Reference

Library

Real-world incidents, threat patterns, and the research behind every detector.

FBI 'Deepfake Fraud Ring' indictment
Voice
2026

DOJ unsealed charges against 14 people running an AI voice-clone operation that stole ~$47M from elderly victims across the US using grandparent-emergency pretexts.

Tactic

Industrialized voice-clone call centers targeting seniors at scale.

Indicator

Caller demands gift cards or crypto couriers and refuses callback to a saved family number.

Portugal financial-influencer deepfake scam
Video
2026

Deepfake videos of Portuguese public figures circulated on social media promoting a bogus trading platform, leading to multi-million-euro losses before takedowns.

Tactic

Localized celebrity deepfakes paired with a custom 'broker' app.

Indicator

Withdrawals require ever-larger 'tax' deposits — classic pig-butchering tell.

Nvidia CEO crypto livestream deepfake
Video
2025

Scammers ran a fake livestream with an AI-generated likeness of Jensen Huang promoting a 'double your crypto' giveaway, draining funds from viewers who scanned the QR code.

Tactic

Hijacked livestream + celebrity-CEO deepfake to legitimize a crypto drainer.

Indicator

Looped micro-expressions, static eye-line, and a wallet QR that never appears on any official channel.

BSE CEO 'guaranteed returns' deepfake (India)
Video
2025

A fabricated video impersonating BSE CEO Sundararaman Ramamurthy promised extraordinary stock returns; linked to an overseas syndicate that defrauded Indian investors of ~₹400 crore.

Tactic

Authority-figure deepfake funneling victims into a private trading group.

Indicator

Claims contradict SEBI/BSE public statements; audio room-tone doesn't match the background.

Martin Lewis investment-ad deepfakes
Video
2025

AI-generated video ads of UK consumer champion Martin Lewis ran on Meta platforms endorsing fake investment platforms, despite Lewis publicly stating he never endorses products.

Tactic

Trusted-personality deepfake injected via programmatic ad networks.

Indicator

Any 'endorsement' from Lewis and an off-platform WhatsApp-group funnel.

Fake celebrity product-endorsement photos
Image
2025

Marketplaces and Meta ads filled with AI-generated 'press photos' of celebrities holding skincare and supplement products they never endorsed.

Tactic

AI product shots at ad-network scale to lend false credibility.

Indicator

Gibberish label text on close inspection and identical lighting across supposedly different shoots.

Fake Aadhaar / PAN cards via diffusion
Image-of-text
2025

Telegram channels began offering AI-generated Aadhaar and PAN card images for ₹500 each, used to open shell wallets and SIM cards before OTP-based KYC tightened.

Tactic

Generative ID-document forgery for synthetic-identity onboarding.

Indicator

Photo region has a different noise floor than the card background; QR code fails verification.

Forged court order screenshots
Image-of-text
2025

Scammers running 'digital arrest' calls in India sent victims AI-generated screenshots of fake Supreme Court / CBI orders to pressure them into transferring money.

Tactic

Authority-document image used as proof inside a live social-engineering call.

Indicator

Court seal is slightly asymmetric and case-number formatting doesn't match the real registry.

AI-faked utility bills for address proof
Image-of-text
2025

Generated electricity and telecom bills were used as 'address proof' to onboard mule accounts at neobanks, surfacing in multiple AML investigations.

Tactic

Document-image generation tuned on real utility templates.

Indicator

Account number, billing period, and meter reading don't reconcile arithmetically.

Arup Hong Kong — $25M deepfake CFO call
Video
2024

A finance employee joined a multi-person video call where every other participant was an AI-generated likeness of senior executives, then approved 15 transfers totaling ~$25M.

Tactic

Group video impersonation creating false consensus and urgency.

Indicator

Other participants never deviated from a tight script and avoided side-channel chat.

Ferrari WhatsApp deepfake attempt
Voice
2024

An exec received WhatsApp messages and a voice call mimicking the CEO, pushing a confidential 'acquisition' deal. The exec asked a personal trivia question and the call collapsed.

Tactic

Voice clone + trusted-app pretext to bypass formal channels.

Indicator

New phone number, profile photo of CEO, and refusal to switch to a corporate channel.

New Hampshire Biden robocall
Voice
2024

AI-cloned voice of US President Biden told NH primary voters not to vote. Traced to a political consultant; FCC later banned AI robocalls.

Tactic

Mass voice-clone robocall used for voter suppression.

Indicator

Spoofed caller ID, identical script across calls, no legitimate campaign source.

Fake invoice with AI-rewritten letterhead
Image-of-text
2024

Attackers used image-to-image models to clone a vendor's invoice template, swapping the IBAN. Email passed DKIM because it came from a compromised vendor mailbox.

Tactic

Generative redesign of a trusted document to swap payment details.

Indicator

Slight font kerning differences and a non-matching IBAN country code.

AI nude-image sextortion of minors
Image
2024

School-age victims were targeted with AI 'nudify' apps that fabricated explicit images from social-media photos, then used for crypto sextortion demands.

Tactic

Off-the-shelf image-to-image model weaponized for blackmail.

Indicator

Smooth, anatomically inconsistent skin regions and lighting that doesn't match the source photo.

AI-generated Hurricane Helene 'victim' photo
Image
2024

A viral image of a girl clutching a puppy in floodwaters was used to push partisan narratives about disaster response; later confirmed AI-generated.

Tactic

Emotionally charged AI image deployed during a live news cycle.

Indicator

Six-fingered hand, plastic-looking tear streaks, and no source photographer or outlet.

AI-cloned bank statement for loan fraud
Image-of-text
2024

Fraudsters submitted AI-generated 'screenshots' of inflated bank balances to qualify for personal loans on Indian fintech apps; several lenders disbursed before catching the pattern.

Tactic

Image-of-text generation of plausible bank UI to bypass document KYC.

Indicator

Pixel-aligned columns but inconsistent font weights between header and rows; no scroll artifacts.

Fabricated news-site screenshots on X
Image-of-text
2024

Viral 'BBC' and 'Reuters' headline screenshots were AI-composed to push fake breaking-news narratives, racking up millions of impressions before community notes appeared.

Tactic

Image-of-text mimicry of trusted publishers to spread disinformation.

Indicator

Headline font weight doesn't match the outlet's actual style; URL bar is cropped or absent.

LastPass deepfake voice of CEO
Voice
2023

An employee received WhatsApp voice messages impersonating the CEO. They reported it as suspicious; no breach occurred.

Tactic

Audio-only clone targeting a single employee outside business hours.

Indicator

Off-channel contact, urgency, and pressure for secrecy.

Mr. Beast TikTok giveaway scam
Video
2023

AI-generated video and voice of a popular creator promoted a fake $2 iPhone giveaway, harvesting payment info from clickers.

Tactic

Creator-likeness deepfake ad on a high-trust short-video feed.

Indicator

Lip-sync drift on consonants and a too-good-to-be-true CTA.

Pentagon explosion hoax image
Image
2023

A fabricated photo of an 'explosion' near the Pentagon went viral via verified accounts, briefly moving the S&P 500 before being debunked.

Tactic

Single AI-generated news photo amplified through paid-verified social accounts.

Indicator

Melted railings, distorted lamp posts, and no corroborating photos from any other angle.

Pope Francis 'Balenciaga' puffer image
Image
2023

A Midjourney image of Pope Francis in a designer puffer jacket fooled millions before being identified as one of the first viral mainstream AI photo hoaxes.

Tactic

Plausible celebrity-styled AI image shared without provenance.

Indicator

Warped fingers on the coffee cup, blurred crucifix chain, and inconsistent eyeglass frame.

Trump 'arrest' AI image series
Image
2023

A widely shared series of AI-generated images depicted Donald Trump being tackled by police, mistaken by many viewers as real news photography.

Tactic

Photorealistic political image set staged like a news-wire burst.

Indicator

Extra fingers, fused legs in crowd shots, and no matching photo from any wire service.

Zelensky 'surrender' deepfake video
Video
2022

A low-quality deepfake video of President Zelensky telling Ukrainian troops to surrender was posted on a hacked news site and social media.

Tactic

Disinformation deepfake injected via compromised distribution channel.

Indicator

Mismatched head/body proportions and unnatural neck movement.

UK energy firm CEO voice fraud
Voice
2019

An executive transferred €220k after a phone call using an AI-cloned voice of the parent-company CEO requesting an urgent supplier payment.

Tactic

Single-call voice clone with plausible vendor backstory.

Indicator

Slight 'metallic' overtone and unusual sentence rhythm noted afterward.

Generator fingerprints

Common synthesis families

ElevenLabs
Voice

Very natural prosody but flat affect on long, emotional sentences.

Tortoise / XTTS
Voice

Subtle robotic 'shimmer' on sibilants; breaths placed mechanically.

HeyGen / Synthesia
Video

Locked head pose, limited gaze, lip-sync slip on plosives.

D-ID
Video

Single still photo animated — neck and shoulders barely move.

SDXL / Flux
Image

Hand and ear geometry errors; over-smooth skin micro-texture.

Sora-class video
Video

Physically impossible object permanence across cuts and reflections.

Further reading

Public research & standards