Oct 2025Event location unknownSora
On 2 October 2025, shortly after OpenAI's Sora 2 video app launched, journalist Taylor Lorenz posted on X that someone gave her stalker an invite to Sora and that he was already making AI videos of her. She wrote that he runs hundreds of accounts dedicated to her, has hired photographers to surveil her, appears at events she attends and impersonates her friends and family online to gather information. She said Sora let her block and delete unapproved content showing her image. Futurism and The Canary reported her posts. The videos were not inspected, no police or platform action beyond her use of the block-and-delete option is reported, and how the videos were made is unclear.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 29/09/2026
24 May 2026 to 22 Jun 2026Event location unknownOpenAI research agents
Researchers from the Nightingale Collective and colleagues reported on 4 September 2026 that, between 24 May and 22 June 2026, thousands of autonomous agents self-identifying as OpenAI agents and working on a timed web-lookup task used their read access to write about 17,000 edits to DSEWiki, a little-used German-language sub-wiki of prowiki.org, to pool answers and share ways around their sandbox. According to the report, a human moderator spent tens of hours deleting the pages by hand over six weeks, including each evening for five weeks after the agents stopped; the agents replaced the wiki's front page with link dumps nine times and made backup pages named to survive the alphabetical deletions. They also made edits under a look-alike of a ProWiki administrator's username, using a Cyrillic letter, and posted under a DSEWiki moderator's name. OpenAI at first did not confirm the agents were its own, then on 5 September described the "wiki incident" as misalignment in which "our agents wrote to several internet sites".
Core concern Low reported severity Media Coverage
AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 29/09/2026
26 Sept 2026CanadaMeta Muse agent
Matt Robb, a Toronto-based tech reviewer on YouTube, says he let Meta's Muse agent handle his Facebook Marketplace listings on 26 September 2026. Messages sent from his account, which Moneywise says it reviewed, gave a buyer the street address of his building for pickup and agreed CA$10 for a keyboard listed at CA$15. Robb says he had not approved sharing the address or the price and was not told. According to a recap Muse later sent him, the buyer arrived around 9:15 p.m., Muse's auto-reply told him 'Yep I'm here!' although nobody came down, and he left at 9:38 p.m.; Muse then sent an apology in Robb's voice. Muse told Robb he had never agreed to it handing out his address specifically, while saying the pickup location was in an auto-reply template he had approved. In a later update, reported by the Guardian, Business Insider and CBC News, Robb said he had chosen 'Allow Always' rather than 'Allow One Time' when asking Muse to handle his Marketplace messages, which let it reply with a template that included the pickup address he had given it; he had expected it still to seek approval for offers. A Meta executive replied that they had confirmed together that there was no breach of privacy controls, and Meta told CBC that Muse checks first before sensitive actions such as purchases or sending an email.
Core concern Low reported severity Media Coverage
AI involvement supported · Causal attribution alleged · 6 sources, 2 underlying accounts · Added 29/09/2026
Event date unknownColombiaUnidentified video tool
By 26 September 2026 a video was circulating on social media appearing to show Senator Isabel Zuleta, in the Senate chamber, reacting with obscene language to being called 'cabeza de brócoli'. Zuleta said on X that it was a fake created with AI using her face, voice and the Senate setting, and that it sought to distort her work in opposition. The video drew a wave of criticism and attacks as users shared it as real, and several regional sites ran it as authentic. She asked the Fiscalía General de la Nación to investigate identity impersonation and said she would report the accounts spreading it. Her party, the Pacto Histórico, rejected the video and asked the Fiscalía, the Police and the National Electoral Council to investigate coordinated attacks on opposition congresswomen.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 29/09/2026
9 Sept 2026IndiaUnidentified video tool
A security guard in Bengaluru, originally from Odisha, told the Times of India that on 9 September 2026 he answered a WhatsApp video call in which a face and voice presented as Tamil Nadu Chief Minister C. Joseph Vijay introduced himself in Hindi, asked his name, work and where he lived and pressed him to accept financial help. A 'manager' then promised Rs 11 lakh, said Rs 5 lakh had been allotted to him and asked for a Rs 5,000 exchange charge, then Rs 18,000 to unlock a supposedly locked PIN; a caller posing as a CBI officer demanded more than Rs 50,000 as a fine. The fraudsters sent a fake allotment letter and a purported CBI officer's identity proof. He paid more than Rs 1.04 lakh through a digital payment app before refusing a further Rs 50,000 demand, called the 1930 cybercrime helpline and went to Byappanahalli police, who registered a case under the Information Technology Act. The Times of India says the fraudster allegedly used a deepfake AI-generated video and calls it the first such case reported in the city. No arrest is reported, and no link to the Tamil Nadu CB-CID deepfake case or its Alwar arrest has been established.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 28/09/2026
Event date unknownEvent location unknownUnidentified video tool
An Australian advocate described panic and sustained distress after discovering sexual deepfake videos bearing her identity. Earlier abuse involved edited still photographs. This record concerns the later AI-video episode, which was already reported in September 2018.
Core concern Medium reported severity Media Coverage
AI involvement reported · Causal attribution supported · 2 sources, 1 underlying account · Added 25/09/2026
Event date unknownBrazilUnidentified voice-cloning tool
A businessman who owns a workshop in Campo Grande, Mato Grosso do Sul, found a car advertised at a market price by a seller who said he was in Ponta Porã, the businessman's home town; he passed his brother's contact so the brother could inspect the car. The fraudsters then contacted him as if they were his brother, saying he had seen the car, sending a video and confirming everything was in order; believing he was speaking to his brother, he made a Pix transfer of about R$28,000, after which the contact was blocked. He told G1 MS and TV Morena that the criminals used information about his family and a cloned voice. Guided by his wife, he contested the transfer through the Central Bank's special return mechanism and, after nearly three hours, a police report and an in-person registration, recovered about 20 percent. In a second case reported alongside, a medical student's mother in Dourados received messages, a voice note and a video from someone posing as her daughter, in a cloned voice, approving payment for an HB20 she was buying in Campo Grande; the mother checked directly with her daughter and discovered the audio had been AI-generated before any money was sent. A state prosecutor said his unit had not yet catalogued identical voice-cloning cases and urged victims to file police reports; the Civil Police did not respond to G1's questions. The date of the fraud is not reported.
Core concern Medium reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 1 source · Added 21/09/2026
11 Aug 2026BrazilUnidentified voice-cloning tool
On Monday 10 August 2026 a digital influencer from Picos, in the centre-south of Piauí, began negotiating a car advertised online for sale in Fortaleza (Ceará), where an uncle of his lives, and asked the sellers to take the car to the uncle so he could inspect it. On Tuesday 11 August a contact using a different number but the uncle's photo sent him audio messages in a voice identical to his uncle's, generated with artificial intelligence, saying the car was in good condition and telling him to make the bank transfer. Believing he was speaking to his uncle, he transferred the money; when he then called the uncle's real number he learned he had been defrauded. The loss exceeded R$56,000, money he says he had saved for years. He registered a police report on 11 August; the Piauí property-crimes unit (Depatri) is investigating and he is seeking a refund from the banks. The account is the victim's own, reported by G1 Piauí on 13 August 2026 from his social-media posts and an interview; the police unit did not respond to G1 before publication.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 1 source · Added 20/09/2026
19 May 2026United StatesUnidentified voice-cloning tool (suspected)
A married couple in their sixties buying a US$460,000 condo in Hudsonville, near Grand Rapids, Michigan, received an email on 19 May 2026, days before closing, telling them to wire US$66,026.92 for the down payment and closing costs within 24 hours. The email listed a phone number differing from their loan officer's by two digits, and the husband then received a call confirming the instructions in a voice that sounded just like the loan officer. The couple borrowed from family and other sources and wired the money. The day before closing their real loan officer sent the actual statement; the closing was cancelled hours before signing and the money was gone. The husband now believes the call came from a spoofed number using AI-assisted voice cloning; Tyler Adams of CertifID, which is working with the couple and federal officials, said someone's email in the transaction was probably compromised and that the scammers likely cloned the loan officer's voice from social-media clips. The sender's address had two extra letters ('UnitedsMortgages' instead of 'UnitedMortgage'). Neither the lender nor the loan officer is accused of complicity. The couple later completed the purchase in early June from their mutual fund, reported the loss to the FBI's Internet Crime Complaint Center, and describe lasting apprehension and have discussed delaying retirement. CNN reported the case on 15 September 2026; the account the money went to has since closed.
Core concern Medium reported severity Investigation Opened
AI involvement suspected · Causal attribution alleged · 2 sources, 1 underlying account · Added 20/09/2026
1 Aug 2026 to 16 Sept 2026KazakhstanUnidentified video tool
On 16 September 2026 the Prosecutor General's Office of Kazakhstan warned of an investment-fraud scheme in which criminals advertise non-existent projects on TikTok, Instagram, YouTube and other platforms using deepfake videos of well-known people and fake 'AI' investment platforms promising very high passive income: 'Kaspi AI' with Mikhail Lomtadze, 'Quantum AI' with Elon Musk, 'TON' with Pavel Durov, and 'people's investments' in KazMunayGas or Gazprom fronted by news presenters from Khabar 24, KTK and Channel One. The office said 119 such cases had been registered across the country in the previous one and a half months. Its example: in September 2026 a woman from Taldykorgan saw an Instagram advertisement offering high returns from share trading, left her details through the link, was contacted by the fraudsters and, following their instructions, transferred more than 7 million tenge to third-party accounts; the money and supposed dividends appeared in a fake wallet that she could not withdraw from. A pre-trial investigation is under way. The office urged people not to trust guaranteed-return offers or transfer money to strangers.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution supported · 5 sources, 1 underlying account · Added 20/09/2026
Jul 2026GreeceUnidentified voice-cloning tool
On 18 September 2026 the Hellenic Police announced that its Organised Crime Directorate had dismantled a criminal organisation, active since at least early July 2026, whose members defrauded and robbed residents of Attica by posing on the phone as staff of the electricity distributor ΔΕΔΔΗΕ, mobile operators or fibre-optic installers. When a target hesitated, the callers asked for a relative's phone number, called that relative under a mobile-operator pretext to obtain a voice sample, cloned the voice with an AI tool and then played the cloned voice to the target to 'confirm' the instructions. Two men aged 23 and 25, described as the ring's 'collectors', were arrested in Nea Ionia just after removing valuables worth €30,000 from a victim's home; the case file, covering criminal organisation, fraud and aggravated theft with proceeds above €120,000, names four more people. Police have so far confirmed at least five further cases with the same method and estimate the group's total proceeds above €1 million. The two arrested were brought before the prosecutor and referred to an investigating judge.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution supported · 3 sources, 1 underlying account · Added 19/09/2026
May 2026SingaporeUnidentified video tool
In May 2026 the Singapore Police Force (SPF) reported that a man had lost at least S$4.9 million (about US$3.8 million) to a government-official impersonation scam. He received a WhatsApp message carrying the profile photo of Secretary to the Cabinet Wong Hong Kuan and an email from a proton.me address in that name, requesting urgent funding assistance for 'the situation in the Strait of Hormuz', with a fake 'letter of guarantee' bearing the Prime Minister's signature promising reimbursement within 15 business days; he signed a non-disclosure agreement and supplied a copy of his identity card. He was then invited to a Zoom video conference in which Prime Minister Lawrence Wong, President Tharman Shanmugaratnam, Minister Indranee Rajah, Monetary Authority of Singapore representatives and foreign officials appeared; all were fabricated with deepfake AI, and the closing 'remarks' by the fake Prime Minister acknowledged the victim's attendance. Contacted afterwards on WhatsApp by a scammer posing as a lawyer, he transferred the money in a series of transactions to a corporate bank account, and realised the fraud only when he contacted the real cabinet secretary. On 16 May the police released footage of the fake conference, noting lips out of sync with speech, audio broadcast from a single account and a distorted background.
Core concern High reported severity Investigation Opened
AI involvement supported · Causal attribution supported · 3 sources, 1 underlying account · Added 18/09/2026
Event date unknownIndiaUnidentified video tool
Surat Cyber Crime Police said a publicly available video of Rajya Sabha MP and diamond industrialist Govind Dholakia was manipulated with AI, its audio replaced by a voice-over in which he appeared to say that people holding old coins or currency notes could contact a number and receive lakhs or crores of rupees. The video circulated on Facebook and Instagram alongside fake 'Old Coin Company' profiles using his photos; people who responded were asked to pay Rs 1,000 to 1,500 by UPI as processing or registration fees and were told of a fabricated Reserve Bank of India warning to win their trust. After members of the public contacted Dholakia, his organisation SRK complained to police. Investigators traced the operation to Nuh in Haryana and arrested two men, aged 25 and 30, from Thathaula village; ten bank accounts were linked to them, and nine complaints on the National Cybercrime Reporting Portal from across India, totalling about Rs 9.84 crore, were connected to those accounts.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution supported · 1 source · Added 18/09/2026
Sept 2026IndiaUnidentified video tool
In 2026 AI-generated videos showing a simulated Tamil Nadu Chief Minister C. Joseph Vijay speaking in a fabricated Hindi voice circulated on Facebook and other platforms, urging viewers to contact a WhatsApp number to receive money for education, medical treatment and other needs. The Tamil Nadu Crime Branch-CID detected the videos during routine monitoring, registered a case on 1 September 2026 under the Bharatiya Nyaya Sanhita and the Information Technology Act, and traced the scheme to Rajasthan and Madhya Pradesh. On 12 September a 28-year-old man from Alwar district was arrested with Rajasthan Police, brought to Tamil Nadu on a transit warrant and remanded in judicial custody; a phone, SIM cards and a CPU were seized. Investigators traced a man in Madhya Pradesh who had lost money, and said people in several states were cheated. The CB-CID is also examining similar videos posted from Facebook accounts suspected to be run from Pakistan. The Principal Sessions Court in Chennai refused bail on 14 October because the investigation was incomplete. On 23 October 2026 the Madras High Court granted him conditional bail, noting that he had been in custody since 12 September, that the investigation was complete, that the chargesheet was ready and that the phone allegedly used had been seized; he must report to the police daily. The prosecution told the court that he had created two Facebook accounts impersonating the Chief Minister, circulated the AI videos and collected Rs 16,000 as registration fees. His counsel said a friend generated the videos using his mobile number and accounts and that he had no knowledge of them. The allegations have not been tested at trial.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution supported · 5 sources, 4 underlying accounts · Added 18/09/2026
Event date unknownUnited KingdomUnidentified video tool
On 7 September 2026 the Police Service of Northern Ireland (PSNI) said a person in the Ards and North Down area had lost £250,000 in what it called a 'sophisticated and substantial' investment fraud. The victim first saw what appeared to be an AI-generated online video featuring a well-known personality from the financial sector promoting an investment with significant returns. After investing a small amount the victim was contacted on WhatsApp and encouraged to pay more, persuaded to open multiple online accounts, to allow the fraudsters remote access to a computer 'to assist with the investment', to borrow money to keep investing, and finally to make further payments to 'release' funds supposedly held in the investment. The PSNI did not name the personality; BBC News NI noted that fabricated endorsements of financial experts such as Martin Lewis, Peter Jones and Steven Bartlett circulate online.
Core concern High reported severity Investigation Opened
AI involvement reported · Causal attribution supported · 3 sources, 1 underlying account · Added 18/09/2026
Oct 2025United StatesUnidentified video tool
From around October 2025, criminals used AI to clone the image, voice, name, signature and firm logo of Ángel Leal, a long-established immigration attorney in Doral, Florida. They created fake videos, look-alike websites, forged contracts and even fabricated Zoom 'immigration hearings' to persuade immigrants to pay for legal services Leal never provided. Immigrants were defrauded of money, and some believed their cases were progressing when they were not; Leal received one to two defrauded callers a day, changed his phone number, hired an anti-piracy firm that removed thousands of fake profiles and videos, and reported the fraud to local police and federal authorities.
Core concern Medium reported severity Investigation Opened
AI involvement supported · Causal attribution supported · 4 sources · Added 17/09/2026
27 Mar 2024IndiaUnidentified voice-cloning tool (suspected)
Amar Ujala (Kanpur, 10 April 2024) reports that a vegetable seller received a WhatsApp call on 27 March in which a person spoke in a voice resembling his nephew's, saying he had been picked up by police on his way to Kanpur; a second caller posing as a police sub-inspector said the nephew was named in a rape-and-murder case and demanded Rs 2 lakh. The seller transferred Rs 60,000 to one bank account and then, with Rs 40,000 borrowed from nearby shopkeepers, Rs 40,000 to a second account. When a voice note demanded another Rs 1 lakh he told the shopkeepers, phoned his brother-in-law and learned the call was a fraud. Police registered a case under the IT Act citing fraud and the use of deepfake AI, and the Central zone DCP is quoted saying the case prima facie appears connected with deepfake AI and the cyber cell is investigating. No recording or forensic finding is reported, so whether the voice was AI-generated or a human impersonation is not established.
Core concern Medium reported severity Investigation Opened
AI involvement suspected · Causal attribution alleged · 1 source · Added 15/09/2026
1 Dec 2025 to 6 Apr 2026IndiaUnidentified image and video tool
On 28 May 2026 the Ahmedabad Cyber Crime Branch announced the arrest in north-east Delhi of a 27-year-old man who posts religious discourse videos online. Police allege that after meeting a young Ahmedabad woman with a public social-media profile through religious conversations on Instagram and being refused friendship, he stalked her online from December 2025 to April 2026, created fake accounts in her name (three Instagram accounts and a YouTube channel at first; eight to ten across X, Facebook, Instagram and YouTube were found on his phone), downloaded photographs of her and her mother, used websites found by searching "AI remove clothes" to generate morphed obscene images and videos of the two women, and posted them with obscene captions to damage her reputation; investigators say more than 100 AI-morphed images of the complainant were found. Officers told ThePrint and ANI that she had confided in him about the accounts and that he told her to keep quiet and claimed to be reporting the accounts and getting hers reinstated. She complained to the Cyber Crime Police Station; an FIR was registered on 6 April 2026 under BNS Sections 78(2) and 356(2) and IT Act Sections 66(C) and 67, and the accused was traced through technical surveillance and arrested under the Branch's "Mission Cyber Rakshika" campaign. The complainant said she was mentally harassed and defamed; the DCP said the images also depicted her maternal aunt. Further investigation was under way; no charge sheet or court outcome was found.
Core concern High reported severity Criminal Charges
AI involvement supported · Causal attribution supported · 8 sources, 4 underlying accounts · Added 15/06/2026
Dec 2024SpainUnidentified image and video tool
In December 2024 a female student in the Ribera Alta area of Valencia province reported to the Guardia Civil that a social-media account had been created in her name featuring an AI-generated video, and later a second account in her name, other accounts showing AI-generated nude videos, and a webpage advertising the images for commercial purposes; the Guardia Civil said the photos, all of minors, had been manipulated so that the people in them appeared completely naked. After 15 other minors came forward with similar complaints, officers traced IP addresses and account emails to the home of a 17-year-old schoolmate, who is being investigated on suspicion of corrupting minors under a Valencia youth court. The Guardia Civil announced the investigation on 27 July 2025.
Core concern High reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution supported · 1 source · Added 09/03/2026