All news with #deepfake fraud tag

🔎 Organizations face rising attacks using cloned voices and synthetic video to request payments, reset MFA, or create privileged accounts. The article outlines a structured drill—mapping high-risk identities, writing verification rules, designing multi-channel scenarios, running staged simulations, and measuring failures—to test whether policies survive realistic pressure. Emphasis is on process, blameless debriefs, and repeating drills regularly.

🎮 Scammers are exploiting excitement around GTA VI’s November 19, 2026 release with fake leak sites, fraudulent preorders, and token schemes. Some sites claim to sell early builds or demo access for high prices, push dubious “human verifications” to harvest traffic or downloads, or collect personal and payment data via cloned storefronts. Others promote a $GTAVI crypto token promising access to the game, while many mimic Rockstar’s branding to fool users. Check domains carefully, avoid downloading archives from untrusted sources, and never pay or provide sensitive information to suspicious sites.

🔍 Three quarters of cybersecurity leaders report encountering suspected deepfake incidents in the past year, with a quarter of those affected saying a single incident cost their organization over $1m. The 2026 Pindrop Deepfake Readiness Index highlights a widening gap between increasingly sophisticated AI-generated audio and video attacks and enterprise preparedness. Experts urge improved training, phishing-resistant controls like MFA, and heightened board-level awareness to mitigate financial and reputational damage.

🔒 The Gartner report reveals nearly half of CISOs experienced at least one deepfake incident in the past year, underscoring the need to update incident response playbooks for multimodal threats. Surveying 297 senior cybersecurity leaders between March and May 2026, the study found AI is increasing volume, personalization and credibility of social engineering while weakening traditional detection cues. Recommendations include shifting verification-focused culture, protecting high-value workflows with phishing-resistant controls, and correlating impersonation reports with account and transaction events.

📺 Xicoia's viral AI character "Talking Tilly" now requires an automated face scan and age check before calls connect, using Spain-based Didit for age estimation with ID fallback. During calls the system analyses camera and voice to infer mood, and recordings are transcribed, stored, and processed by US providers with responses generated by Google's Gemini via Tavus. The service uses legitimate interest as its legal basis and enforces automated safety filters; calls may be withheld or deleted, and the paid service expires permanently on September 27.

🔍 Nudify apps use generative AI to alter photos of clothed people so they appear nude, a practice that can enable non-consensual intimate imagery (NCII) and is increasingly weaponized by fraudsters and abusers. Legal responses vary: the US lacks a federal ban on the apps themselves but has laws and proposals addressing distribution of NCII, while the EU is moving toward criminalizing such images under a new directive. The article advises reducing public photo exposure, tightening account security, educating children, and using removal and reporting services if victimized.

🛫 Check Point uncovered a coordinated social engineering campaign in which threat actors monitor public airline complaints on social media, impersonate customer support accounts, and move victims to private channels like WhatsApp to collect personal and payment information. Thousands of fake accounts were identified across X, Facebook, and Instagram, with hundreds more appearing daily. Researchers documented three scam variations promising refunds or compensation and observed growing use of tactics that could be scaled with generative AI. Organizations are advised to monitor brand impersonation, educate customers, and move sensitive interactions to secure channels.

🔒 Organizations are investing heavily in security but remain stuck in compartmentalized models built for yesterday’s threats. AI-driven impersonation, deepfakes and automated social engineering now traverse digital, physical and operational boundaries, demanding cross-functional verification and unified response pipelines. Without documented processes and integrated tooling across cybersecurity, physical security, HR and legal, response efforts rely on informal relationships and risk critical delays. The next evolution requires threat-driven, integrated programs that pair AI capabilities with human expertise to detect, deter and respond faster.

🔍 This Microsoft Threat Intelligence blog describes a large campaign in early August that used third-party email services to send over a million invoice-fraud emails impersonating executives and vendors. The actor layered CEO impersonation, fabricated invoices, and forged vendor threads to convince finance teams to initiate ACH payments near $50,000. Microsoft details indicators of AI-assisted template generation, observed domains and addresses, and recommended Defender and mail-authentication mitigations.

🔍 Threat actors are exploiting Google Play's Early Access program to distribute deceptive apps that promise money, rewards, casino wins, and premium content. Because Early Access apps do not accept public reviews or star ratings, malicious titles can gain traction without community warnings, and are often promoted via social media ads using AI-generated deepfakes. Reported examples include a Grand Theft Auto imitator with over a million downloads and numerous fake reward and utility apps that stall payouts and monetize victims via ads.

⚖️ The US Treasury has sanctioned Xinbi Guarantee, a Chinese-language marketplace linked to large-scale fraud, money laundering and other criminal activity. The marketplace — alleged to have processed over $24bn in transactions since 2022 — connected scam operators in Southeast Asia with merchants offering financial services, fake IDs, AI deepfake tools and OTC crypto exchanges. OFAC also targeted supporting entities including SafeW Technology and Anwen Technology, while authorities and blockchain firms reported freezing $52.8m in cryptoassets and evidence the marketplace has gone offline.

🔒 AI-driven voice scams are increasingly common and convincing, lowering the barrier for fraudsters using deepfake audio. Scammers can clone a loved one’s voice from seconds of online recordings and use it in emotional schemes like virtual kidnappings. A simple, pre-agreed safe word between family members can effectively reveal fake calls, while backup steps include calling back on a known number and preserving evidence. If scammed, victims should stop contact, notify their bank, change passwords and report incidents to authorities.

🔍 Deepfakes are increasingly realistic and widely used for harassment, fraud and extortion. Platforms and new laws (such as the US TAKE IT DOWN Act and recent UK legislation) are forcing faster takedowns, especially for non-consensual intimate imagery (NCII). Preserve evidence, avoid engaging with posters, and use platform reporting flows to flag impersonation, fraud or manipulated media.

🛡️ AI is accelerating open-source intelligence gathering, lowering barriers for fraudsters to perform reconnaissance, generate malware, and exploit vulnerabilities. This makes social engineering and deepfake-enabled scams more scalable and convincing, as models can collate images, videos, and personal details at machine speed. Individuals should limit public exposure, review privacy settings, and use strong authentication to mitigate risks.

🔍 Interpol reports that AI-driven cybercrime accounted for 55% of all reported digital crime in Africa in its African Cyberthreat Assessment Report 2026. The report, compiled from data provided by 36 member countries, links AI-powered scams, social engineering and credential harvesting to a rise in losses from $192m in 2024 to $484m in 2025. It highlights threats such as AI-enabled deepfake sextortion, sophisticated BEC campaigns, AI-driven ransomware, and the growth of Cybercrime-as-a-Service platforms.

📞 Silent phone calls — a brief ring followed by muted silence — are increasingly common and can come from benign sources like misconfigured devices or overloaded call centers as well as robocallers, AI dialers, debt collectors, stalkers, and outright scammers. These calls are often used to verify active numbers, harvest short voice samples, or test lines before follow-up contact. While a single silent ring rarely causes direct harm, repeated interactions can enable voice deepfakes and social-engineering attacks. The article explains motives, risks, and practical steps to reduce exposure.

🛡️ Screenshots are merely images of what appeared on a screen and can be easily fabricated or altered. They may provide context but do not reliably prove who created the content or whether an underlying transaction actually occurred. Consumers and businesses should treat screenshots as supporting material only and seek original records, transaction references, or verification from the issuing service. Organizations must update verification processes to avoid fraud, operational costs, and reputational or regulatory harm.

🛡️ The FBI has issued an IC3 public service announcement warning that scammers are escalating a long-running impersonation scheme by deploying deepfake videos of senior FBI officials and spoofed IC3 websites to re-defraud previous victims. Fraudsters combine social media impersonation, AI-generated video and lookalike complaint portals to harvest further data and payments. IC3 stressed it does not communicate via social platforms or request payment, and urged users to verify .gov domains.

🛡️ Passkeys and passwordless flows are reducing credential stuffing, but attackers now target identity verification and recovery paths such as magic links, step-up flows, and re-enrollment. Generative AI has made impersonation and synthetic media widespread, increasing fraudulent verification attempts. Defenders must adopt biometric liveness, risk-based re-verification, intent binding, and network-effect signals to stay ahead as regulations and threats evolve.

🔒 The National Crime Agency (NCA) and Internet Watch Foundation (IWF) have launched a campaign to warn parents about the dangers of oversharing images and videos of their children online. The IWF reported a dramatic rise in AI-generated child sexual abuse material in 2025, prompting social media outreach and new guidance to help parents manage image consent and protect children. The campaign includes advice on privacy settings, discussing consent with family and schools, and steps to take if abuse is suspected.