A scammer impersonated a WCPO 9 meteorologist on Facebook using AI voice cloning software to solicit money from users. The station warned viewers that the account was fraudulent and provided tips on how to identify such scams. No financial losses were confirmed, but the incident highlights the use of AI voice cloning in social media fraud.
WCPO Cincinnati reported that a scammer impersonated its meteorologist Jennifer Ketchmark using AI voice cloning. A reportedly fraudulent Facebook account made friend requests and sent direct messages requesting money, using an AI-generated voice that mimicked Ketchmark's. The scam attempted to gain trust by sounding convincingly like her. WCPO warned viewers and urged reporting the fake account to Meta. No confirmed victims or losses were publicly reported.
Risk classification
- Primary risk domain: 4 Malicious actors
- Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation
The scammer used AI voice cloning to impersonate a trusted public figure on social media to deceive individuals for financial gain.
Causal factors
- Entity: Human
- Intent: Intentional
- Timing: Post-deployment
The incident was caused by a human scammer intentionally using a deployed AI voice cloning tool to commit fraud.
EU AI Act risk tier
- Risk tier: 3 Limited Risk
Limited Risk: The report describes the use of AI voice cloning software to generate deepfake audio. Under the EU AI Act, AI-generated content such as deepfakes poses a moderate risk and is subject to specific transparency obligations.
AI system and alleged parties
- AI system: AI voice impersonation software
- AI purpose: Voice Generation; Text Style Replication
- Behaviour type: Tool
- Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
- Alleged deployer: Unknown scammers, Unknown scammer impersonating Jennifer Ketchmark
- Alleged harmed parties: WCPO Cincinnati, Jennifer Ketchmark, General public of Cincinnati, Facebook users
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Negligible. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Negligible, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Negligible, indirect Negligible
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Negligible, indirect Negligible
- Psychological: direct Negligible, indirect Negligible
- Epistemic: direct Negligible, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
People affected
- Occurrences reported: 1
- People reportedly harmed: 1
- People reportedly exposed: 2
Potential causes
Management
- Inadequate Platform Safeguards: Social media management fails to block impersonators using synthetic media.
- Lack of AI Developer Controls: AI software creators release cloning tools without safety guardrails.
Technology
- Accessible Voice Cloning Software: Free AI tools allow cloning voices with as little as 3 seconds of audio.
- High Fidelity Voice Generation: AI-generated voice sounds highly realistic, making detection difficult.
Data Inputs
- Publicly Available Audio Data: Meteorologist's broadcast audio is easily harvested to train the AI model.
Human Factors
- Trust in Voice Authenticity: Victims trust the familiar voice, making them susceptible to the scam.
- Difficulty Spotting Fake Profiles: Users overlook subtle indicators like extra characters in profile names.
Process and Methods
- Easy Fake Account Creation: Meta's platform allows scammers to easily set up lookalike profiles.
- Reactive Moderation Policies: Platforms rely on user reporting rather than proactive AI scam detection.
Regulatory Environment
- Lack of Voice Cloning Regulation: No legal frameworks restrict the distribution or misuse of voice cloning tech.
Information quality
- Classification confidence: High
- Reason for confidence: The report clearly outlines the nature of the scam, the medium used (Facebook), the target (a meteorologist), and the technology involved (AI voice cloning). While the specific software name is not mentioned, the facts are sufficient to confidently classify the incident.
- Ambiguities identified: The specific AI voice cloning software used by the scammer is not identified.
- Alternative interpretations: None.
A scammer used AI voice cloning to impersonate a local meteorologist on Facebook to solicit money. The incident represents a common cybercrime and fraud event with negligible national security implications, as it did not target critical infrastructure, government functions, or national-level information systems.
- Overall national security impact: Negligible
- Scope: Single nation
- Primary target: United States
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Long-term. Represents an ongoing strategic concern regarding the accessibility of voice-cloning technology rather than an active national security crisis.
- Autonomy: Human-controlled. The AI tool was directly controlled by a human scammer to generate specific audio clips, with no autonomous decision-making.
- Novelty: Established threat. AI voice cloning for financial scams and impersonation on social media is an established and recurring threat.
Impact by dimension
- Physical security: Negligible. The incident involves social media impersonation and fraud with no physical component or threat to critical infrastructure.
- Information security: Negligible. No state-level information warfare or compromise of intelligence capabilities. The incident was a localized financial scam targeting social media users.
- Sovereignty: Negligible. No impact on government decision-making, electoral systems, or state authority.
- Economic security: Negligible. No strategic technology theft or threat to national financial systems. No financial losses were confirmed in this incident.
- Societal stability: Negligible. The incident is a localized fraud attempt with no large-scale impact on social cohesion, civil liberties, or societal stability.