Multiple YouTube Live streams utilized AI-generated deepfake videos of Donald Trump to promote a fraudulent Bitcoin giveaway scam. The videos, which falsely depicted the former president at a NATO summit, instructed viewers to scan QR codes to send cryptocurrency. This incident is part of a broader trend of using AI tools to facilitate financial crimes.
Multiple YouTube Live streams reportedly featured a purported AI‑generated deepfake video depicting U.S. President Donald Trump at a NATO Summit press event. In the video, Trump reportedly appears to promote a Bitcoin "double-your-money" offer, directing viewers to scan an on‑screen QR code and send cryptocurrency to a specified address. The video was reportedly not authentic and is alleged to have been part of an ongoing YouTube-based crypto scam campaign.
Risk classification
- Primary risk domain: 4 Malicious actors
- Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation
The incident involves the use of AI-generated deepfakes to impersonate a public figure for the purpose of executing a financial scam and defrauding cryptocurrency investors.
Additional risk subdomains
- 3.1 False or misleading information: The deepfake video generated highly realistic but entirely fabricated statements from a public figure to mislead the public.
Causal factors
- Entity: Human
- Intent: Intentional
- Timing: Post-deployment
The incident was initiated by human scammers who intentionally deployed deepfake technology post-deployment to execute a financial scam.
EU AI Act risk tier
- Risk tier: 3 Limited Risk
Limited Risk: The report describes the use of deepfake software to generate synthetic video and audio of a public figure. According to the EU AI Act definitions, AI-generated content such as deepfakes falls under Limited Risk (Level 3), requiring specific transparency obligations.
AI system and alleged parties
- AI system: unspecified
- AI purpose: Deepfake Video Generation; Voice Generation
- Behaviour type: Tool
- Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
- Alleged deployer: Unknown scammers
- Alleged harmed parties: NATO Summit organizers, NATO, General public, Donald Trump, Cryptocurrency investors
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Minor, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Negligible, indirect Negligible
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Negligible, indirect Negligible
- Psychological: direct Negligible, indirect Negligible
- Epistemic: direct Minor, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
Malicious content
Reported: Yes, the report describes the creation and spread of malicious deepfake videos designed to scam viewers.
Directly caused: Scammers created and distributed deepfake videos of Donald Trump promoting a fraudulent Bitcoin giveaway on YouTube Live.
Inferred additional harm: The proliferation of these deepfakes likely reached thousands of additional users through social media sharing and duplicate uploads.
Epistemic
Reported: Yes, the report describes the generation of highly believable deepfake videos of Donald Trump making false statements.
Directly caused: The deepfake videos falsely depicted Donald Trump at a NATO press event endorsing a Bitcoin giveaway, misleading viewers about his actual statements and actions.
Inferred additional harm: The widespread availability of such realistic deepfakes contributes to a general erosion of trust in video evidence and public broadcasts.
People affected
- Occurrences reported: 1
- People reportedly exposed: 2000
Potential causes
Management
- Inadequate Live Stream Safety: Platform failed to address the persistent trend of celebrity deepfakes.
Technology
- Advanced Deepfake Software: AI tools made it easy to generate highly believable voice and video clones.
- Convincing Lip-Syncing Tech: AI-generated speech matched the visual lip movements seamlessly.
Data Inputs
- Real NATO Summit Footage: Scammers used authentic background visuals to mimic a real press event.
- Malicious QR Codes: Visual overlays redirected victims to scam addresses.
Human Factors
- Viewer Confusion Over Crypto: Followers were unsure which Trump-related crypto ventures were legitimate.
- Plausibility of Endorsement: Trump's crypto-friendly stance made the fake giveaway seem plausible.
Process and Methods
- Slow Video Suspension Process: Delays in taking down reported videos allowed scams to run live.
- Inability to Block Duplicates: Duplicate versions of banned videos easily bypassed upload filters.
Information quality
- Classification confidence: High
- Reason for confidence: The report clearly details the nature of the scam, the platform used (YouTube Live), the target of the deepfake (Donald Trump), and the mechanism of the fraud (QR codes for Bitcoin). There is little ambiguity about the AI's role as a tool for generating deepfakes.
- Ambiguities identified: The exact deepfake software used is not specified, and the precise number of victims or financial losses is not quantified.
- Alternative interpretations: None. It is clearly a malicious deepfake scam.
Scammers used AI-generated deepfakes of Donald Trump at a fake NATO summit to conduct a cryptocurrency giveaway scam on YouTube Live. While the incident demonstrates the increasing sophistication of synthetic media tools, it represents a minor national security threat focused on financial fraud rather than state-sponsored information warfare or critical infrastructure disruption.
- Overall national security impact: Minor
- Scope: Single nation
- Primary target: United States
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Long-term. Represents an ongoing strategic concern regarding the proliferation of realistic deepfakes rather than an active national security crisis.
- Autonomy: Human-controlled. The AI system functioned strictly as a tool controlled by human operators to generate synthetic media.
- Novelty: Established threat. Impersonating public figures for cryptocurrency scams is an established threat method, though the quality of the AI generation continues to evolve.
Impact by dimension
- Physical security: Negligible. No physical systems, infrastructure, or human safety threats were involved in this incident.
- Information security: Minor. The incident used a highly realistic deepfake of a political figure in a mock geopolitical setting (NATO summit), but the primary intent was financial fraud rather than state-sponsored information warfare.
- Sovereignty: Minor. Impersonation of a political figure using fake NATO summit framing could subtly impact public trust, but no core government functions, elections, or decision-making processes were compromised.
- Economic security: Minor. The incident resulted in localized financial fraud targeting individual cryptocurrency users, but posed no systemic threat to national financial systems or critical economic infrastructure.
- Societal stability: Minor. While defrauding individuals, the scale of the incident did not threaten broad social cohesion, civil liberties, or cause widespread civil unrest.