Event date unknownEvent location unknownUnidentified voice-cloning and deepfake tool
The Nigeria Police Force National Cybercrime Centre (NPF-NCCC) said at a press briefing in Abuja on Friday 23 October 2026 that its operatives arrested three suspects in Lekki, Lagos State, on 14 October over alleged identity theft, investment fraud and money laundering. According to the centre's director, the suspects allegedly operated fake social media accounts impersonating prominent personalities to trick victims into transferring money, and were linked to a cryptocurrency investment scheme promoted through a website called Bitcoin Trading Hub. Investigators said one of the suspects used artificial intelligence voice cloning and deepfake technology to impersonate Tesla chief executive Elon Musk and communicate with victims, particularly in the United States and the United Kingdom. The police did not say how they established the AI use or which tools were involved, how many people were deceived or how much they lost. Seized devices were undergoing forensic examination to identify victims and trace the proceeds, and the three suspects remained in custody.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 25/10/2026
Event date unknownEvent location unknownUnidentified video tool (suspected)
The Ludwigshafen police directorate reported on 3 April 2025 that an older man from the Rhein-Pfalz district had seen a video online of a talk show on the German broadcaster ZDF in which large stock-market gains through a cryptocurrency were promised. The police say the video was presumably generated by AI. He then phoned a supposed personal financial adviser and over six months transferred about 27,000 euros to foreign accounts. He became suspicious when the promised gains were not paid out despite repeated requests and further fees were demanded instead. The police do not say who appeared in the video or how they reached their view.
Core concern Medium reported severity Investigation Opened
AI involvement suspected · Causal attribution alleged · 1 source · Added 20/10/2026
Event date unknownUnited Kingdom, GeorgiaUnidentified video tool
A man in his 30s from East Anglia, England, told the Guardian (pseudonym used) that he watched a video of broadcaster Ben Fogle apparently promoting cryptocurrency trading on a site called AdmiralsFX, entered his details, was called by what turned out to be a Tbilisi call centre, paid a £250 buy-in and within a month had handed over £27,000, about a year's salary. The Guardian describes the clip as a deepfake, a digitally doctored video Fogle had publicly warned about in spring 2024. The account was published in March 2025 as part of a Guardian, SVT and OCCRP investigation of a leak from the Georgian operation, which the Guardian says duped at least 6,179 people and whose victims frequently cited the deepfake ads as the reason they went ahead.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 1 source · Added 09/10/2026
2 Jan 2026Event location unknownGrok
The Bureau of Investigative Journalism (TBIJ) and The Observer reported on 29 September 2026 that police investigations into sexualised images generated by X's chatbot Grok had failed to identify anyone. A Welsh presenter and campaigner against deepfake abuse, who had criticised Grok publicly on New Year's Eve 2025, saw an anonymous X user ask '@grok' to put her in a bikini made of cling film; Grok generated the image from her profile photo and posted it. She reported it to South Wales Police on 2 January 2026, was not asked for a statement until March, and was told officers had not heard back from X; the case was closed in May with the force saying no suspect could be identified. The same account also targeted a commentator and broadcaster, who estimates about 300 Grok images and videos of her were posted during the wave, including one alongside Jeffrey Epstein reported to the Metropolitan Police, which likewise said no suspect could be identified. The presenter entered pre-action legal correspondence with xAI (part of SpaceXAI) alleging misuse of private information and breaches of data-protection law and the Equality Act. On 22 October 2026 TBIJ reported that South Wales Police had reopened her case after she filed a formal complaint in September and TBIJ gave officers new information about the requesting user, including a crypto wallet and dozens of deleted posts; the force said it was now investigating the offence under the sexual-offences legislation aimed at deepfakes, rather than malicious-communications law, including enquiries with X. TBIJ added that other users had edited images of her with the standalone Grok app and that she is starting civil legal action against the company. BBC Wales had reported in January 2026 that explicit images of the presenter were created with the chatbot and shared without her consent.
Core concern Medium reported severity Investigation Opened
AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 30/09/2026
23 Feb 2026 to 25 Feb 2026ItalyUnidentified voice-cloning tool
On 23 February 2026 Paolo Molesini, then chairman of Fideuram (the private-banking subsidiary of Intesa Sanpaolo), received a WhatsApp message from an unknown number from someone claiming to be Intesa's chief executive Carlo Messina, announcing a confidential acquisition that had to be executed through Fideuram. The same day a caller presenting as a lawyer of A&O Shearman whom Molesini knew, whose voice ANSA, Il Fatto Quotidiano and Corriere della Sera, reporting from the Milan court papers, describe as created with artificial intelligence (today.it, which also cites the seizure decree, writes that the court papers do not yet answer whether the voice was imitated), had him sign a confidentiality agreement and sent eleven payment instructions; Fideuram's treasury head was separately contacted by someone posing as Fideuram's CEO. Between 23 and 25 February eleven transfers totalling about 95 million euros went to accounts in Portugal and at Bank of China; the bank's alarm systems and the Milan prosecutors recovered about 40-42 million from China and 13 million seized in Portugal, leaving at least 36 million (39.5 million per the court papers) missing after conversion into cryptocurrency. Molesini, who Corriere writes is not under investigation, resigned as chairman on 12 March 2026, which Fideuram announced as being for personal reasons; a 48-year-old Israeli citizen is under investigation as a member of the gang.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution supported · 8 sources, 5 underlying accounts · Added 30/09/2026
2025United StatesUnidentified website tool
A retired couple in Gwinnett County, Georgia, told FOX 5 Atlanta and the Atlanta Journal-Constitution in June 2025 that they had lost about $800,000 ($802,000 per the AJC), their life savings, in a cryptocurrency scam that began when a stranger contacted the husband on WhatsApp and encouraged him to trade through a mobile app. He traded and withdrew small amounts before investing more, and discovered the fraud when he could not withdraw and called 911. According to FOX 5, Gwinnett County police explained that the app was real but the scammers had created an AI-generated "ghost site" that manipulated what he saw on the screen; the husband said police identified that what he was seeing on the wallet was not there. The 74-year-old said he felt sick and ashamed; the couple's children started a fundraiser for day-to-day expenses, and police said such funds are rarely recovered. The tool is not described; the AI element appears in no independently reported source (a Cobb County government page of January 2026 repeats FOX 5's summary, and the AJC's legible text does not mention AI).
Core concern High reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 2 sources · Added 29/09/2026
12 Jun 2026RussiaChatGPT
On 12 June 2026 a Russian-speaking crypto investor, known by the alias Alex (@vesnuhin), asked ChatGPT in Russian where to swap sFLR for WFLR tokens. ChatGPT's reply included a link to sceptre.network, a phishing clone of the legitimate sceptre.fi. He connected his wallet and signed an unlimited-approval transaction; within seconds about 1.9 million FXRP, worth roughly $2.1 million (about 180 million rubles), were drained. A blockchain analyst traced the theft, and reported that the phishing link appeared only in Russian-language answers. Russia's Interior Ministry (MVD) later confirmed the loss.
Core concern High reported severity Investigation Opened
AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 17/09/2026