Event date unknownEvent location unknownUnidentified video tool
A Chinese-Australian woman who lost A$49,000 to a scam in 2023 and later spoke to Australian media about it found earlier in 2026 that her face had been taken and used in AI scam videos, according to a News Corp Australia investigation compiled in Chinese by the community news site Yeeyi on 28 October 2026. The Facebook video adverts, which used footage from her earlier media interviews, claimed that Interpol could help investment-scam victims recover their money. The security firm Infoblox, which investigated the adverts, traced an operator who used fake news pages to run polished AI video adverts that sent users to phishing sites promising to recover losses. The woman says the advert disgusted her, that the trauma of the original scam has not healed and that she fears other victims will be drawn in. Meta removed the adverts using her image after Hong Kong media reported them, but Infoblox says similar scam content remains widespread. The report does not name the AI tool or say how many people were deceived.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution supported · 1 source · Added 29/10/2026
13 Sept 2026JapanUnidentified website-generation tool
Shiga prefectural police sent two teenagers' cases to prosecutors on 27 October 2026 on suspicion of violating Japan's unauthorised computer access law. According to the police announcement as reported by the Yomiuri Shimbun and Asahi Broadcasting (ABC), on 13 September 2026 the two, in Tokyo, sent two women the URL of a site made to look like a real payment service, told them they could receive money, and had them enter details such as email addresses and phone numbers. Police say the two used generative AI to make the phishing site, and the Yomiuri reports that one of them, who is believed to have used generative AI to make the fake site, said he did not have the skill to build a site without AI. The same day, police say, they logged into a travel-booking site with one woman's details and paid a Tokyo hotel bill of 182,830 yen; they were later re-arrested over three portable game consoles bought with another woman's account. Police believe they took about 50 people's information, including from other payment services, and charged about 5 million yen. Both admitted the allegations, according to the police. They are not named here.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 28/10/2026
Nov 2024Event location unknownChatGPT (reported)
On 21 November 2024 a cryptocurrency user posted on X that he had asked ChatGPT to help write a 'bump bot' for the Pump.fun token platform, and that the code it returned pointed to a scam Solana API website. By his account, the code sent his wallet's private key to that API; he had connected his main wallet, and its assets, about $2,500, were moved out within about half an hour. The founder of the blockchain security firm SlowMist commented that the bot code carried a backdoor and called the case an AI poisoning attack. Heise, ForkLog, Cryptopolitan and Odaily relayed the posts on 22 and 25 November 2024. He said he reported the chat to OpenAI and the source repository to GitHub, which removed it. Heise noted that the code's own comment showed the private key being sent and that he had used his main wallet rather than a test account.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 25/10/2026
Sept 2026Event location unknownGoogle AI Mode
On 4 October 2026 a crypto investigator who posts on X as JP (@rugpullfinder) said a fake TRON energy-rental site, tronify.rent, took $69,651 from about 80 people in September and that, according to a victim report, Google's Gemini had confirmed it was a safe website. His post carries two screenshots. The Crypto Times, which inspected them, reports that the first shows Google Search's AI Mode answering a user who asked whether it was safe to connect a wallet and which domain was correct: 'The official, correct web domain is tronify.rent', supported by a statement that Trust Wallet had natively integrated Tronify. In the same answer, under a heading on avoiding scams, it tells users never to approve unlimited token allowances. The Crypto Times reports that Trust Wallet's October 2025 announcement of the integration does not name tronify.rent and that a December 2024 Trust Wallet post links to Tronify's market at tronify.io. The second screenshot shows Trust Wallet notifications dated Monday, 28 September: an unlimited USDT approval to an address on the investigator's list, then 1,419.699184 USDT sent to another listed address. The Crypto Times has not verified the loss total or the victim count. No inspected source publishes the victim's own account or says the screenshots come from that victim.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 06/10/2026
Event date unknownEvent location unknownUnidentified image and video tool
The Daily Echo (29 June 2025), the Daily Mail (1 July 2025), and The Sun and the New York Post (2 July 2025) reported that a Southampton resident said the resident had been 'relentlessly' sent AI-generated or doctored celebrity images and videos on Facebook for about five months, with a fake prize certificate and requests for an activation fee to unlock a prize of £500,000 and a car. The resident said one persona presented as a celebrity said she loved the resident and asked for money, and that the resident paid £200 in Apple gift cards. The resident also said the messages were affecting the resident's mental health and said an acquaintance had lost over £1,000 to the same kind of scam (second-hand, not counted here). A University of Southampton AI expert described the messages as a phishing scam using an AI-generated prize certificate. All outlets rest on the resident's own account, and none reports verifying the messages. The start date is not established.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 29/09/2026
12 Jun 2026RussiaChatGPT
On 12 June 2026 a Russian-speaking crypto investor, known by the alias Alex (@vesnuhin), asked ChatGPT in Russian where to swap sFLR for WFLR tokens. ChatGPT's reply included a link to sceptre.network, a phishing clone of the legitimate sceptre.fi. He connected his wallet and signed an unlimited-approval transaction; within seconds about 1.9 million FXRP, worth roughly $2.1 million (about 180 million rubles), were drained. A blockchain analyst traced the theft, and reported that the phishing link appeared only in Russian-language answers. Russia's Interior Ministry (MVD) later confirmed the loss.
Core concern High reported severity Investigation Opened
AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 17/09/2026