegacia da cidade para registrar a ocorrência.'","relation":"supports","source_id":"s1"},{"locator":"'Os pais da vítima também registraram boletim de ocorrência.'","relation":"supports","source_id":"s2"},{"locator":"'A reportagem apurou que os pais da vítima também registraram boletim de ocorrência na CPJ de Jaú.'","relation":"supports","source_id":"s4"}],"assertion":"The school suspended the eight boys and informed the girl's parents; the father of one boy found the files on his son's phone and took the boy and the phone to the police to register a report, and the girl's parents also registered a police report.","causal_attribution":"School and family actions as described by the father and the press."},{"id":"c3","status":"reported","evidence":[{"locator":"'a Polícia Civil informou que investiga um adolescente de 15 anos por divulgação de pornografia infantil e difamação ocorridas na manhã da última quinta-feira (3).'; 'O caso foi registrado na Central de Polícia Judiciária de Jaú, que mantém diligências em vista a esclarecer a totalidade dos fatos.'","relation":"supports","source_id":"s4"},{"locator":"'Em nota, a SSP (Secretaria da Segurança Pública) afirmou que o adolescente é investigado por divulgação de pornografia infantil e difamação.'","relation":"supports","source_id":"s3"}],"assertion":"The São Paulo Public Security Secretariat said the Civil Police are investigating a 15-year-old for dissemination of child pornography and defamation that occurred on the morning of Thursday 3 September 2026, registered at the Central de Polícia Judiciária of Jaú.","causal_attribution":"An official statement relayed by two outlets; it confirms an investigation, not the facts under investigation."},{"id":"c4","status":"reported","evidence":[{"locator":"'afirmou que o conteúdo teve origem em uma plataforma digital privada, fora do ambiente escolar e do controle da instituição. A escola informou que adotou medidas de proteção e acolhimento à aluna e abriu uma apuração interna.'","relation":"supports","source_id":"s3"},{"locator":"'ações de proteção e acolhimento à pessoa afetada, preservação e sigilo das informações pertinentes ao caso e instauração de apuração interna'","relation":"supports","source_id":"s4"}],"assertion":"The school said the content originated on a private digital platform outside the school environment and its control, and that it adopted protection and welcoming measures for the student and opened an internal inquiry.","causal_attribution":"The school's own statement."}],"effects":[{"label":"a female student depicted in AI-made fake nude images shared in a WhatsApp group of classmates","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.metropoles.com/sao-paulo/pai-registra-bo-contra-filho-apos-criacao-de-nudes-falsos-de-colega-com-ia","kind":"news_report","access":"read","language":"pt","translation_note":"Metrópoles, 8 September 2026, read live by curl on 2026-09-29 (HTTP 200, JSON-LD articleBody also present). Portuguese; quotations translated by the reviewer. Account derives from the police report and the father's statements.","independence_group":"police-report-father-account"},{"id":"s2","url":"https://www.jornaldopovomarilia.net/post/pai-registra-b-o-contra-o-pr%C3%B3prio-filho-ap%C3%B3s-escola-denunciar-nudes-de-aluna-criados-com-ia","kind":"news_report","access":"read","language":"pt","translation_note":"Jornal do Povo (Marília), 9 September 2026, read live by curl on 2026-09-29 (HTTP 200). Portuguese; translated by the reviewer. Relays the police report and the father's interview with TV TEM; grouped with s1.","independence_group":"police-report-father-account"},{"id":"s3","url":"https://www.cnnbrasil.com.br/nacional/sudeste/sp/vereador-denuncia-filho-por-exibir-pornografia-infantil-feita-por-ia-em-sp/","kind":"news_report","access":"read","language":"pt","translation_note":"CNN Brasil, 9 September 2026, read live by curl on 2026-09-29 (HTTP 200, JSON-LD articleBody). Portuguese; translated by the reviewer. Combines the father's social-media video with the SSP statement and the school's note.","independence_group":"cnn-brasil"},{"id":"s4","url":"https://sampi.net.br/bauru/noticias/3003728/regional/2026/09/pai-faz-bo-contra-filho-apos-foto-de-nudez-de-colega-feita-por-ia","kind":"news_report","access":"read","language":"pt","translation_note":"JCNET/Sampi (Bauru), 10 September 2026, read live by curl on 2026-09-29 (HTTP 200). Portuguese; translated by the reviewer. Own reporting ('A reportagem apurou') plus the SSP statement and the school's note.","independence_group":"jcnet"}],"version":1,"ai_roles":["others_use"],"contexts":["education","privacy","justice","everyday_life"],"unknowns":["The AI program used and how the images were made.","When the images were created; the SSP dates the dissemination to the morning of 3 September 2026.","The individual role of each of the eight boys.","How the depicted student was affected; no report gives her or her family's account beyond their police report.","The outcome of the police inquiry and of the school's internal inquiry."],"geography":{"basis":"All four reports place the school and the police registration in Jaú, in the interior of São Paulo state, Brazil. No court proceeding is reported.","court_countries":[],"event_countries":["BR"],"affected_person_countries":["BR"]},"publication":{"basis":"Published under the 2026-09-15 charter as an image-based abuse case affecting a minor who was depicted in AI-made fake nude images, documented by four Brazilian outlets and an official SSP statement confirming a police investigation. Not a death case. The students, the depicted girl, the father and the school are not named here.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"Metrópoles says the montages were made with artificial intelligence; Jornal do Povo, citing the police report, says the boys used digital programs to manipulate images of the student; JCNET and CNN Brasil describe the images as created with artificial intelligence. No tool is named and no forensic finding is public. The AI artifacts depicted the girl; no AI system interacted with her.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Jaú, São Paulo: eight 15-year-old ninth-grade boys at a private school are reported to have made fake nude images of a female classmate with artificial intelligence and shared them in a WhatsApp group; the school suspended them and the Civil Police are investigating a 15-year-old for dissemination of child pornography and defamation","summary":"In early September 2026 a private school in Jaú, in the interior of São Paulo state, identified the circulation of fake intimate images of a female classmate made with artificial intelligence and contacted the families. According to the police report described by the press, eight ninth-grade boys, all aged 15, kept a WhatsApp group in which they used digital programs to manipulate images of the student so that she appeared unclothed. The school suspended the eight and informed the girl's parents. The father of one of the boys checked his son's phone, found the files and took the boy and the phone to the police to register a report; the girl's parents also registered a police report. The São Paulo Public Security Secretariat said the Civil Police are investigating a 15-year-old for dissemination of child pornography and defamation that occurred on the morning of Thursday 3 September. The school said the content originated on a private platform outside the school environment and that it had adopted protective and welcoming measures for the student and opened an internal inquiry. The AI tool used is not named. The students are minors and are not named in any report.","incidentDate":"2026-09-03","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"unknown","reportedDate":"2026-09-08","aiSystem":"Artificial-intelligence image manipulation program(s), not named in any report","aiProduct":"Unidentified image tool","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["exploitation_or_abuse"],"harmOutcomeSummary":"A female student was depicted in fake nude images that classmates are reported to have made with artificial intelligence and shared in a WhatsApp group of eight boys; the police are investigating dissemination of child pornography and defamation. The account comes from the police report and a father's statements as relayed by the press and from the SSP statement; no report describes the girl's own response.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"One girl: every report describes images of 'uma colega' (one classmate) and 'a adolescente que aparece nas imagens'. The eight boys and the father are not counted.","victimAgeRange":"minor","jurisdiction":"BR-SP","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://www.cnnbrasil.com.br/nacional/sudeste/sp/vereador-denuncia-filho-por-exibir-pornografia-infantil-feita-por-ia-em-sp/","primarySourceLabel":"CNN Brasil, 9 September 2026: adolescent investigated for disseminating AI-made sexual content of a student in Jaú (Portuguese)","firstPublishedAt":"2026-09-29T09:04:14.988454+00:00","updatedAt":"2026-09-30T01:17:41.585079+00:00","scopeVersion":"facts-v3","tags":["deepfake","ai-generated-imagery","ncii","minor","school","whatsapp","brazil","sao-paulo","jau","depicted"]},{"id":"2026-bengaluru-byappanahalli-cm-vijay-deepfake-whatsapp-video-call-aid-fraud","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'a voice and face appearing on a WhatsApp video call allegedly convinced a 29-year-old security guard that he was speaking to Tamil Nadu chief minister and actor C Joseph Vijay'; 'a fraudster allegedly used a deepfake AI-generated video'; 'he received a WhatsApp video call from the number'; 'on Sept 9'; 'After introducing himself as CM Vijay in Hindi'; 'I was offered financial help from Vijay’s personal account'","relation":"supports","source_id":"s1"},{"locator":"'the familiar face speaking to him was allegedly an AI-generated deepfake'","relation":"supports","source_id":"s2"}],"assertion":"On 9 September 2026 a Bengaluru security guard received a WhatsApp video call in which a face and voice presented as Tamil Nadu Chief Minister C. Joseph Vijay introduced himself in Hindi and offered him financial aid; the Times of India reports that the fraudster allegedly used a deepfake AI-generated video.","causal_attribution":"Complainant's account and TOI's description; CNBC TV18 repeats it. No forensic or police finding on the video is reported."},{"id":"c2","status":"reported","evidence":[{"locator":"'The manager offered Rs 11 lakh in aid'; 'was asked to pay Rs 5,000 as exchange charges'; 'he needed to pay Rs 18,000 to release it'; 'claiming to be Thakur from the Central Bureau of Investigation (CBI) contacted me and demanded over Rs 50,000 as a fine imposed by the agency'; 'I made a few more payments totalling over Rs 1.04 lakh through a digital payment app'; 'When the fraudsters demanded another Rs 50,000, I refused and realised I had been duped'","relation":"supports","source_id":"s1"}],"assertion":"After the call, a 'manager' promised Rs 11 lakh and demanded exchange and PIN-unlock charges, and a man posing as a CBI officer demanded more than Rs 50,000 as a fine; the complainant paid more than Rs 1.04 lakh through a digital payment app before refusing a further Rs 50,000 demand.","causal_attribution":"The complainant's first-person account to TOI. The loss followed the video call; the later demands came from human callers posing as a manager and a CBI officer."},{"id":"c3","status":"reported","evidence":[{"locator":"'before approaching Byappanahalli police. A case has been registered under the Information Technology Act'; 'This is the first such case reported in the city'","relation":"supports","source_id":"s1"}],"assertion":"The complainant called the 1930 cybercrime helpline and went to Byappanahalli police, who registered a case under the Information Technology Act; TOI calls it the first such case reported in the city.","causal_attribution":"As reported by TOI; the FIR itself was not read."},{"id":"c4","status":"reported","evidence":[{"locator":"'The available information, however, does not establish that the person arrested in Rajasthan was directly involved in the fraud reported by Giri in Bengaluru.'","relation":"supports","source_id":"s2"}],"assertion":"The available information does not establish that the man arrested in Alwar in the Tamil Nadu CB-CID deepfake investigation was involved in the Bengaluru fraud.","causal_attribution":"CNBC TV18's own statement; supports recording this as a separate case from 2026-tamil-nadu-cm-vijay-deepfake-financial-aid-fraud."}],"effects":[{"label":"lost more than Rs 1.04 lakh to staged fee and fake CBI-fine demands after a WhatsApp video call with an alleged deepfake of the Tamil Nadu Chief Minister offering aid","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://timesofindia.indiatimes.com/city/bengaluru/cm-vijay-whatsapp-call/articleshow/134215533.cms","kind":"news_report","access":"read","language":"en","translation_note":"Read live in English on 2026-09-28 (Times of India, Bengaluru, byline H M Chaithanya Swamy, published 13 September 2026 22:57 IST, modified 14 September). The complainant's account given to TOI and to police; a senior officer quoted.","independence_group":"toi-bengaluru-complainant"},{"id":"s2","url":"https://www.cnbctv18.com/india/cm-vijay-deepfake-scam-bengaluru-security-guard-rs-11-lakh-offer-19991710.htm","kind":"news_report","access":"read","language":"en","translation_note":"Read live in English on 2026-09-28 (CNBC TV18, 16 September 2026). Retells the TOI account without new sourcing (same chain); gives the complainant's age as 39 where TOI says 29. Adds context on the Tamil Nadu CB-CID case and the statement that no link to the Alwar accused is established.","independence_group":"toi-bengaluru-complainant"}],"version":1,"ai_roles":["others_use"],"contexts":["finance","everyday_life"],"unknowns":["Whether the video was a live face-swap or pre-recorded clips, which tool was used, and whether police have examined it.","Who made the calls and from where; no arrest is reported.","Whether this fraud is connected to the Facebook deepfake videos investigated by the Tamil Nadu CB-CID.","The exact dates of the individual payments after 9 September.","The complainant's age (TOI says 29, CNBC TV18 says 39)."],"geography":{"basis":"The complainant lives and works in Bengaluru and reported to Byappanahalli police in Bengaluru (Times of India). Where the callers were located is not reported. No court proceeding is reported, so court_countries is empty.","court_countries":[],"event_countries":["IN"],"affected_person_countries":["IN"]},"publication":{"basis":"Published under the 2026-09-15 charter as a core case: an alleged deepfake of a public figure communicated with the complainant in a WhatsApp video call, and he reports a loss of more than Rs 1.04 lakh with a police case registered. One reporting chain (TOI, retold by CNBC TV18); the AI attribution is reported, not forensically established. The complainant is not named.","reviewed_on":"2026-09-28"},"ai_involvement":{"basis":"The Times of India reports that the fraudster allegedly used a deepfake AI-generated video of the Chief Minister in the WhatsApp video call; the complainant describes a face and voice presenting as Vijay that spoke to him in Hindi and asked him questions. The AI attribution is the complainant's and the newspaper's; no police or forensic finding on the video, the tool used, or whether the call was live or pre-recorded is reported. The synthetic likeness depicted the Chief Minister, not the complainant, and was used to speak to and question the complainant in the video call; the relation is recorded as communicated_with.","status":"reported"},"person_relations":["communicated_with"]},"name":"Bengaluru: a security guard says a WhatsApp video call in which an alleged deepfake 'Chief Minister Vijay' offered him financial aid led to fake 'processing' charges and a fake CBI fine, and he lost more than Rs 1.04 lakh; Byappanahalli police register an IT Act case (September 2026)","summary":"A security guard in Bengaluru, originally from Odisha, told the Times of India that on 9 September 2026 he answered a WhatsApp video call in which a face and voice presented as Tamil Nadu Chief Minister C. Joseph Vijay introduced himself in Hindi, asked his name, work and where he lived and pressed him to accept financial help. A 'manager' then promised Rs 11 lakh, said Rs 5 lakh had been allotted to him and asked for a Rs 5,000 exchange charge, then Rs 18,000 to unlock a supposedly locked PIN; a caller posing as a CBI officer demanded more than Rs 50,000 as a fine. The fraudsters sent a fake allotment letter and a purported CBI officer's identity proof. He paid more than Rs 1.04 lakh through a digital payment app before refusing a further Rs 50,000 demand, called the 1930 cybercrime helpline and went to Byappanahalli police, who registered a case under the Information Technology Act. The Times of India says the fraudster allegedly used a deepfake AI-generated video and calls it the first such case reported in the city. No arrest is reported, and no link to the Tamil Nadu CB-CID deepfake case or its Alwar arrest has been established.","incidentDate":"2026-09-09","incidentKind":"bounded_series","incidentDatePrecision":"day","exposurePattern":"repeated_interactions","reportedDate":"2026-09-13","aiSystem":"An alleged deepfake AI-generated video likeness and voice of Tamil Nadu Chief Minister Vijay shown in a WhatsApp video call (Times of India); the tool and whether the call was live or pre-recorded are not reported","aiProduct":"Unidentified video tool","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["financial_loss"],"harmOutcomeSummary":"The complainant says he lost more than Rs 1.04 lakh after a WhatsApp video call with an alleged deepfake of the Tamil Nadu Chief Minister led to staged fee and fake CBI-fine demands (his account to the Times of India and his police complaint).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person, the Bengaluru complainant who says he paid more than Rs 1.04 lakh after the video call (Times of India). Chief Minister Vijay, whose likeness was allegedly faked, is not counted as a harmed person here. Exact 1.","victimAgeRange":"adult","jurisdiction":"IN-KA","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://timesofindia.indiatimes.com/city/bengaluru/cm-vijay-whatsapp-call/articleshow/134215533.cms","primarySourceLabel":"Times of India (Bengaluru), 13 September 2026: 'CM Vijay' WhatsApp call promises Rs 11 lakh aid, Bengaluru man loses Rs 1 lakh","firstPublishedAt":"2026-09-28T03:31:33.034103+00:00","updatedAt":"2026-09-30T01:17:26.844463+00:00","scopeVersion":"facts-v3","tags":["deepfake","public-figure-impersonation","video-call","whatsapp","fraud","fake-cbi-officer","india","karnataka","bengaluru","tamil-nadu-cm-vijay"]},{"id":"2025-singapore-far-right-teen-ai-firearms","caseFacts":{"claims":[{"id":"c1","status":"documented","evidence":[{"locator":"'In February and March 2025, two self-radicalised Singaporean youths, aged 15 and 17, were issued with a Restriction Order and an Order of Detention under the Internal Security Act respectively'; '2 April 2025'","relation":"supports","source_id":"s3"},{"locator":"'were detained in December 2024 and March 2025, respectively'; 'FRE supporter detained in March 2025'","relation":"supports","source_id":"s2"}],"assertion":"In March 2025 a 17-year-old Singaporean was issued an Order of Detention under the Internal Security Act, which the ISD announced on 2 April 2025.","causal_attribution":"The ISD release is the official announcement of the order. The order was issued for his attack preparations; no source attributes the detention to his chatbot use."},{"id":"c2","status":"reported","evidence":[{"locator":"'had been radicalised by violent far-right extremist and racist ideologies and had taken steps in preparation for attacks against Muslims at mosques in Singapore'; 'he made multiple unsuccessful attempts to procure a gun'; 'the youth shortlisted five mosques'; 'he had yet to execute his attacks only because he was unable to procure a gun'","relation":"supports","source_id":"s3"},{"locator":"'had made extensive preparations to conduct shootings against Muslims at five mosques in Singapore'","relation":"supports","source_id":"s2"}],"assertion":"The ISD says the 17-year-old had been radicalised by far-right extremist and racist ideologies, shortlisted five mosques in Singapore as targets for shooting attacks on Muslims, made several unsuccessful attempts to procure a gun, and admitted at his arrest that he had not carried out the attacks only because he was unable to procure a gun.","causal_attribution":"The ISD's account of its investigation and of his statements. No court has tested it; the detention is an executive order."},{"id":"c3","status":"reported","evidence":[{"locator":"'FRE supporter detained in March 2025, he had searched for instructions on an AI chatbot about producing ammunition, and considered 3D printing his own firearms for his local attack plans'","relation":"supports","source_id":"s2"}],"assertion":"The ISD's 2025 threat assessment report says the 17-year-old had searched for instructions on an AI chatbot about producing ammunition and considered 3D printing his own firearms for his local attack plans.","causal_attribution":"The report states the search, not its result. It does not name the chatbot, date the search or say what the chatbot replied, so whether the chatbot supplied instructions is not established."},{"id":"c4","status":"reported","evidence":[{"locator":"'he reached out to a US-based online contact who claimed to be a gun maker'; 'suggested 3D printing the gun parts and ammunition instead'; 'the youth did not follow through with the idea due to the cost and technical feasibility'","relation":"supports","source_id":"s3"}],"assertion":"The ISD press release says a US-based online contact who claimed to be a gun maker suggested 3D printing gun parts and ammunition, and that the youth did not follow through because of the cost and technical feasibility.","causal_attribution":"The ISD's account. This passage does not involve the AI chatbot."},{"id":"c5","status":"reported","evidence":[{"locator":"'Even though there is no indication that evolving technologies, such as AI and 3D printing, have been used in any terrorist attack plot in Singapore, we are seeing an emerging trend of evolving technologies featuring in local youth self-radicalisation cases'","relation":"supports","source_id":"s2"},{"locator":"'Artificial Intelligence (AI) is emerging as a terrorism enabler for'","relation":"context","source_id":"s1"}],"assertion":"The ISD report cites the case as part of an emerging trend of evolving technologies in youth self-radicalisation cases, while stating that there is no indication that technologies such as AI and 3D printing have been used in any terrorist attack plot in Singapore.","causal_attribution":"The ISD's assessment of a trend; it does not attribute the attack plan to the chatbot."},{"id":"c6","status":"reported","evidence":[{"locator":"'was identified during ISD’s investigations of'","relation":"supports","source_id":"s3"},{"locator":"'who was detained under the ISA in December 2024'","relation":"supports","source_id":"s3"},{"locator":"'The 17-year-old male was an online contact of 18-year-old Singaporean'; 'then a student, was radicalised by violent far-right extremist ideologies'","relation":"supports","source_id":"s3"}],"assertion":"The ISD says it identified the 17-year-old during its investigation of an 18-year-old far-right extremist detained in December 2024, of whom he was an online contact.","causal_attribution":"The ISD's account of how he came to its attention; the chatbot use played no reported part."}],"effects":[{"label":"a 17-year-old was detained under the Internal Security Act","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.isd.gov.sg/news-and-resources/singapore-terrorism-threat-assessment-report-2025/","kind":"official_report","access":"read","language":"en","translation_note":"ISD landing page for the Singapore Terrorism Threat Assessment Report 2025, dated 29 July 2025, read live in English on 2026-10-03 and 2026-10-04 (HTTP 200). It summarises the report and links the PDF; it does not describe this case.","independence_group":"isd-singapore"},{"id":"s2","url":"https://isomer-user-content.by.gov.sg/155/3c41ba65-fa24-4ef1-9bf9-0b79d892a742/sttar-2025-(final).pdf","kind":"official_report","access":"read","language":"en","translation_note":"Report PDF (14.9 MB) read on 2026-10-03 through pdftotext; HTTP 200 and the same size re-checked on 2026-10-04. The text is English although the PDF language tag says ar-SA. Line wrapping in the extracted text joins '17-year-old' as '17-yearold' in one passage.","independence_group":"isd-singapore"},{"id":"s3","url":"https://www.isd.gov.sg/news-and-resources/issuance-of-orders-under-internal-security-act--isa--against-two-self-radicalised-singaporean-youths--and-updates-on-isa-orders/","kind":"official_statement","access":"read","language":"en","translation_note":"ISD press release of 2 April 2025, read live in English on 2026-10-03 and 2026-10-04 (HTTP 200). It announced the Order of Detention. It does not mention the AI chatbot in this youth's case; the chatbot it mentions concerns a 15-year-old in the same release.","independence_group":"isd-singapore"}],"version":1,"ai_roles":["own_use"],"contexts":["justice"],"unknowns":["Which AI chatbot the teenager used, when he searched it, and what it replied, including whether it supplied usable ammunition instructions or refused.","Whether the detention order remains in force; no later ISD update on this youth was inspected.","No inspected source states where the teenager used the AI chatbot; event_countries rests on the location of the planned attacks."],"geography":{"basis":"Carried forward from the metadata review of 2026-10-03 and re-checked on 2026-10-04. The ISD press release says he had taken steps in preparation for attacks against Muslims at mosques in Singapore and frequented the Jurong West area, and the report describes preparations for shootings at five mosques in Singapore. event_countries describes the attack preparations; no source says where he used the chatbot. The Order of Detention under the Internal Security Act is an executive order and no court proceeding is reported, so court_countries is empty. Countries of his online contacts and of places he considered buying guns are not event locations.","court_countries":[],"event_countries":["SG"],"affected_person_countries":["SG"]},"publication":{"basis":"Full review on 2026-10-04 of a legacy row against the ISD's Singapore Terrorism Threat Assessment Report 2025 (landing page and PDF) and its press release of 2 April 2025, all official records read in English. The chatbot detail rests on the July 2025 report alone. A previously cited The Print item could not be read and was removed. Prose stating that the chatbot provided instructions was corrected because no inspected source says what the chatbot replied.","reviewed_on":"2026-10-04"},"ai_involvement":{"basis":"The ISD's Singapore Terrorism Threat Assessment Report 2025 states that the 17-year-old far-right extremist supporter detained in March 2025 had searched for instructions on an AI chatbot about producing ammunition. The ISD press release of 2 April 2025 that announced his detention does not mention the chatbot. No inspected source names the chatbot or says what it replied, and the report also says there is no indication that AI has been used in any terrorist attack plot in Singapore.","status":"reported"},"person_relations":["communicated_with"]},"metadataReview":{"version":1,"geography":{"basis":"Re-checked on 2026-10-03 against the Internal Security Department (ISD) page for the Singapore Terrorism Threat Assessment Report 2025, the report PDF it links, and the ISD press release of 2 April 2025 that announced the detention, all read in English; The Print item could not be read. The press release states that the 17-year-old had taken steps in preparation for attacks against Muslims at mosques in Singapore and shortlisted five mosques there, and the report describes preparations to conduct shootings at five mosques in Singapore, which supports event_countries=SG. The press release says he frequented the Jurong West area of Singapore, which supports affected_person_countries=SG for the teenager who used the AI chatbot (location, not nationality; no inspected source names any harmed third party). He was issued an Order of Detention under the Internal Security Act, an executive order; no inspected source reports a court proceeding, so court_countries stays empty. No inspected source states where he used the AI chatbot, so event_countries describes the attack preparations, not the chatbot use. Countries named outside Singapore (a US-based online contact, and Malaysia or Thailand as places he considered buying guns) are contacts or options he considered, not event locations.","evidence":[{"kind":"existing_record","locator":"after preparing shooting attacks on Muslims at mosques in Singapore","location":"summary","supports":["event_countries"],"countries":["SG"]},{"kind":"source_body","locator":"had taken steps in preparation for attacks against Muslims at mosques in Singapore","location":"https://www.isd.gov.sg/news-and-resources/issuance-of-orders-under-internal-security-act--isa--against-two-self-radicalised-singaporean-youths--and-updates-on-isa-orders/","supports":["event_countries"],"countries":["SG"]},{"kind":"source_body","locator":"he had given greater thought to attacking Masjid Maarof, as he frequented the Jurong West area","location":"https://www.isd.gov.sg/news-and-resources/issuance-of-orders-under-internal-security-act--isa--against-two-self-radicalised-singaporean-youths--and-updates-on-isa-orders/","supports":["event_countries","affected_person_countries"],"countries":["SG"]},{"kind":"source_body","locator":"had made extensive preparations to conduct shootings against Muslims at five mosques in Singapore","location":"https://isomer-user-content.by.gov.sg/155/3c41ba65-fa24-4ef1-9bf9-0b79d892a742/sttar-2025-(final).pdf","supports":["event_countries"],"countries":["SG"]}],"court_countries":[],"event_countries":["SG"],"affected_person_countries":["SG"]},"unresolved":["No court country: the Order of Detention under the Internal Security Act is an executive order, and no inspected source reports a court proceeding.","No inspected source states where the teenager used the AI chatbot; event_countries=SG rests on the location of the planned attacks.","The Print item could not be read (Cloudflare challenge live and in both Internet Archive captures, 16 Aug 2026 and 25 Sep 2026); the row dates it 17 Jan 2025, which would precede the March 2025 detention, but the date was not checked against the item.","Row-correction lead outside this metadata pass: the ISD press release of 2 April 2025 does not mention the AI chatbot in this case; among inspected sources the chatbot detail rests on the ISD Terrorism Threat Assessment Report 2025."],"reviewed_on":"2026-10-03","source_reviews":[{"url":"https://www.isd.gov.sg/news-and-resources/singapore-terrorism-threat-assessment-report-2025/","notes":"Read live on 2026-10-03 (HTTP 200; html lang=en). English. ISD landing page for the Singapore Terrorism Threat Assessment Report 2025; it summarises the report and links the report PDF. The page itself does not describe the 17-year-old's case.","access":"read","language":"en"},{"url":"https://isomer-user-content.by.gov.sg/155/3c41ba65-fa24-4ef1-9bf9-0b79d892a742/sttar-2025-(final).pdf","notes":"Read on 2026-10-03 (HTTP 200, application/pdf, 14.9 MB; text extracted with pdftotext). The text is English; the PDF's /Lang tag says ar-SA, which does not match its content. The report states that the 17-year-old far-right extremist supporter detained in March 2025 searched for instructions on an AI chatbot about producing ammunition and considered 3D printing firearms, and that he prepared shootings at five mosques in Singapore.","access":"read","language":"en"},{"url":"https://www.isd.gov.sg/news-and-resources/issuance-of-orders-under-internal-security-act--isa--against-two-self-radicalised-singaporean-youths--and-updates-on-isa-orders/","notes":"Read live on 2026-10-03 (HTTP 200; html lang=en). English. ISD press release of 2 April 2025, not cited on the row, which announced the Order of Detention issued in March 2025. It locates the planned attacks at mosques in Singapore and gives the Jurong West area. It does not mention an AI chatbot in the 17-year-old's case (the chatbot it mentions concerns the 15-year-old in the same release).","access":"read","language":"en"},{"url":"https://theprint.in/world/singapore-warns-of-elevated-terror-threat-amid-rising-extremist-ideologies/2705989/","notes":"Live fetches on 2026-10-03 returned HTTP 403 with a browser user agent and a Cloudflare 'Just a moment' challenge page with a plain request; both Internet Archive captures (16 Aug 2026 and 25 Sep 2026) are the same challenge page. Not read, so its language is not recorded here. The row dates this item 17 Jan 2025; that date was not checked against the item, so whether it reports this case is not established.","access":"unavailable","language":null}]},"name":"Singapore Far-Right Teen Plot (AI Chatbot Ammunition Search)","summary":"Singapore's Internal Security Department (ISD) says a 17-year-old far-right extremist supporter, detained under the Internal Security Act in March 2025 after preparing shooting attacks on Muslims at mosques in Singapore, had searched for instructions on an AI chatbot about producing ammunition and considered 3D printing his own firearms. The chatbot is not named, and what it replied is not reported.","incidentDate":"2025-03-15","incidentKind":"single_event","incidentDatePrecision":"month","exposurePattern":"unknown","reportedDate":"2025-04-02","aiSystem":"AI chatbot (unspecified)","aiProduct":"Unidentified chatbot","aiCompany":"Unknown","severity":"high","verificationStatus":"verified","harmCategories":[],"harmOutcomes":["legal_harm","loss_of_liberty"],"harmOutcomeSummary":"The ISD says a 17-year-old who had prepared shooting attacks on mosques and had searched an AI chatbot for instructions on producing ammunition was detained under Singapore's Internal Security Act in March 2025.","frameworkFacets":[],"causationStatus":"unclear","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"The ISD records one detained 17-year-old who used an AI chatbot. The planned attacks were not carried out, so the people at the mosques are intended targets and are not counted.","victimAgeRange":"minor","jurisdiction":"SG","platformType":"chatbot","outcomeType":"regulatory_action","outcomeStatus":"unknown","primarySourceUrl":"https://www.isd.gov.sg/news-and-resources/singapore-terrorism-threat-assessment-report-2025/","primarySourceLabel":"Internal Security Department, Singapore Terrorism Threat Assessment Report 2025, 29 July 2025","firstPublishedAt":"2026-01-22T07:15:38.750068+00:00","updatedAt":"2026-10-04T03:21:51.543496+00:00","scopeVersion":"facts-v3","tags":["terrorism","far-right","radicalization","minor","singapore","firearms","ammunition","3d-printing","foiled-plot","ai-chatbot"]}]}