Docomo Pacific CEO Reports Mother Targeted by Purported AI-Enabled Scam in Guam

Docomo Pacific's CEO, Christine Baleto, disclosed that her elderly mother was targeted by an alleged AI-enabled scam call on Guam. The scammer reportedly posed as a federal agent and used personal details and intimidation, demanding sensitive information under false pretenses. The company's advisory suggests AI voice cloning may have been involved, warning that such technology can convincingly mimic family members' voices, increasing risk for seniors on the island.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves scammers using AI voice cloning technology to impersonate family members in order to commit financial fraud and scams targeting elderly victims.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The risk is caused by human scammers intentionally utilizing deployed AI voice cloning technology to execute fraudulent schemes.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Risk Level 3: The technology described is AI voice cloning, which falls under 'AI-generated content such as deepfakes' and carries transparency obligations under the Act.

AI system and alleged parties

• AI system: None named
• AI purpose: Voice Generation; Text Style Replication
• Behaviour type: Tool
• Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
• Alleged deployer: Unknown scammers, Unknown scammer targeting Guamanians
• Alleged harmed parties: Mother of Christine Baleto, General public of Guam, Elderly individuals in Guam, Elderly individuals, Docomo Pacific

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Minor, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Minor, indirect Minor
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Minor, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Malicious content

Reported: The report describes the creation of cloned voices used to impersonate family members for fraudulent purposes.

Directly caused: Scammers generated synthetic cloned voices of family members to deceive victims.

Inferred additional harm: Scammers likely generated numerous cloned voice clips to target multiple victims across the region.

Differential treatment

Reported: The report notes a disturbing focus on targeting elderly communities and senior citizens.

Directly caused: Scammers specifically targeted elderly residents of Guam and other states, exploiting their potential vulnerability to technology-driven scams.

Privacy

Reported: The report mentions scammers attempting to steal identity and pressure victims into verifying personal information.

Directly caused: Scammers attempted to obtain personal information from the CEO's mother under false pretenses.

Indirectly caused: Scammers utilized personal details gleaned from social media to make their impersonations more convincing.

Inferred additional harm: It is likely that other victims had their sensitive personal and financial information compromised during successful scam attempts.

Epistemic

Reported: The report describes scammers using AI voice cloning to fabricate the voices of loved ones, creating false beliefs that family members are in distress.

Directly caused: The generation of cloned voices misled victims into believing they were speaking to actual family members.

Inferred additional harm: Widespread use of voice cloning undermines trust in voice communications and phone calls generally.

People affected

• Occurrences reported: 1
• People reportedly exposed: 1

Potential causes

Management

• Delayed Industry Warnings: Telecom companies issued warnings only after incidents became pervasive.

Technology

• AI Voice Cloning Tools: Advanced AI enables scammers to clone the voices of family members.
• Caller ID Spoofing: Scammers spoof phone numbers to create an illusion of familiarity.

Data Inputs

• Social Media Personal Data: Scammers use genuine details from social media to create trust.

Human Factors

• Targeting of Elderly Communities: Elders are targeted due to perceived vulnerability to high-pressure scams.
• Panic and Urgency Response: Victims act quickly under pressure, bypassing standard verification.

Process and Methods

• Inadequate Call Verification: Lack of routine verification when receiving high-pressure distress calls.

Regulatory Environment

• Weak Telecom Spoofing Controls: Regulatory gaps allow spoofed numbers and cloned voices to cross networks.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide clear, consistent accounts of how AI voice cloning is being used by scammers to target the elderly in Guam. The specific attempt involving the CEO's mother is well-documented, and the general mechanics of the scam are clearly explained.
• Ambiguities identified: The specific AI tools or software used by the scammers are not named, and the exact number of successful scams or financial losses in Guam is not quantified.
• Alternative interpretations: None. The reports clearly describe a malicious scam campaign using AI voice cloning.

Telecommunications providers in Guam issued warnings regarding scammers using AI voice cloning to impersonate family members and federal agents to defraud elderly residents. While representing an evolved and highly deceptive fraud capability, the incident remains a localized criminal issue with minor national security implications.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Near-term. The threat is active and developing, requiring ongoing public warnings and monitoring by local authorities and telecommunications providers.
• Autonomy: Human-controlled. AI voice cloning tools are utilized as a functional utility by human scammers who manually orchestrate and execute the fraudulent calls.
• Novelty: Evolved capability. This represents a significant technological advancement of traditional imposter and grandparent scams using highly convincing synthetic audio.

Impact by dimension

• Physical security: Negligible. No kinetic threats, physical damage, or critical infrastructure compromise were reported in connection with this incident.
• Information security: Negligible. The use of voice cloning was for financial fraud rather than state-sponsored disinformation or intelligence compromise.
• Sovereignty: Negligible. Impersonation of federal agents occurred during scam calls, but there was no disruption to core government functions or sovereign authority.
• Economic security: Minor. The incident involves localized financial fraud targeting individuals, which does not pose a systemic threat to national economic stability or strategic industries.
• Societal stability: Minor. The targeting of elderly populations via high-pressure tactics causes localized distress and potential financial harm, but does not threaten overall societal stability.