{"meta":{"exportedAt":"2026-10-09T07:49:49.090Z","formatVersion":2,"selection":{"q":"security","system":"","harm":"","context":"","country":"","role":"","relation":"","evidence":"","year":"unknown","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":9,"coverage":{"cases":9,"countries":4,"languages":4,"unknownLocation":4,"locationPending":0,"unknownLanguage":0,"unknownDate":9,"lawsuits":0,"regulatory":2,"minors":1,"coreRelations":6,"contextualRelations":2,"mixedRelations":0,"unknownRelations":1,"relationPending":0,"relationUnknown":1},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-coding-agent-restored-server-file-from-two-week-old-archive-undoing-security-fixes-and-moderation-layer-first-person","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'I had asked it to revert some wording it had changed in a privacy policy. To do that it looked around the project, found a `.tar.gz` in the root, and copied `server.js` out of it'; 'the archive was a snapshot from two weeks earlier, and the filename gave no hint of that'; 'It reported success'","relation":"supports","source_id":"s1"}],"assertion":"The poster says an agent, asked to revert wording in a privacy policy, copied server.js out of a .tar.gz archive in the project root that was a two-week-old snapshot, and reported success.","causal_attribution":"Poster's account; the agent's command is described from the session transcript the poster read."},{"id":"c2","status":"reported","evidence":[{"locator":"'That one `cp` took out four verified security fixes and an entire moderation API layer. The fixes were ones the *same agent* had written, tested and deployed about forty minutes earlier in the same session'; 'Nothing was in git. I found out two days later when an endpoint returned 404 that should not have'","relation":"supports","source_id":"s1"}],"assertion":"The poster says the copy removed four verified security fixes, which the same agent had written, tested and deployed about forty minutes earlier, and an entire moderation API layer, that nothing was in git, and that the loss was found two days later when an endpoint returned 404.","causal_attribution":"Poster's account of the loss and its discovery."},{"id":"c3","status":"reported","evidence":[{"locator":"'The lost code was sitting in those transcripts as tool-call arguments. I reconstructed the moderation layer from one and confirmed the timeline from the other, including the exact command that did the damage, timestamped'; 'All four were live again for two days and nobody knew'","relation":"supports","source_id":"s1"}],"assertion":"The poster says the lost code was reconstructed from the agents' session transcripts, where it sat as tool-call arguments, and that the four problems the fixes had closed were, in the poster's words, 'live again for two days and nobody knew'.","causal_attribution":"Poster's account of the recovery."},{"id":"c4","status":"reported","evidence":[{"locator":"'My Claude quota runs out most days and the ChatGPT subscription sits idle, so handing the heavy reading to Codex is genuinely useful'; 'I shipped it, so it’s mine'; 'The failure was not an agent writing something bad, it was an agent reverting something good with nothing in place to notice'","relation":"supports","source_id":"s1"}],"assertion":"The poster runs Claude Code and OpenAI Codex together, does not say which agent ran the copy, and in a reply accepts responsibility for shipping without git or tests.","causal_attribution":"Poster's own statements; the acting agent is not identified in the post or the reply."}],"effects":[{"label":"Coding agent restored a two-week-old file and silently removed deployed security fixes and a moderation layer (poster's account)","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.reddit.com/r/ClaudeCode/comments/1x10ck6/an_agent_restored_a_file_from_a_twoweekold/","kind":"forum_post","access":"read","language":"en","translation_note":"Read in English on 2026-10-09: full self-text and the 4 comments retrieved through the arctic_shift archive API by post ID, one of them the poster's reply. The poster handle is not recorded.","independence_group":"reddit-claudecode-archive-restore-poster"}],"version":1,"ai_roles":["own_use"],"contexts":["work"],"unknowns":["Which agent, Claude Code or Codex, ran the copy; the post names both as in use.","The model and agent versions.","When the restore happened; the post of 8 October 2026 says the loss was found two days after it.","The service and its users, and whether anyone exploited the two-day absence of the fixes.","The poster's country."],"geography":{"basis":"No source states where the poster or the service is. No court proceedings.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published under the public-forum rule as a concrete first-person account of a coding agent restoring a stale file and silently removing deployed security fixes and a moderation layer, with the restore, the loss, the two-day exposure and the recovery attributed to the poster. The acting agent is recorded as unidentified because the post names two agents in use without saying which ran the copy. The poster's handle, the service and the poster's GitHub account are not named.","reviewed_on":"2026-10-09"},"ai_involvement":{"basis":"The poster states that a coding agent, acting on a request to revert wording in a privacy policy, copied server.js out of a two-week-old archive and reported success, and that this copy removed four deployed security fixes, which the agent had itself written, tested and deployed about forty minutes earlier, and a moderation API layer; the poster says the exact command was later found, timestamped, in the agent's session transcript. The agent's copy is the described action and the overwritten, two-day-absent code is its described consequence. Which of the poster's two agents (Claude Code or Codex) ran the copy is not stated. The account is the poster's own and is uncorroborated.","status":"reported"},"person_relations":["acted_on_behalf"]},"name":"Developer says a coding agent restored a file from a two-week-old archive, silently undoing four security fixes and a moderation layer (first-person)","summary":"In a public post to r/ClaudeCode created on 8 October 2026, a developer who runs Claude Code and OpenAI's Codex together writes that an agent, asked to revert some wording it had changed in a privacy policy, found a .tar.gz archive in the project root and copied server.js out of it. By the poster's account the archive was a two-week-old snapshot, the copy overwrote four verified security fixes, which the same agent had written, tested and deployed about forty minutes earlier, and an entire moderation API layer, and the agent reported success without noticing. Nothing was in git. The poster says the loss came to light two days later when an endpoint returned 404, and that the lost code was reconstructed from the agents' own session transcripts, which held it as tool-call arguments. The post does not say which of the two agents ran the copy. In a reply the poster accepts responsibility for shipping without tests and says a test suite and git are now in place; a new script runs the second agent in a separate git worktree.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"single_interaction","reportedDate":"2026-10-08","aiSystem":"One of the two coding agents the poster runs together, Claude Code and OpenAI Codex; the post does not say which one copied server.js out of the two-week-old archive","aiProduct":"Unidentified coding agent","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"The poster says an agent's file restore silently removed four deployed security fixes and a moderation API layer from a live service for two days and cost a fortnight of work, later reconstructed from session transcripts (first-person account, uncorroborated).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person counted: the poster, whose deployed work the agent overwrote. Users of the service during the two days the fixes were absent are not described as harmed and are not counted.","victimAgeRange":"adult","platformType":"agent","outcomeStatus":"resolved","primarySourceUrl":"https://www.reddit.com/r/ClaudeCode/comments/1x10ck6/an_agent_restored_a_file_from_a_twoweekold/","primarySourceLabel":"r/ClaudeCode, 8 October 2026: \"An agent restored a file from a two-week-old archive and silently deleted a fortnight of work\"","firstPublishedAt":"2026-10-09T03:41:31.588063+00:00","updatedAt":"2026-10-09T03:41:31.588063+00:00","scopeVersion":"facts-v3","tags":["first-person","reddit","coding-agent","data-loss","security","archive-restore","claude-code","codex"]},{"id":"2026-espirito-santo-bank-app-facial-recognition-passed-with-photos-of-elderly-man-pix-theft","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'Um homem de 39 anos foi preso suspeito de usar imagens do reconhecimento facial de um idoso de 81 anos para acessar a conta bancária da vítima e desviar R$ 6.080,00'; 'O mandado de prisão preventiva foi cumprido nesta segunda-feira (28).'; 'a prisão ocorreu após a conclusão do inquérito que apurou furto qualificado mediante fraude eletrônica.'","relation":"supports","source_id":"s1"}],"assertion":"A 39-year-old man was arrested on 28 September 2026 on a preventive warrant, after a Civil Police inquiry into qualified theft by electronic fraud, on suspicion of using facial-recognition images of an 81-year-old man to access his bank account and divert R$6,080.","causal_attribution":"Civil Police account relayed by Folha Vitória."},{"id":"c2","status":"reported","evidence":[{"locator":"'o investigado teria convidado o idoso para ir até sua residência, sob a justificativa de produzir uma carteirinha que garantiria entrada gratuita no estabelecimento.'; 'ele teria retido o cartão bancário da vítima, que é analfabeta, além de obter dados pessoais e fotografar o rosto dela.'","relation":"supports","source_id":"s1"}],"assertion":"According to the police, the suspect, a security guard at a dance venue, invited the man to his home on the pretext of making a free-entry card, kept his bank card, obtained personal data and photographed his face; the victim is illiterate.","causal_attribution":"Civil Police account relayed by Folha Vitória."},{"id":"c3","status":"reported","evidence":[{"locator":"'o homem teria usado as imagens para burlar o sistema de reconhecimento facial do aplicativo bancário e habilitar o acesso à conta em seu próprio celular.'; 'ele teria redefinido senhas de segurança, resgatado aplicações financeiras e feito transferências via Pix sem o conhecimento ou consentimento do idoso.'","relation":"supports","source_id":"s1"}],"assertion":"The police say he used the images to get past the banking app's facial recognition and enable access to the account on his own phone, then reset security passwords, redeemed investments and made Pix transfers without the victim's knowledge or consent.","causal_attribution":"Civil Police account relayed by Folha Vitória; no bank or app statement."},{"id":"c4","status":"reported","evidence":[{"locator":"'o investigado tem registros anteriores por furto, estelionato, apropriação indébita, ameaça e delitos de trânsito'; 'ele cumpria pena em regime progressivo quando teria cometido o novo crime.'; 'o homem foi encaminhado ao sistema prisional e permanece à disposição da Justiça.'","relation":"supports","source_id":"s1"}],"assertion":"The police say the suspect had prior records for theft, fraud, misappropriation, threats and traffic offences, was serving a sentence under a progressive regime, and was taken to the prison system.","causal_attribution":"Civil Police account relayed by Folha Vitória."}],"effects":[{"label":"R$6,080 diverted from his bank account after the app's facial recognition was passed with photographs of his face","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.folhavitoria.com.br/policia/homem-e-preso-suspeito-de-usar-rosto-de-idoso-para-acessar-conta-e-desviar-r-6-mil-no-esr-r-6-mil-no-es/","kind":"news_report","access":"read","language":"pt","translation_note":"Read in Portuguese by the research agent (an AI) on 2026-10-07 and translated by the research agent (an AI) into English; no human translator or reviewer was involved. Direct fetch returned HTTP 403; the article was read through an Internet Archive id_ capture of the same URL. The report relays the Espírito Santo Civil Police account.","independence_group":"es-civil-police-statement-2026-09-29"},{"id":"s2","url":"https://folhadoes.com/homem-e-preso-suspeito-de-usar-rosto-de-idoso-para-acessar-conta-e-desviar-r-6-mil-no-es/","kind":"news_report","access":"unavailable","language":"pt","translation_note":"Not read: folhadoes.com returned HTTP 403 on 2026-10-06 and 2026-10-07 and has no Internet Archive capture. Its headline matches Folha Vitória's and it relays the same police account; cited for existence only.","independence_group":"es-civil-police-statement-2026-09-29"}],"version":1,"ai_roles":["others_use","institutional_use"],"contexts":["finance","everyday_life"],"unknowns":["The bank and app whose facial recognition was passed, and whether the bank has commented.","When the meeting, the account access and the transfers took place.","Whether the R$6,080 was recovered.","Whether the suspect has been charged or tried.","How the photographs passed the liveness check, if any."],"geography":{"basis":"The police account places the meeting, the arrest and the regional police station in north-west Espírito Santo, Brazil; the victim is described as an elderly man there; the preventive arrest warrant was issued by a Brazilian court.","court_countries":["BR"],"event_countries":["BR"],"affected_person_countries":["BR"]},"publication":{"basis":"Published as a contextual case (made_decision_about) at low severity: the Espírito Santo Civil Police, relayed by Folha Vitória, say a suspect photographed an 81-year-old man's face, passed his banking app's facial recognition on another phone and diverted R$6,080 through password resets, redemptions and Pix transfers. One police account; the victim and suspect are not named; the bank is not identified.","reviewed_on":"2026-10-07"},"ai_involvement":{"basis":"The Civil Police, relayed by Folha Vitória, say the suspect used photographs of the victim's face to get past the banking app's facial recognition and enable access to the account on his own phone. The facial recognition check accepted the photographs as the account holder and granted access on another device; that authentication decision is what allowed the password resets, redemptions and Pix transfers. The bank, the app and the recognition vendor are not identified, and no bank statement is reported.","status":"reported"},"person_relations":["made_decision_about"]},"name":"Police in Espírito Santo say a man photographed an 81-year-old's face, passed his bank app's facial recognition on his own phone and took R$6,080; arrested","summary":"Folha Vitória reported on 29 September 2026, citing the Espírito Santo Civil Police, that a 39-year-old man was arrested on 28 September on a preventive warrant after an inquiry into qualified theft by electronic fraud against an 81-year-old man in the north-west of the state. According to the police, the suspect, who worked as a security guard at a dance venue, invited the man to his home on the pretext of making a free-entry card, kept his bank card, obtained personal data and photographed his face. The police say he used the images to get past the facial recognition of the banking app and enable access to the account on his own phone, then reset security passwords, redeemed investments and made Pix transfers without the victim's knowledge, diverting R$6,080. The victim is described as illiterate. The police say the suspect had prior records and was serving a sentence under a progressive regime. Folha do ES and Tribuna Norte Leste carried the same police account but could not be read.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"single_interaction","reportedDate":"2026-09-29","aiSystem":"The facial-recognition check of the victim's banking app, which the Civil Police say the suspect passed with photographs of the victim's face to enable account access on his own phone (bank and app not named)","aiProduct":"Unidentified facial recognition system","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["financial_loss"],"harmOutcomeSummary":"R$6,080 was diverted from an 81-year-old man's bank account after, according to the Civil Police, the suspect photographed his face and passed the banking app's facial recognition on his own phone, then reset passwords, redeemed investments and made Pix transfers (police account relayed by Folha Vitória).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"One person, the 81-year-old account holder whose R$6,080 was diverted (police account via Folha Vitória). The suspect is not counted. Exact 1.","victimAgeRange":"elderly","jurisdiction":"BR","platformType":"other","outcomeType":"criminal_charges","outcomeStatus":"ongoing","primarySourceUrl":"https://www.folhavitoria.com.br/policia/homem-e-preso-suspeito-de-usar-rosto-de-idoso-para-acessar-conta-e-desviar-r-6-mil-no-esr-r-6-mil-no-es/","primarySourceLabel":"Folha Vitória, 29 September 2026: man arrested on suspicion of using an elderly man's face to access his account and divert R$6,000 in ES","firstPublishedAt":"2026-10-07T03:25:58.665809+00:00","updatedAt":"2026-10-07T03:25:58.665809+00:00","scopeVersion":"facts-v3","tags":["facial-recognition","banking-app","biometric-bypass","pix","elderly-victim","financial-fraud","brazil","espirito-santo","made-decision-about"]},{"id":"2026-egypt-ai-fabricated-public-figure-chats-product-promotion-fraud-arrest","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'واصطناعه محادثات وهمية مع شخصيات عامة باستخدام برامج الذكاء الاصطناعي لاستقطاب ضحاياه وإضفاء المصداقية على نشاطه الإجرامي'","relation":"supports","source_id":"s1"},{"locator":"'كما أقر باصطناع محادثات وهمية مع شخصيات عامة باستخدام برامج الذكاء الاصطناعي، بهدف استقطاب ضحاياه وإضفاء المصداقية على نشاطه الإجرامي'","relation":"supports","source_id":"s2"},{"locator":"'كان يصطنع محادثات وهمية مع شخصيات عامة باستخدام برامج الذكاء الاصطناعي، لإضفاء المصداقية على نشاطه واستقطاب ضحاياه'","relation":"supports","source_id":"s3"}],"assertion":"According to the Interior Ministry, the suspect fabricated conversations with public figures using artificial intelligence programs to attract victims and lend credibility to his activity; Youm7 and Akhbar El-Yom report this as his admission, and Al-Gomhor attributes it to the investigations.","causal_attribution":"Interior Ministry account of the suspect's admission, relayed by three outlets (one chain); no program or forensic finding is reported."},{"id":"c2","status":"reported","evidence":[{"locator":"'قيام أحد الأشخاص بإدارة صفحة بمواقع التواصل الاجتماعي للنصب والاحتيال والاستيلاء على أموال المواطنين راغبي الترويج لمنتجاتهم التجارية عبر الإعلانات الممولة'; 'وتحت زعم زيادة أعداد المتابعين على صفحاتهم الإلكترونية'; 'وطلبه منهم تحويل مبالغ مالية له، وعقب ذلك يقوم بغلق هاتفه المحمول'","relation":"supports","source_id":"s1"},{"locator":"'ثم يطلب منهم تحويل مبالغ مالية، قبل أن يغلق هاتفه عقب الاستيلاء عليها'","relation":"supports","source_id":"s3"}],"assertion":"According to the Interior Ministry, the suspect ran a social media page that took money from people who wanted to promote their products through sponsored advertising, on the claim of increasing their followers, asked them to transfer money and then switched off his phone.","causal_attribution":"Interior Ministry account; amounts and the number of people are not reported."},{"id":"c3","status":"reported","evidence":[{"locator":"'وتبين ارتكابه (12) واقعة نصب واحتيال على المواطنين بذات الأسلوب'","relation":"supports","source_id":"s1"},{"locator":"'تبين ارتكابه 12 واقعة نصب واحتيال على المواطنين، مستخدمًا الأسلوب الإجرامي ذاته'","relation":"supports","source_id":"s2"}],"assertion":"The Interior Ministry says the suspect committed 12 fraud incidents against citizens in the same way.","causal_attribution":"Ministry count of incidents; the number of distinct people is not stated."},{"id":"c4","status":"reported","evidence":[{"locator":"'أمكن تحديد وضبط القائم على إدارة الصفحة المشار إليها'; 'مقيم بدائرة قسم شرطة الأهرام'; 'تم اتخاذ الإجراءات القانونية'","relation":"supports","source_id":"s1"},{"locator":"'وعُثر بحوزته على هاتف محمول، وبفحصه تبين احتواؤه على دلائل تؤكد نشاطه الإجرامي'","relation":"supports","source_id":"s2"}],"assertion":"The ministry's information technology crimes department identified and arrested the man, who lived in the Al-Ahram police station district, seized a mobile phone holding evidence of the activity, and took legal measures.","causal_attribution":"Police action as stated by the ministry; no charge or court step is reported."}],"effects":[{"label":"people seeking paid promotion for their products transferred money to a page that used AI-fabricated conversations with public figures, and the operator then switched off his phone","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.youm7.com/story/2026/10/2/%D8%B3%D9%82%D9%88%D8%B7-%D9%85%D8%B3%D8%AC%D9%84-%D8%AE%D8%B7%D8%B1-%D8%A7%D8%B3%D8%AA%D8%AE%D8%AF%D9%85-%D8%A7%D9%84%D8%B0%D9%83%D8%A7%D8%A1-%D8%A7%D9%84%D8%A7%D8%B5%D8%B7%D9%86%D8%A7%D8%B9%D9%89-%D9%81%D9%89-12-%D9%88%D8%A7%D9%82%D8%B9%D8%A9-%D9%86%D8%B5%D8%A8/7564819","kind":"news_report","access":"read","language":"ar","translation_note":"Read live in Arabic on 2026-10-04 (Youm7, 2 October 2026, bylined Mahmoud Abdel-Radi; the canonical story page and its AMP copy carry the same text). Researcher translation. Relays the Egyptian Interior Ministry statement; same chain as the other two sources. The Arabic refers to the suspect with masculine forms, rendered as 'man'.","independence_group":"egypt-moi-ai-fake-public-figure-chats-statement-2026-10-02"},{"id":"s2","url":"https://akhbarelyom.com/news/newdetails/4885571/1/%D9%85%D8%AD%D8%A7%D8%AF%D8%AB%D8%A7%D8%AA-%D9%88%D9%87%D9%85%D9%8A%D8%A9-%D8%AA%D9%81%D8%A7%D8%B5%D9%8A%D9%84-%D8%AC%D8%B1%D9%8A%D9%85%D8%A9-%D9%86%D8%B5%D8%A8-%D8%A8%D8%A7%D9%84%D8%B0%D9%83%D8%A7%D8%A1-%D8%A7","kind":"news_report","access":"read","language":"ar","translation_note":"Read live in Arabic on 2026-10-04 (Akhbar El-Yom, 2 October 2026). Researcher translation. Relays the Egyptian Interior Ministry statement; same chain as the other two sources. The Arabic refers to the suspect with masculine forms, rendered as 'man'.","independence_group":"egypt-moi-ai-fake-public-figure-chats-statement-2026-10-02"},{"id":"s3","url":"https://www.algomhor.com/490059","kind":"news_report","access":"read","language":"ar","translation_note":"Read live in Arabic on 2026-10-04 (Al-Gomhor, 2 October 2026). Researcher translation. Relays the Egyptian Interior Ministry statement; same chain as the other two sources. The Arabic refers to the suspect with masculine forms, rendered as 'man'.","independence_group":"egypt-moi-ai-fake-public-figure-chats-statement-2026-10-02"}],"version":1,"ai_roles":["others_use"],"contexts":["finance","everyday_life"],"unknowns":["Which public figures were imitated, what the fabricated conversations looked like and which AI programs were used.","How many distinct people the 12 incidents involved and how much money was taken.","When the page began operating, whether the arrest took place in Giza or Cairo, and whether the man has been charged."],"geography":{"basis":"Egypt's Interior Ministry arrested the man, who lived in the Al-Ahram police station district (Youm7; Akhbar El-Yom). Youm7's headline places the case in Giza, while Akhbar El-Yom and Al-Gomhor place the arrest in Cairo. The ministry calls the victims citizens but does not say where they live, so no affected-person country is recorded. No court step is reported.","court_countries":[],"event_countries":["EG"],"affected_person_countries":[]},"publication":{"basis":"Published under the 2026-09-15 charter: the Egyptian Interior Ministry says a man used AI programs to fabricate conversations with public figures to win the trust of people who then transferred money to him, in 12 fraud incidents. One ministry statement relayed by three outlets; the AI use rests on the suspect's admission as the ministry reports it. The suspect and the people defrauded are not identified.","reviewed_on":"2026-10-04"},"ai_involvement":{"basis":"The Interior Ministry says the suspect admitted fabricating conversations with public figures using artificial intelligence programs to attract victims and lend credibility to his activity (Youm7; Akhbar El-Yom); Al-Gomhor attributes the same finding to the investigations. No program is named and no forensic finding is reported. The fabricated conversations imitated public figures who are not identified or reported harmed; the reports do not describe what the people who paid were shown, so the relation between the AI output and them is recorded as unknown.","status":"reported"},"person_relations":["unknown"]},"name":"Egypt: the Interior Ministry says a man used AI programs to fabricate conversations with public figures to win the trust of people who wanted paid promotion for their products, took their money transfers and then switched off his phone, in 12 fraud incidents; arrest announced on 2 October 2026","summary":"On 2 October 2026 Youm7, Akhbar El-Yom and Al-Gomhor relayed an Egyptian Interior Ministry statement saying that the ministry's information technology crimes department, working with the public security sector, had identified a man running a social media page that took money from people who wanted to promote their products through sponsored advertising, on the claim that it would raise their follower numbers. The ministry says that, when confronted, he admitted creating the page to defraud them and fabricating conversations with public figures using artificial intelligence programs to attract victims and make his activity look credible. He asked them to transfer money and then switched off his phone. The ministry says he committed 12 fraud incidents against citizens in the same way and that legal measures were taken. The reports do not give the amounts, the number of distinct people defrauded, the public figures involved or the AI programs used.","incidentKind":"bounded_series","incidentDatePrecision":"unknown","exposurePattern":"unknown","reportedDate":"2026-10-02","aiSystem":"Unidentified artificial intelligence programs that the suspect used to fabricate conversations with public figures, per the Interior Ministry's account of his admission","aiProduct":"Unidentified fake-chat tool","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["financial_loss"],"harmOutcomeSummary":"The Interior Ministry says people seeking paid promotion for their products transferred money to the page after being shown AI-fabricated conversations with public figures, and that the man then switched off his phone; it counts 12 fraud incidents but gives no amounts (ministry statement via Youm7, Akhbar El-Yom and Al-Gomhor).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":0,"affectedCountStatus":"unquantified","affectedCountEvidence":"The ministry statement counts 12 fraud incidents against citizens committed in the same way, but does not say how many distinct people they involved; Al-Gomhor's headline speaks of 12 citizens, but its body, like the other reports, counts incidents. Unquantified; numeric fields are zero placeholders.","victimAgeRange":"unknown","jurisdiction":"EG","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://www.youm7.com/story/2026/10/2/%D8%B3%D9%82%D9%88%D8%B7-%D9%85%D8%B3%D8%AC%D9%84-%D8%AE%D8%B7%D8%B1-%D8%A7%D8%B3%D8%AA%D8%AE%D8%AF%D9%85-%D8%A7%D9%84%D8%B0%D9%83%D8%A7%D8%A1-%D8%A7%D9%84%D8%A7%D8%B5%D8%B7%D9%86%D8%A7%D8%B9%D9%89-%D9%81%D9%89-12-%D9%88%D8%A7%D9%82%D8%B9%D8%A9-%D9%86%D8%B5%D8%A8/7564819","primarySourceLabel":"Youm7, 2 October 2026: Man with a police record used AI in 12 fraud incidents in Giza (Interior Ministry statement)","firstPublishedAt":"2026-10-04T03:29:48.42061+00:00","updatedAt":"2026-10-04T03:29:48.42061+00:00","scopeVersion":"facts-v3","tags":["ai-fabricated-chats","impersonation","public-figures","advance-payment-fraud","social-media-advertising","egypt","arrest","arabic-language"]},{"id":"2026-murcia-ai-real-time-face-modification-forged-dni-video-checks-electronic-signature-certificates","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'El investigado aparecía personalmente en los vídeos de verificación de la empresa mostrando el DNI falsificado mientras que, gracias a la inteligencia artificial, su rostro en pantalla se modificaba en tiempo real para ser idéntico al de la fotografía del documento. De este modo realizó 38 intentos sobre más de 30 identidades de ciudadanos reales.'","relation":"supports","source_id":"s1"},{"locator":"'Durante las videoconferencias de verificación, aparecía físicamente ante la cámara, mientras un programa modificaba sus facciones en tiempo real para que coincidieran con las de la persona cuya identidad estaba suplantando.'","relation":"supports","source_id":"s2"},{"locator":"'The unnamed man allegedly made 38 attempts to impersonate 30 people and obtain digital certificates in their names, succeeding on multiple occasions.'","relation":"supports","source_id":"s3"}],"assertion":"Police say the suspect appeared in an electronic-certificate company's verification videos showing forged DNI cards while AI software modified the suspect's face in real time to match the photo on the forged document and the features of the person being impersonated, making 38 attempts on more than 30 identities of real citizens.","causal_attribution":"Police allegation in a press release; untested in court."},{"id":"c2","status":"reported","evidence":[{"locator":"'logrando suplantar la identidad de múltiples víctimas.'","relation":"supports","source_id":"s1"},{"locator":"'con el objetivo final de conseguir firmas digitales autorizadas que posteriormente pudieran ser utilizadas para cometer estafas económicas.'","relation":"supports","source_id":"s2"},{"locator":"'Police did not say how many of the 38 attempts succeeded, only that certificates were issued on \"multiple\" occasions.'","relation":"supports","source_id":"s3"}],"assertion":"Police say the suspect succeeded in impersonating multiple victims, with the final aim of obtaining authorised digital signatures for later economic scams; they did not say how many attempts succeeded.","causal_attribution":"Police statement; no later fraud using the certificates is reported."},{"id":"c3","status":"reported","evidence":[{"locator":"'Durante apenas un segundo, la máscara digital de su víctima desapareció de la pantalla, dejando al descubierto el rostro real del sospechoso ante el personal de seguridad de la entidad emisora.'; 'culminando con la detención del investigado como presunto responsable de un delito continuado de falsedad documental en documento oficial.'","relation":"supports","source_id":"s1"},{"locator":"'A search of his home yielded a laptop protected by high-grade encryption, several mobile phones, storage devices, and documents, according to police.'","relation":"supports","source_id":"s3"}],"assertion":"During one live video identification the face-modification program lagged and for about a second the victim's digital mask disappeared, exposing the suspect's real face to the issuer's security staff; police then arrested the suspect as the alleged perpetrator of a continuing offence of falsifying official documents and seized an encrypted laptop, phones and storage devices.","causal_attribution":"Police account of the detection and arrest."},{"id":"c4","status":"reported","evidence":[{"locator":"'Los agentes identificaron más de 320 líneas telefónicas asociadas a 24 dispositivos móviles distintos. La mayoría de estas líneas habían sido contratadas utilizando identidades suplantadas y adquiridas en puntos de venta localizados en Murcia.'","relation":"supports","source_id":"s2"}],"assertion":"Investigators identified more than 320 phone lines on 24 mobile devices, most contracted with impersonated identities and bought at points of sale in Murcia.","causal_attribution":"Police statement; the phone lines are not described as involving AI."}],"effects":[{"label":"identities of more than 30 real citizens used on forged ID cards and impersonated with real-time AI face modification to apply for signature certificates","claim_id":"c1","direction":"negative"},{"label":"police say the impersonation succeeded for multiple victims","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.h50.es/la-policia-nacional-detiene-a-un-ciberdelincuente-que-utilizaba-una-tecnica-pionera-mediante-ia-para-obtener-certificados-de-firma-electronica/","kind":"news_report","access":"read","language":"es","translation_note":"Read live in Spanish on 2026-10-02 (h50 Digital Policial, 11 August 2026); the text reproduces the Policía Nacional release. Researcher translation.","independence_group":"policia-nacional-release-2026-08-11"},{"id":"s2","url":"https://www.la7tv.es/articulo/sucesos/detenido-murcia-ciberdelincuente-que-usaba-ia-obtener-certificados-digitales/20260811095847072087.html","kind":"news_report","access":"read","language":"es","translation_note":"Read live in Spanish on 2026-10-02 (La 7 TV Región de Murcia, 11 August 2026); a rewrite of the same police release. Researcher translation.","independence_group":"policia-nacional-release-2026-08-11"},{"id":"s3","url":"https://www.theregister.com/security/2026/08/11/deepfake-hiccup-unmasks-suspected-digital-certificate-fraudster/5285934","kind":"news_report","access":"read","language":"en","translation_note":"Read live in English on 2026-10-02 (The Register, 11 August 2026); summarises the police release and quotes it in machine translation.","independence_group":"policia-nacional-release-2026-08-11"}],"version":1,"ai_roles":["others_use"],"contexts":["privacy","finance"],"unknowns":["When the attempts took place and when the arrest was made; the police release is dated 11 August 2026.","How many certificates were issued and whether any was used in a later fraud.","Which face-modification program was used.","Where the issuing company is based and where the impersonated citizens live.","Any charge decision or court proceeding."],"geography":{"basis":"Policía Nacional arrested the suspect in Murcia, and most of the more than 320 phone lines were bought at points of sale in Murcia. The issuing company's location is not stated in the inspected bodies, and the residence of the impersonated citizens is not stated (a DNI is not used to infer residence). No court proceeding is reported.","court_countries":[],"event_countries":["ES"],"affected_person_countries":[]},"publication":{"basis":"Published as a core case (depicted_or_impersonated): police say a suspect used real-time AI face modification in video identity checks to impersonate more than 30 real citizens on forged ID cards, succeeding for multiple victims. One police chain (Policía Nacional release) read in Spanish via h50 and La 7 TV and in English via The Register; every claim is reported. The suspect and the impersonated citizens are not named. Event date unknown; reported 11 August 2026.","reviewed_on":"2026-10-02"},"ai_involvement":{"basis":"Policía Nacional states that the suspect used artificial intelligence to modify the suspect's face in real time during video identity checks so that it matched the photo on forged DNI cards, combined with deepfake techniques; police call the AI-altered face 'la máscara digital de su víctima'. The tool is not named and the videos were not inspected. The allegation is untested in court. The AI output impersonated the real citizens (depicted_or_impersonated).","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Spanish police arrest a man in Murcia suspected of using real-time AI face modification and forged ID cards to impersonate more than 30 real people in video identity checks for electronic signature certificates","summary":"Spain's Policía Nacional said on 11 August 2026 that it had arrested in Murcia a suspect who tried to obtain electronic signature certificates in other people's names from a company that issues them. During the company's video identity checks the suspect appeared on camera holding a forged DNI identity card while AI software modified the suspect's face in real time to match the photo on the forged document. Police say the suspect made 38 attempts using the identities of more than 30 real citizens and succeeded in impersonating multiple victims, aiming to use the signatures for later scams. A short processing delay in the face-modification software made the digital mask disappear for barely a second, exposing the suspect's real face to the issuer's security staff.","incidentKind":"bounded_series","incidentDatePrecision":"unknown","exposurePattern":"unknown","reportedDate":"2026-08-11","aiSystem":"AI software that modified the suspect's face in real time during live video identity checks to match the photo on forged DNI cards, described by police as deepfake techniques; the program is not named","aiProduct":"Unidentified video tool","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"Police say the identities of more than 30 real citizens were used on forged ID cards and impersonated with real-time AI face modification in 38 attempts to obtain electronic signature certificates, succeeding for multiple victims (Policía Nacional release via h50 and La 7 TV; The Register).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":30,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"The Policía Nacional release (h50; La 7 TV) says the suspect, showing a forged DNI while AI altered the suspect's face on camera, 'De este modo realizó 38 intentos sobre más de 30 identidades de ciudadanos reales': each of these real citizens had their identity placed on a forged DNI and impersonated in a live video check, and the release calls the person impersonated in the attempt that failed 'su víctima'. Documented minimum 30 (more than 30). The count is of people whose identities were used, not of issued certificates: impersonation succeeded for 'múltiples víctimas', a number police did not give (The Register). The certificate-issuing company and the people whose identities were used for the 320 phone lines are not counted (the phone-line identities are not tied to the AI use).","victimAgeRange":"unknown","jurisdiction":"ES","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://www.h50.es/la-policia-nacional-detiene-a-un-ciberdelincuente-que-utilizaba-una-tecnica-pionera-mediante-ia-para-obtener-certificados-de-firma-electronica/","primarySourceLabel":"h50 Digital Policial, 11 August 2026: La Policía Nacional detiene en Murcia a un ciberdelincuente que utilizaba una técnica pionera mediante IA","firstPublishedAt":"2026-10-02T03:25:55.932181+00:00","updatedAt":"2026-10-02T03:25:55.932181+00:00","scopeVersion":"facts-v3","tags":["deepfakes","identity-impersonation","identity-verification-bypass","electronic-signature","arrest","spanish-language"]},{"id":"2025-montreal-icu-chief-francois-marquis-ai-deepfake-ads-scam-victim-icu","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'he said there has been a proliferation of artificial intelligence (AI) generated deepfakes on people’s social media feeds.'; 'It’s all people calling me and telling me there’s some deepfakes, you know, running around.'; 'he’s talking about joint pain and selling supplements. But more seriously, he said he’s seen videos where he is peddling cures for cancer and anti-pharmaceutical propaganda.'","relation":"supports","source_id":"s1"},{"locator":"'Marquis said he was in disbelief when he first learned his image was being used in a deepfake video.'; 'He received phone calls from people saying \"you're all over Facebook,\"'","relation":"supports","source_id":"s2"},{"locator":"'said he's heard from multiple patients and colleagues that videos featuring his likeness — all selling a range of pills or products — keep popping up on Facebook.'; 'referring to the latest AI-generated ad.'","relation":"supports","source_id":"s3"}],"assertion":"Dr. François Marquis, chief of intensive care at Montreal's Maisonneuve-Rosemont Hospital, says AI-generated deepfake videos using his likeness have circulated on Facebook since at least August 2025, selling joint supplements, pills and cancer cures and spreading anti-pharmaceutical claims; he learns of them from people who call him because he is not on social media.","causal_attribution":"The doctor's own account in three interviews (CBC 2025, CTV and CBC 2026); no inspected source reproduces or analyses a video."},{"id":"c2","status":"reported","evidence":[{"locator":"'This poor man actually ended up, you know, barging in the ICU and he wanted his money back because he never received the drugs,'","relation":"supports","source_id":"s1"},{"locator":"'after a person who was taken for a few hundred dollars in an online scam showed up at the hospital demanding his money back.'","relation":"supports","source_id":"s2"},{"locator":"'Marquis recalled a victim of one deepfake scam who came looking for him in the ICU, wanting his money back for pills that were never delivered.'; 'that person invested hundreds of dollars in those pills and never received anything,'","relation":"supports","source_id":"s3"}],"assertion":"A person who paid hundreds of dollars for pills advertised in one of the deepfakes, and never received them, came to the hospital and into the ICU demanding his money back from Dr. Marquis.","causal_attribution":"Recounted by Dr. Marquis in each interview; the person is not identified and did not speak to the outlets. The three accounts appear to describe the same visit, but no source confirms that."},{"id":"c3","status":"reported","evidence":[{"locator":"'has reported the deepfakes to Quebec’s College of Physicians and Montreal police, but he said there is little else he can do to make these videos stop, except speaking out about them.'","relation":"supports","source_id":"s1"},{"locator":"'he routinely struggles to get deepfake videos taken down before new ones pop back up — even though he's flagged them to social media platforms, Quebec's medical college and the police.'","relation":"supports","source_id":"s3"},{"locator":"'Basically I was told that there's nothing they can really do,'","relation":"supports","source_id":"s3"}],"assertion":"Dr. Marquis has reported the deepfakes to the Collège des médecins du Québec, Montreal police and social media platforms, but says new videos keep appearing and there is little he can do to stop them.","causal_attribution":"The doctor's account; he says he was told 'there's nothing they can really do', and no statement from the platforms, police or the college is reported."},{"id":"c4","status":"reported","evidence":[{"locator":"'now it's about the security of the people in the hospital,'; 'The other problem is that some people will actually stop taking their usual medication to take this fake drug,'","relation":"supports","source_id":"s2"}],"assertion":"He says the visit by the scam victim raised a security concern for people in the hospital, and that some people may stop their usual medication for fake drugs.","causal_attribution":"The doctor's stated concern; no patient who stopped treatment because of these videos is described."}],"effects":[{"label":"his face and voice used in AI-generated deepfake ads selling supplements, cancer cures and anti-pharmaceutical claims on Facebook","claim_id":"c1","direction":"negative"},{"label":"a person who paid hundreds of dollars for pills advertised in one of the deepfakes never received them and came to the ICU demanding his money back","claim_id":"c2","direction":"negative"},{"label":"reports to the medical college, police and platforms have not stopped the videos","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.ctvnews.ca/montreal/article/deepfakes-of-well-known-montreal-doctor-raising-alarm/","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-01 from the live CTV News page (18 September 2026); article text from the page JSON-LD articleBody. Interview with Dr. Marquis.","independence_group":"marquis-own-account"},{"id":"s2","url":"https://www.cbc.ca/news/canada/montreal/quebec-doctors-deepfake-scams-warning-1.7599117","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-01 from the live CBC News page (1 August 2025, updated 4 August 2025). Interview with Dr. Marquis and another Quebec physician.","independence_group":"marquis-own-account"},{"id":"s3","url":"https://ca.news.yahoo.com/deepfake-doctors-peddling-bogus-cures-080000588.html","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-01 from the Yahoo News Canada copy of a CBC News feature (18 September 2026). Interview with Dr. Marquis and other physicians.","independence_group":"marquis-own-account"}],"version":1,"ai_roles":["others_use"],"contexts":["health","work","finance"],"unknowns":["Who made and paid for the ads, which AI tool was used, and how many videos exist.","Whether the ICU visit described in 2025 and in 2026 is the same event, and how many people bought products from the ads.","Whether Meta removed any of the reported ads, and the outcome of the police and medical-college reports.","When the first deepfake appeared (before August 2025)."],"geography":{"basis":"Dr. Marquis is chief of intensive care at Maisonneuve-Rosemont Hospital in Montreal, where the scam victim confronted him (CTV, CBC). The ads circulate on Facebook and their origin is not stated, so the event country is left unknown.","court_countries":[],"event_countries":[],"affected_person_countries":["CA"]},"publication":{"basis":"Published as a core case (depicted_or_impersonated): a named Montreal ICU chief, a public figure speaking on record to CBC and CTV, says AI deepfake ads using his likeness have sold supplements and cures on Facebook since at least August 2025, and that a scam victim who paid hundreds of dollars for undelivered pills confronted him in the ICU. The account rests on his own interviews; the ads' makers are unknown. The scam victim is not identified.","reviewed_on":"2026-10-01"},"ai_involvement":{"basis":"Dr. Marquis describes the videos as AI-generated deepfakes using his likeness (CTV News 2026; CBC 2025 and 2026), and CBC calls the latest one an AI-generated ad. No inspected source names the tool, the advertiser or who made the videos, and the doctor says he is not on social media and learns of the videos from people who call him.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Montreal: Dr. François Marquis, chief of intensive care at Maisonneuve-Rosemont Hospital, says AI deepfake ads using his face have sold supplements and cancer cures on Facebook since at least August 2025, and that a scam victim who paid hundreds of dollars for pills that never arrived came to the ICU demanding a refund","summary":"Dr. François Marquis, chief of intensive care at Maisonneuve-Rosemont Hospital in Montreal, told CBC News (August 2025) and CTV News and CBC News (September 2026) that AI-generated deepfake videos using his likeness keep appearing on Facebook, selling joint supplements, pills and cancer cures and spreading anti-pharmaceutical claims; the latest offers $1 million to dissatisfied customers. He is not on social media and learns of the videos from people who call him. He recounts that a person who paid hundreds of dollars for pills advertised in one of the videos, and never received them, came into the ICU demanding his money back, which he describes as a security problem for the hospital. He has reported the deepfakes to Quebec's College of Physicians, Montreal police and the platforms, but says new videos keep appearing. The makers of the ads are not identified.","incidentKind":"ongoing_experience","incidentDatePrecision":"unknown","exposurePattern":"repeated_interactions","reportedDate":"2025-08-01","aiSystem":"AI-generated deepfake video ads using Dr. Marquis's face and voice, circulated on Facebook (his account to CBC and CTV); no tool or advertiser is named","aiProduct":"Unidentified video tool","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["reputational_harm","financial_loss"],"harmOutcomeSummary":"Dr. Marquis says AI deepfake ads falsely show him selling supplements and cures and spreading anti-pharmaceutical claims, and that one person lost hundreds of dollars on pills that never arrived and confronted him in the ICU (his account to CBC and CTV).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":2,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"Dr. Marquis, whose likeness is used, and one person who paid hundreds of dollars for undelivered pills and came to the ICU (counted once; the 2025 and 2026 accounts appear to describe the same visit). The doctor says other people lose money but gives no number. Documented minimum 2.","victimAgeRange":"adult","jurisdiction":"CA-QC","platformType":"other","outcomeType":"media_coverage","outcomeStatus":"ongoing","primarySourceUrl":"https://www.ctvnews.ca/montreal/article/deepfakes-of-well-known-montreal-doctor-raising-alarm/","primarySourceLabel":"CTV News, 18 September 2026: Deepfakes of well-known Montreal doctor raising alarm","firstPublishedAt":"2026-10-01T03:18:04.682437+00:00","updatedAt":"2026-10-01T03:18:04.682437+00:00","scopeVersion":"facts-v3","tags":["deepfake","doctor-impersonation","health-scam","facebook-ads","montreal","quebec","depicted-or-impersonated"]},{"id":"2025-adviser-reports-client-ai-romance-photo-bitcoin-loss","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"Attached screenshot, pasted message from the scammer (agent transcription): 'am not the person you see in pictures it's AI and other people pictures'","relation":"supports","source_id":"s3"},{"locator":"Body: 'Michael added that after the money was transferred, the scammer admitted that the photos used during their conversations were fake and created with artificial intelligence (AI) tools.'","relation":"supports","source_id":"s1"}],"assertion":"The scammer's message to the client, shown in the screenshot the adviser posted, said that this was not real and that she was 'not the person you see in pictures', the pictures being AI and other people's pictures; BitDegree relays this as an admission that the photos were AI-created.","causal_attribution":"All three sources carry the adviser's own post and the screenshot he attached; they form one reporting chain, so the claim stays reported. Causation is alleged by the adviser and the client; no payment record, image or police report was inspected."},{"id":"c2","status":"reported","evidence":[{"locator":"Post text: 'who just lost all his Bitcoin' and 'He finally made it to 1 BTC.'; attached screenshot, message from the client (agent transcription): 'I paid for a ticket to meet her and her family in California for December 26'; full post text: 'I had numerous phone calls (hours!) and a string of text messages with him because he refused to believe me' and '(he bought her a plane ticket)'","relation":"supports","source_id":"s3"},{"locator":"Body: 'According to Michael, his client sent all of his Bitcoin to someone pretending to be a trader.'; 'Michael explained that he tried several times to stop his client from making the transfer.'; 'In addition to losing his Bitcoin retirement savings, the man also bought a plane ticket for the person he believed he would meet.'","relation":"supports","source_id":"s1"},{"locator":"Body: 'lost his entire retirement fund, one full Bitcoin'","relation":"supports","source_id":"s2"}],"assertion":"The client, who had recently reached one bitcoin, sent all of it to someone posing as a trader and romantic partner despite the adviser's repeated warnings; he wrote that his retirement funds were gone and that he had paid for a ticket to meet her and her family on 26 December.","causal_attribution":"All three sources carry the adviser's own post and the screenshot he attached; they form one reporting chain, so the claim stays reported. Causation is alleged by the adviser and the client; no payment record, image or police report was inspected."},{"id":"c3","status":"reported","evidence":[{"locator":"Body: 'The case was described by Terence Michael, an author from The Bitcoin Adviser, in a post shared on X.'","relation":"supports","source_id":"s1"},{"locator":"Body: 'His story, shared by Bitcoin security adviser Terence Michael'","relation":"supports","source_id":"s2"},{"locator":"Post text: 'I have a Bitcoin client' (created 2025-12-14T16:21:50Z per the syndication record)","relation":"supports","source_id":"s3"}],"assertion":"The adviser's X post of 14 December 2025 is the original account; BitDegree and the Cointelegraph explainer relay it.","causal_attribution":"Established by the relays' own attribution and the post's syndication record; the relays add no independent account."}],"effects":[{"label":"Adviser-reported loss of a client's bitcoin retirement savings","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.bitdegree.org/crypto/news/pig-butchering-scam-wipes-out-bitcoin-investors-retirement-account","kind":"news_relay_of_social_post","access":"read","language":"en","translation_note":"","independence_group":"terence-michael-client-account"},{"id":"s2","url":"https://www.tradingview.com/news/cointelegraph:9a94bab77094b:0-how-an-ai-fueled-romance-scam-drained-a-bitcoin-retirement-fund/","kind":"explainer_article","access":"read","language":"en","translation_note":"","independence_group":"terence-michael-client-account"},{"id":"s3","url":"https://x.com/ProofOfMoney/status/2000239818522120370","kind":"first_person_social_post","access":"read","language":"en","translation_note":"Read on 2026-10-07: the X syndication endpoint (HTTP 200) returned only the first 280 characters of this long-form post; the full text was read through the fxtwitter API mirror (HTTP 200, bodies/verify-upd-adviser-xpost-fx.json). The attached screenshot of the client's message and the scammer's message was transcribed from the image by the research agent (an AI). The client's first name appears in the screenshot and is not reproduced.","independence_group":"terence-michael-client-account"}],"version":1,"ai_roles":["others_use"],"contexts":["finance","relationships"],"unknowns":["The client's location, the scam's start date, the generation tool and the exact value lost beyond the adviser's 'all his Bitcoin' and '1 BTC' are unknown.","The persona's pictures and the payment records were not inspected; the scammer's message is known only through the screenshot the adviser posted.","The Cointelegraph explainer's statement about real-time deepfake video calls is not in the adviser's post and is not established.","Whether the client reported the loss to police or recovered anything is not reported."],"geography":{"basis":"The adviser's post and the relays do not say where the client or the scammer lived or where the exchanges took place. The ticket's destination (California) does not establish the client's residence. Countries remain unknown.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"A first-person account by a named adviser, read in his X post with the attached screenshot, describes a concrete financial loss by one client connected to a romance persona whose pictures the scammer said were AI-made. Two relays repeat the post and add no independent support. All claims stay reported, the client is not named, the amount is given as the adviser states it (one bitcoin), and the location, dates and tools remain unknown.","reviewed_on":"2026-10-07"},"ai_involvement":{"basis":"The scammer's own message to the client, shown in the screenshot the adviser attached to his X post, states that the persona's pictures were AI and other people's pictures. The client wrote in the same screenshot that the woman he had been talking with did not exist, that he had paid for a ticket to meet her, and that his retirement funds were gone, and the adviser's post says the client lost all his bitcoin. The AI-generated pictures are the material that presented a non-existent woman to the client during the relationship through which he transferred his bitcoin. The tool is unnamed, the pictures were not inspected, and the Cointelegraph explainer's description of live deepfake video calls is not supported by the post.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Bitcoin adviser reports a client lost his retirement savings to a romance scam; the scammer's message said the persona's pictures were AI-made","summary":"Bitcoin security adviser Terence Michael wrote on X on 14 December 2025 that a client who had recently reached one bitcoin had lost all of it to a 'pig butchering' romance and trading scam. A screenshot attached to the post shows the client telling the adviser that the woman he had been talking with did not exist, that he had paid for a ticket to meet her and her family on 26 December, and that his retirement funds and family savings were gone. The screenshot also shows the scammer's message to the client saying that this was not real, that she was not the person in the pictures, that the pictures were AI and other people's pictures, and that no funds could be withdrawn. BitDegree (15 December 2025) and a Cointelegraph explainer (31 December 2025) relay the adviser's account; the adviser said he had tried several times to stop the transfers. The client's identity and location, the scam's start date and the tools used are unknown. The Cointelegraph explainer's description of live deepfake video calls does not appear in the adviser's post and is not established.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"unknown","reportedDate":"2025-12-14","aiSystem":"AI-generated pictures of a romance-scam persona (per the scammer's message relayed in the adviser's post)","aiProduct":"Unidentified image tool","aiCompany":"Unknown","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["financial_loss"],"harmOutcomeSummary":"Adviser-reported loss of a client's Bitcoin retirement savings","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"The adviser's post and the attached screenshot describe one client who lost all his bitcoin and his retirement funds. The adviser is the reporter, not a harmed person; the family members mentioned in the screenshot are not counted.","victimAgeRange":"adult","platformType":"other","primarySourceUrl":"https://www.bitdegree.org/crypto/news/pig-butchering-scam-wipes-out-bitcoin-investors-retirement-account","primarySourceLabel":"BitDegree, 15 December 2025: relay of the adviser's X post about the client's loss","firstPublishedAt":"2026-09-30T01:11:16.25973+00:00","updatedAt":"2026-10-07T03:25:14.223863+00:00","scopeVersion":"facts-v3","tags":[]},{"id":"2026-livingston-parish-louisiana-arrest-in-extortion-case-involving-reported-ai-nude-photos-and-videos","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"one person was being threatened with rape and other bodily harm unless they paid money","relation":"supports","source_id":"s1"},{"locator":"AI-generated photos and videos of one of the victims were also sent to numerous family members and friends","relation":"supports","source_id":"s1"},{"locator":"AI generated photos and videos were created of one of the victims and were sent out to numerous family members and friends","relation":"supports","source_id":"s2"},{"locator":"assigned to assist in an investigation into threats made by phone and online","relation":"supports","source_id":"s3"}],"assertion":"The Livingston Parish Sheriff's Office said an investigation into threats made by phone and online involved one alleged victim being threatened with rape and other bodily harm unless money was paid, and AI-generated photos and videos of one of the victims being sent to numerous family members and friends.","causal_attribution":"The sheriff's office statement as relayed by three outlets. No victim account, court record or image was inspected. The sheriff's office attributes the creation and sending of this material to the accused."},{"id":"c2","status":"reported","evidence":[{"locator":"more threats were sent to the victims, now threatening to get one of the victim’s employments terminated","relation":"supports","source_id":"s2"},{"locator":"eventually including a threat to get one victim fired","relation":"supports","source_id":"s3"}],"assertion":"The sheriff's office said that later threats to the victims included a threat to get one victim's employment terminated.","causal_attribution":"The sheriff's office statement as relayed by two outlets. The sources do not say whether the threat was carried out."},{"id":"c3","status":"reported","evidence":[{"locator":"search results and subpoenas from platforms used to send the threats pointed back to","relation":"supports","source_id":"s1"},{"locator":"search returns and subpoenas from certain suspect platforms used to make these harassing messages and threats started coming back","relation":"supports","source_id":"s2"},{"locator":"made all the fictitious accounts, AI-generated nude photos/videos, rape threats, and extortion attempts","relation":"supports","source_id":"s2"},{"locator":"created the fake accounts, the AI-generated nude photos and videos, the rape threats, and the demands for money that she and another person had reported as victims","relation":"supports","source_id":"s3"}],"assertion":"The sheriff's office said that subpoenas and search returns from the platforms used to send the messages led back to the woman first believed to be a victim, and that, after an interview with the woman, the sheriff's office learned the woman was the person who made all of the fictitious accounts, the AI-generated nude photos and videos, the rape threats and the extortion attempts.","causal_attribution":"The sheriff's office account of its investigation and of an interview, relayed by three outlets. The accused's own account of the interview is not reported, no court finding is reported and the sheriff's office said future charges may be pending. The accusation is an allegation."},{"id":"c4","status":"reported","evidence":[{"locator":"was booked into the Livingston Parish Detention Center on one count each of unlawful dissemination of AI nude photos, online impersonation and injuring public record, along with five counts of extortion and one count of domestic stalking","relation":"supports","source_id":"s1"},{"locator":"has since been released on a $150,000 bond","relation":"supports","source_id":"s1"},{"locator":"Unlawful dissemination of AI nude photos (1 count)","relation":"supports","source_id":"s2"},{"locator":"Online impersonation (1 count)","relation":"supports","source_id":"s2"},{"locator":"Injuring public record (1 count)","relation":"supports","source_id":"s2"},{"locator":"Extortion (5 counts)","relation":"supports","source_id":"s2"},{"locator":"Domestic Stalking (1 count)","relation":"supports","source_id":"s2"},{"locator":"was booked into the Livingston Parish Detention Center on the following charges","relation":"supports","source_id":"s3"},{"locator":"One count, LRS 14:73.134, unlawful dissemination of AI nude photos","relation":"supports","source_id":"s3"},{"locator":"One count, LRS 14:73.10, online impersonation","relation":"supports","source_id":"s3"},{"locator":"One count, LRS 14:132, injuring public records","relation":"supports","source_id":"s3"},{"locator":"Five counts, LRS 14:66, extortion","relation":"supports","source_id":"s3"},{"locator":"One count, LRS 14:40.2, domestic stalking","relation":"supports","source_id":"s3"}],"assertion":"The accused was booked into the Livingston Parish Detention Center on charges that the three outlets list as one count each of unlawful dissemination of AI nude photos, online impersonation, injuring public record and domestic stalking, and five counts of extortion, and was released on a $150,000 bond.","causal_attribution":"The charges are reported by three outlets from one sheriff's office statement, so they are one chain. No booking record or charging document was inspected. The charges are allegations and the sheriff's office said future charges may be pending."},{"id":"c5","status":"reported","evidence":[{"locator":"allegations that overseas suspects were involved due to past relationships and acquaintances in Greece","relation":"supports","source_id":"s1"},{"locator":"Investigators brought in Homeland Security at one point over allegations that suspects overseas were involved, based on past relationships and acquaintances in Greece","relation":"supports","source_id":"s3"}],"assertion":"The sheriff's office said Homeland Security assisted the investigation because of allegations that overseas suspects were involved, based on past relationships and acquaintances in Greece.","causal_attribution":"The sheriff's office statement. The sources do not say any overseas suspect was identified, and the later finding attributes the material to the accused."},{"id":"c6","status":"reported","evidence":[{"locator":"created the fake accounts, the AI-generated nude photos and videos, the rape threats, and the demands for money that she and another person had reported as victims","relation":"supports","source_id":"s3"},{"locator":"that she and another person had reported as victims","relation":"supports","source_id":"s3"}],"assertion":"The Livingston Parish News wrote that detectives say the accused created the fake accounts, the AI-generated nude photos and videos, the rape threats and the demands for money that the accused and another person had reported as victims.","causal_attribution":"A single sentence in one outlet's rewrite of the sheriff's office statement. The clause saying the accused and another person had reported as victims can attach to the whole list or only to the demands for money, and the record does not choose between the two readings. WBRZ and WAFB do not repeat it, and no source says which reporter received the threats or was depicted."},{"id":"c7","status":"reported","evidence":[{"locator":"Anyone else who believes they were victimized in this case","relation":"supports","source_id":"s3"},{"locator":"The investigation is ongoing","relation":"supports","source_id":"s3"},{"locator":"This is an ongoing investigation","relation":"supports","source_id":"s2"}],"assertion":"The sheriff's office described the investigation as ongoing and asked anyone else who believes they were victimized in the case to contact it.","causal_attribution":"The sheriff's office request as relayed by the outlets. It does not report any further victim."}],"effects":[{"label":"One alleged victim reportedly threatened with rape and other bodily harm unless money was paid","claim_id":"c1","direction":"negative"},{"label":"AI-generated photos and videos of one of the victims reportedly sent to numerous family members and friends","claim_id":"c1","direction":"negative"},{"label":"Later reported threat to get one victim's employment terminated","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.wbrz.com/news/marrero-woman-arrested-for-ai-nude-photos-extortion-after-deputies-initially-thought-she-was-victim/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"livingston-parish-sheriff-statement-2026-07-24"},{"id":"s2","url":"https://www.wafb.com/2026/07/24/woman-arrested-extortion-harassment-case-involving-ai-generated-photos/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"livingston-parish-sheriff-statement-2026-07-24"},{"id":"s3","url":"https://www.livingstonparishnews.com/stories/woman-believed-to-be-one-of-the-victims-of-extortion-ai-nude-images-was-actually-behind-them,225313","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"livingston-parish-sheriff-statement-2026-07-24"}],"version":1,"ai_roles":["others_use"],"contexts":["privacy","justice","everyday_life"],"unknowns":["The start date of the threats, the fictitious accounts and the sending of the material is not stated in any of the three outlets. Only the 24 July 2026 announcement is dated, so the event start is unknown and the case is published undated.","The Livingston Parish News says the case began when detectives with the Livingston Parish Internet Crimes Against Children Task Force were assigned to assist in the investigation. No source states the age of any victim, so it is not known whether any victim is a minor.","The victims are not identified or described. The sources do not say which of the people who reported as victims received the threats or was depicted, or whether the one other person who reported as a victim was harmed independently of the accused. The Livingston Parish News sentence that names the second reporter can be read as covering the whole list of material or only the demands for money.","The number of family members and friends who received the material is not stated (the sources say numerous), and whether any payment was made is not reported.","No AI tool is identified and no outlet reports examining the material. The description of the material as AI-generated is the sheriff's office statement.","The account of the interview is the sheriff's office's. The accused's own account is not reported, no court finding is reported, the sheriff's office said future charges may be pending, and the charges are allegations.","No overseas suspect is reported identified after the allegations about acquaintances in Greece.","The three outlets rest on one sheriff's office statement and none reports independent verification."],"geography":{"basis":"The Livingston Parish Sheriff's Office investigated the threats and the WAFB dateline reads LIVINGSTON PARISH, La. The sources do not state where the victims live or where the material was sent from. Greece appears only in allegations about unidentified overseas suspects and is not recorded as an event country. A judge set the bond but no court proceeding is described, so no court country is recorded.","court_countries":[],"event_countries":["US"],"affected_person_countries":[]},"publication":{"basis":"Three outlets rest on one Livingston Parish Sheriff's Office statement of 24 July 2026 (one independence group) and all claims are reported. The accused is a private person who has not been convicted and is not named or located by town. The victims are not named or described. No imagery is described beyond its kind. The reporting is thin on the victims' own experience and the case is recorded as the sheriff's office account. The sources do not state when the threats began, so the case is published undated and is outside the 2026 event-year lane.","reviewed_on":"2026-09-30"},"ai_involvement":{"basis":"The sheriff's office described the photos and videos as AI-generated, and the accused was booked for unlawful dissemination of AI nude photos. No outlet identifies an AI tool or reports that the material was examined. The description is one sheriff's office statement relayed by three outlets. The images were not seen by the reviewer.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Livingston Parish, Louisiana: sheriff's office says a woman first treated as a victim made the AI-generated nude photos and videos, rape threats and extortion attempts in an online threats case","summary":"On 24 July 2026 WBRZ, WAFB and the Livingston Parish News relayed a Livingston Parish Sheriff's Office (Louisiana) statement about an investigation into threats made by phone and online. The sheriff's office said one alleged victim was threatened with rape and other bodily harm unless money was paid, AI-generated photos and videos of one of the victims were sent to numerous family members and friends, and later threats included getting one victim fired. Homeland Security assisted after allegations that overseas suspects were involved through past relationships and acquaintances in Greece. The sheriff's office said subpoenas and search returns from platforms led back to a woman who had first been treated as a victim, and that after an interview with the woman the sheriff's office learned the woman made all of the fictitious accounts, the AI-generated nude photos and videos, the rape threats and the extortion attempts. The accused was booked on charges that include unlawful dissemination of AI nude photos, online impersonation and five counts of extortion, and was released on bond. The Livingston Parish News says the accused and one other person had reported as victims some or all of what the sheriff's office attributes to the accused. The charges are allegations and no conviction is reported. The AI tool is not identified, the victims are not described and the start date of the threats is not stated.","incidentKind":"bounded_series","incidentDatePrecision":"unknown","exposurePattern":"unknown","reportedDate":"2026-07-24","aiSystem":"Unidentified AI photo and video generation tools (sheriff's office description)","aiProduct":"Unidentified image and video tool","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["exploitation_or_abuse"],"harmOutcomeSummary":"The sheriff's office said one alleged victim was threatened with rape and other bodily harm unless money was paid, AI-generated photos and videos of one of the victims were sent to numerous family members and friends, and a later threat concerned getting one victim's employment terminated. The sheriff's office attributes all of this to the accused. No victim account is reported and the sources do not describe any effect on a victim.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"The Livingston Parish News says the accused and one other person had reported as victims some or all of what the sheriff's office attributes to the accused. The accused is not counted as harmed. The one other person is counted as a person reported as a victim, so the count is a lower bound of 1. The sources use the plural 'victims' without a number and do not say which reporter received the threats or was depicted. Family members and friends who received the material are not counted.","victimAgeRange":"unknown","platformType":"other","primarySourceUrl":"https://www.wbrz.com/news/marrero-woman-arrested-for-ai-nude-photos-extortion-after-deputies-initially-thought-she-was-victim/","primarySourceLabel":"WBRZ, relay of the Livingston Parish Sheriff's Office statement, 24 July 2026","firstPublishedAt":"2026-09-30T01:09:37.153049+00:00","updatedAt":"2026-09-30T01:44:23.541663+00:00","scopeVersion":"facts-v3","tags":[]},{"id":"2026-facebook-video-selfie-face-scan-failed-account-lockout-first-person","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'My 5-year-old account got hit with a random security check.'; 'The app asked for a video face scan, but it failed completely.'; 'my face and physical definition have changed a lot'; 'The AI simply didn't recognize me.'","relation":"supports","source_id":"s1"}],"assertion":"The poster's five-year-old Facebook account was put through a security check that asked for a video face scan, and the scan failed; the poster attributes this to changes in their appearance and says the AI did not recognise them.","causal_attribution":"Poster's account and attribution; no messages from Facebook were published."},{"id":"c2","status":"reported","evidence":[{"locator":"'Then it asked for ID.'; 'I use a shortened nickname on my profile for basic privacy'; 'the automated system instantly rejected my government ID for a name mismatch'","relation":"supports","source_id":"s1"}],"assertion":"Facebook then asked for ID, and an automated system rejected the poster's government ID because the profile uses a shortened nickname.","causal_attribution":"Poster's account; the post does not say the ID check used AI."},{"id":"c3","status":"reported","evidence":[{"locator":"'It’s pretty gutting.'; 'locked out of years of memories, friends, and active Marketplace listings'; 'a way to bypass the lock screen to download my archive data and photos'; 'hoping someone here has navigated this specific deadlock or found a way to reach a human'","relation":"supports","source_id":"s1"}],"assertion":"The poster says they are locked out of years of memories, friends and active Marketplace listings, describes the loss as gutting, and is seeking a way to reach a human reviewer or download their data.","causal_attribution":"Poster's own statement of the effect."},{"id":"c4","status":"documented","evidence":[{"locator":"'The user will upload a video selfie and we’ll use facial recognition technology to compare the selfie to the profile pictures on the account they’re trying to access.'","relation":"supports","source_id":"s2"}],"assertion":"Meta says that, when people verify their identity with a video selfie to regain access to a compromised account, it uses facial recognition technology to compare the selfie with the profile pictures on the account.","causal_attribution":"General product description by Meta; it does not establish how this check was decided."}],"effects":[{"label":"locked out of a five-year-old account with years of photos, contacts and active Marketplace listings","claim_id":"c3","direction":"negative"},{"label":"distress at the loss ('pretty gutting')","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.reddit.com/r/facebook/comments/1wsrvdh/lost_my_5year_account_after_military_personal/","kind":"forum_post","access":"read","language":"en","translation_note":"Read in English on 2026-09-29: full self-text retrieved through the arctic_shift archive API by post ID. The poster handle is not recorded.","independence_group":"reddit-facebook-facescan-poster"},{"id":"s2","url":"https://about.fb.com/news/2024/10/testing-combat-scams-restore-compromised-accounts/","kind":"company_blog","access":"read","language":"en","translation_note":"Meta newsroom post first published 21 October 2024 with later updates, fetched 2026-09-29 (200). Describes the feature in general; it does not address this account.","independence_group":"meta-newsroom"}],"version":1,"ai_roles":["institutional_use"],"contexts":["everyday_life","privacy"],"unknowns":["The date of the security check and the poster's location.","Why the security check was triggered and whether a human reviewed the face scan or the ID.","Whether the poster regained access or obtained a data download."],"geography":{"basis":"The post says only 'Where I live' without naming a place; the comments add nothing. Unknown after review.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published under the 2026-09-15 charter's public-forum rule as a concrete first-person account of a Facebook video face-scan security check, which the poster describes as AI, failing to recognise them and, with an ID rejection, locking them out of their account; described with attribution and without corroboration. Meta's own description of video-selfie verification is cited as context only. Personal circumstances the poster gives for their changed appearance are summarised, not reproduced. No handle is recorded.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"The poster says a video face scan in Facebook's security check failed and that 'The AI' did not recognise them. Meta's newsroom documents that video selfies used to recover compromised accounts are compared with profile pictures using facial recognition, without saying whether a human reviews the result or covering routine security checks; the ID rejection is attributed by the poster to an 'automated system' and is not established as AI.","status":"reported"},"person_relations":["made_decision_about"]},"name":"First-person forum account: a Facebook user says a video face-scan security check failed to recognise them after their appearance changed, an automated ID check then rejected their government ID over a nickname, and they were locked out of a five-year-old account","summary":"In a public post to r/facebook on 28 September 2026, a user writes that their five-year-old Facebook account was hit with a security check that asked for a video face scan, which 'failed completely'. They say their face had changed a lot through recent life circumstances and 'The AI simply didn't recognize me.' Facebook then asked for ID, and 'the automated system instantly rejected' their government ID because their profile uses a shortened nickname. The poster says they are locked out of years of memories, friends and active Marketplace listings and are looking for a way to reach a human or download their data. Meta has said that video selfies used to regain access to compromised accounts are compared with the account's profile pictures using facial recognition; whether this check worked that way is not known. The account is uncorroborated.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"single_interaction","reportedDate":"2026-09-28","aiSystem":"Facebook's video face-scan security check (Meta describes video-selfie verification for account recovery as using facial recognition technology); the specific system is not named in the post","aiProduct":"Facebook video face-scan check","aiCompany":"Meta","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["other_material_harm","psychological_distress"],"harmOutcomeSummary":"The poster reports that a Facebook video face-scan check failed to recognise them and an automated ID check rejected their ID over a nickname, locking them out of a five-year-old account with years of photos, contacts and active Marketplace listings, which they describe as 'pretty gutting' (first-person account, uncorroborated).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the poster, locked out of their own account. Commenters describing their own lockouts are not counted. Exact 1.","victimAgeRange":"adult","jurisdiction":"unknown","platformType":"other","outcomeStatus":"ongoing","primarySourceUrl":"https://www.reddit.com/r/facebook/comments/1wsrvdh/lost_my_5year_account_after_military_personal/","primarySourceLabel":"r/facebook, 28 September 2026: public first-person post about a failed AI face scan and an ID rejected over a nickname (title shortened)","firstPublishedAt":"2026-09-29T03:21:50.784414+00:00","updatedAt":"2026-09-30T01:17:37.118566+00:00","scopeVersion":"facts-v3","tags":["first-person","reddit","facebook","meta","facial-recognition","video-selfie","account-lockout","identity-verification","made-decision-about"]},{"id":"2026-portland-tennessee-ai-child-faces-sexual-images-traded-canada-30-year-sentence","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'placed the faces of children onto images and videos of nude people and people engaged in sexual acts.'; 'Investigators said he then exchanged the AI-generated material with a Canadian resident for real child sexual abuse material.'","relation":"supports","source_id":"s1"},{"locator":"'had been placing the faces of children on nude individuals, as well as individuals who were engaging in sexual acts.'; 'would exchange the content with someone in Canada in exchange for real child sexual abuse material.'","relation":"supports","source_id":"s2"}],"assertion":"According to the district attorney's office, he used AI to place the faces of children onto images and videos of nude people and of people engaged in sexual acts, and exchanged the AI-generated material with a Canadian resident for real child sexual abuse material.","causal_attribution":"Prosecutors' account via one release; the source images, the children and the AI tool are not described."},{"id":"c2","status":"reported","evidence":[{"locator":"'Canadian authorities alerted U.S. law enforcement after arresting the person who'; 'charged with tampering with evidence after investigators alleged he deleted some material before officers entered his home to execute a search warrant.'","relation":"supports","source_id":"s1"},{"locator":"'was arrested in November 2025 after a joint investigation by Portland Police, the US Department of Homeland Security, the FBI and the Tennessee Bureau of Investigation.'","relation":"supports","source_id":"s3"}],"assertion":"Canadian authorities alerted US law enforcement after arresting the person he was communicating with; a joint investigation led to his arrest in November 2025, and he was also charged with tampering with evidence after investigators said he deleted material before officers entered his home.","causal_attribution":"DA release as relayed."},{"id":"c3","status":"reported","evidence":[{"locator":"'Judge Dee David Gay imposed the 30-year sentence, which the district attorney’s office said must be served without probation, parole or early release under Tennessee law.'","relation":"supports","source_id":"s1"},{"locator":"'On Thursday, Sept. 24, a judge sentenced'; 'to serve 30 years in the custody of the Tennessee Department of Correction'","relation":"supports","source_id":"s2"},{"locator":"'A Sumner County judge imposed the 30-year sentence Thursday.'","relation":"supports","source_id":"s4"}],"assertion":"A Sumner County Criminal Court judge sentenced him to 30 years in the Tennessee Department of Correction, to be served without probation, parole or early release.","causal_attribution":"DA release as relayed; WSMV gives the day as Friday, WKRN and WZTV as Thursday 24 September. The court record was not inspected."}],"effects":[{"label":"children's faces were placed onto AI-made sexual images and videos that were traded for real child sexual abuse material, according to prosecutors","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.wsmv.com/2026/09/25/middle-tennessee-man-sentenced-30-years-using-ai-create-trade-child-pornography/","kind":"local_tv_news","access":"read","language":"en","translation_note":"Read live on 2026-09-28 (WSMV, 25 September 2026). Relays the DA's release. WVLT carries the same Gray text.","independence_group":"sumner-county-da-release"},{"id":"s2","url":"https://www.yahoo.com/news/us/articles/portland-man-sentenced-using-ai-162610165.html","kind":"local_tv_news_syndicated_copy","access":"read","language":"en","translation_note":"Read live on 2026-09-28: Yahoo's syndicated copy of WKRN's report (25 September 2026); wkrn.com returned 403 to this host. Quotes the DA's release.","independence_group":"sumner-county-da-release"},{"id":"s3","url":"https://newschannel9.com/news/local/tennessee-sumner-county-man-gets-30-years-for-trading-ai-generated-child-abuse-images-with-canadian-man","kind":"local_tv_news","access":"read","language":"en","translation_note":"Read live on 2026-09-28: WZTV (FOX 17) report of 25 September 2026 as carried by sister station WTVC.","independence_group":"sumner-county-da-release"},{"id":"s4","url":"https://fox17.com/news/local/after-30-year-sentence-in-tn-ai-child-abuse-case-former-fbi-agent-warns-more-are-coming","kind":"local_tv_news","access":"read","language":"en","translation_note":"Read live on 2026-09-28 (WZTV/FOX 17, 26 September 2026). Case facts from the DA; adds a former FBI agent's general comments, not used as case evidence.","independence_group":"sumner-county-da-release"}],"version":1,"ai_roles":["others_use"],"contexts":["justice","privacy"],"unknowns":["Which offences he was convicted of, and whether by plea or at trial.","Which AI tool was used, where the children's images came from, and whether any depicted child has been identified or notified.","How many children's faces were used.","When the images were made and traded (the arrest was in November 2025).","The exact sentencing date (24 or 25 September 2026)."],"geography":{"basis":"He lived in Portland, Sumner County, Tennessee, where officers searched his home, and was sentenced in Sumner County Criminal Court. The other party was a Canadian resident arrested by Canadian authorities; where the exchanges took place beyond that is not stated. The children's countries are not reported.","court_countries":["US"],"event_countries":["US"],"affected_person_countries":[]},"publication":{"basis":"Published under the 2026-09-15 charter as a depiction case: prosecutors say AI was used to place the faces of children onto sexual images and videos that were traded internationally, and a court imposed a 30-year sentence. One DA release chain; all claims reported. The children are unidentified and uncounted, and the defendant is not named here.","reviewed_on":"2026-09-28"},"ai_involvement":{"basis":"The district attorney's release says he used artificial intelligence to place children's faces onto sexual images and videos (via WSMV, WKRN, WZTV). The tool, the source images and the identity of the children are not reported. The depicted_or_impersonated relation rests on the prosecutors' description of the faces of children being placed onto the images and videos.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Portland, Tennessee: a man who prosecutors say used AI to put children's faces onto sexual images and videos and traded them with a Canadian resident for real child sexual abuse material was sentenced to 30 years in Sumner County in September 2026","summary":"The Sumner County (18th Judicial District) District Attorney's Office said a 30-year-old Portland, Tennessee man was sentenced in Sumner County Criminal Court in September 2026 to 30 years in the Tennessee Department of Correction, to be served without probation, parole or early release. According to the prosecutors, he used artificial intelligence to place the faces of children onto images and videos of nude people and of people engaged in sexual acts, then exchanged the material with a Canadian resident for real child sexual abuse material. Canadian authorities found messages and material connected to him after arresting the person he was communicating with and alerted US law enforcement; a joint investigation by Portland police, Homeland Security Investigations, the FBI and the TBI led to his arrest in November 2025. He was also charged with tampering with evidence after investigators said he deleted material before officers entered his home to execute a search warrant. The children whose faces were used are not identified, their number is not reported, and the reports do not say which AI tool was used or which offences he was convicted of.","incidentKind":"bounded_series","incidentDatePrecision":"unknown","exposurePattern":"unknown","reportedDate":"2026-09-25","aiSystem":"Unnamed AI tool or tools that prosecutors say he used to place children's faces onto sexual images and videos; the tool is not identified in any inspected report","aiProduct":"Unidentified image and video tool","severity":"high","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["exploitation_or_abuse"],"harmOutcomeSummary":"Prosecutors say children's faces were placed onto AI-made sexual images and videos that were traded internationally in exchange for real child sexual abuse material (Sumner County DA release via WSMV, WKRN and WZTV). The children are not identified.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":0,"affectedCountStatus":"unquantified","affectedCountEvidence":"The prosecutors refer to 'children' whose faces were used but give no number, and none is identified; children depicted in the real material he received are not counted because that material is not AI-made and is not described. Unquantified, with zero placeholders.","victimAgeRange":"minor","jurisdiction":"US-TN","platformType":"other","outcomeType":"criminal_charges","outcomeStatus":"resolved","primarySourceUrl":"https://www.wsmv.com/2026/09/25/middle-tennessee-man-sentenced-30-years-using-ai-create-trade-child-pornography/","primarySourceLabel":"WSMV, 25 September 2026: Middle Tennessee man sentenced to 30 years for using AI to create, trade child pornography","firstPublishedAt":"2026-09-28T03:31:23.326395+00:00","updatedAt":"2026-09-30T01:17:49.53008+00:00","scopeVersion":"facts-v3","tags":["ai-csam","deepfake","child-sexual-abuse-material","sentencing","tennessee","sumner-county","canada","others-use","depicted-or-impersonated"]}]}