Reported AI‑Generated Deepfake Impersonations of Public Figures Allegedly Used in Coordinated Stock Pump‑and‑Dump Scheme Targeting Israeli Investors

A coordinated fraud campaign in Israel allegedly used AI‑generated deepfake impersonations of public figures including Amir Yaron, Benjamin Netanyahu, Eyal Golan, Noa Kirel, Gal Gadot, Elon Musk, and Mark Zuckerberg to promote NASDAQ‑listed Ostin Technology Group Co. Ltd. (OST) in a pump‑and‑dump scheme. Paid social media ads, WhatsApp groups, and fake investment platforms reportedly lured investors before the stock collapsed in early July 2025, causing major reported losses.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The scammers used AI-generated deepfakes to impersonate trusted individuals for financial gain through a fraudulent stock scheme.

Additional risk subdomains

• 3.1 False or misleading information: The deepfake videos generated and spread false information regarding financial endorsements to mislead investors.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was orchestrated by human fraudsters who intentionally deployed AI deepfakes and ad tools to execute a financial scam.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Risk Level 3: Limited Risk. The report describes the use of AI-generated content, specifically deepfakes, which falls under the transparency obligations of the EU AI Act for synthetic media.

AI system and alleged parties

• AI system: unspecified
• AI purpose: Deepfake Video Generation; Social Media Content Generation
• Behaviour type: Tool
• Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
• Alleged deployer: Unknown scammers, Unknown scam network linked to AI‑generated deepfake campaign promoting OST stock
• Alleged harmed parties: Stock market, Ostin Technology Group, Noa Kirel, NASDAQ, Mark Zuckerberg, Israeli investors, General public of Israel, Gal Gadot, Eyal Golan, Elon Musk, Economy of Israel, Benjamin Netanyahu, Amir Yaron

Harm severity

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Minor, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Minor, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Minor, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: The report describes a coordinated scam causing significant financial losses, highlighting two victims who lost 250,000 and 150,000 shekels respectively, with dozens of others reporting massive losses.

Directly caused: The average financial loss per occurrence is estimated at 400,000 shekels based on the two explicitly quantified victim losses in this single coordinated campaign.

Indirectly caused: N/A

Inferred additional harm: Given that dozens of victims reported massive losses and the stock plummeted by 93%, the total financial loss across all victims is likely in the millions of shekels.

Malicious content

Reported: Yes, the report describes dozens of deepfake videos depicting public figures to promote fake investment opportunities.

Directly caused: The fraudsters created and distributed dozens of deepfake videos of prominent figures like Benjamin Netanyahu, Gal Gadot, and Elon Musk across Instagram and Facebook.

Indirectly caused: N/A

Inferred additional harm: It is likely that hundreds of thousands of social media users were exposed to these malicious deepfake videos before they were removed.

Privacy

Reported: Yes, the report mentions that clicking the ads led users to external websites where victims handed over their personal information.

Directly caused: Victims handed over their personal information on polished external websites mimicking legitimate financial services.

Indirectly caused: N/A

Inferred additional harm: The personal data collected by the scammers is likely being sold or used for further targeted phishing and identity theft campaigns.

Epistemic

Reported: Yes, the report describes the generation of deepfake videos of public figures and financial institutions to fabricate endorsements.

Directly caused: Scammers generated synthetic videos of the Bank of Israel Governor and other figures to falsely endorse a bogus financial product, eroding trust in legitimate institutions.

Indirectly caused: N/A

Inferred additional harm: The widespread dissemination of highly realistic deepfakes likely degraded public trust in digital media and financial communications at scale.

People affected

• Occurrences reported: 1
• People reportedly harmed: 50
• People reportedly exposed: 10000

Potential causes

Management

• Prioritizing Ad Revenue: Platforms profiting from sponsored scam ads, reducing incentive to act.
• No Proactive Infrastructure Block: Failure to invest in systemic tools to block coordinated scam networks.
• Inadequate Risk Assessment: Failure to recognize and mitigate early signs of malicious AI content.

Technology

• Weaponized Deepfakes: AI-generated videos of public figures used to build trust and mislead.
• Dynamic Ad Delivery: Ad tech showing scam content only after user clicks, bypassing filters.
• Fake Trading Platforms: Slick external websites mimicking real dashboards and market graphs.

Data Inputs

• Targeted Demographic Data: Exploiting platform ad tools to target specific demographics with precision.
• Opaque Advertiser Identities: Lack of verification for advertiser profiles and identity data.
• Real Stock Graph Data: Using real rising stock graphs to provide a false illusion of proof.

Human Factors

• Trust in Impersonated Figures: Victims believed deepfakes of trusted finance and public figures.
• Exclusivity and FOMO: Scammers used WhatsApp groups to build trust and a sense of exclusivity.
• Lack of Deepfake Awareness: Victims unable to distinguish AI-generated videos from real footage.

Process and Methods

• Piecemeal Content Moderation: Meta removed individual posts instead of taking down whole scam networks.
• Poor Cross-Ad Tracking: Inability to track and block cloned scam ads after a takedown.
• Easy External Redirection: Allowing ads to seamlessly redirect users to unverified external sites.

Regulatory Environment

• Weak Oversight and Enforcement: Local regulatory gaps left victims vulnerable to international schemes.
• Lack of Platform Accountability: No legislation forcing digital platforms to adopt strict ad transparency.
• Inadequate Penalties: No severe legal consequences for hosting fraudulent AI-generated ads.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides clear details about the nature of the scam, the platforms used, the specific public figures impersonated, and the financial impact on victims. The role of AI (deepfakes) is explicitly stated.
• Ambiguities identified: The exact number of total victims and the precise total financial loss are not fully quantified, referred to generally as a wave of investors and dozens of victims.

A coordinated financial fraud campaign in Israel utilized sophisticated AI-generated deepfakes of prominent figures, including Prime Minister Benjamin Netanyahu and central bank officials, to execute a stock pump-and-dump scheme. While causing significant financial losses for individual victims and highlighting vulnerabilities in social media ad moderation, the incident has minor national security implications, representing an evolved cyber-fraud capability rather than a state-sponsored threat.

• Overall national security impact: Minor
• Response level: Moderate
• Scope: Single nation
• Primary target: Israel
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. Represents an ongoing strategic concern regarding the proliferation of high-quality deepfake tools for financial fraud rather than an active, immediate national security crisis.
• Autonomy: Human-controlled. AI deepfake generators were utilized directly by human actors as tools to create synthetic media, with no autonomous decision-making by the AI.
• Novelty: Evolved capability. Represents a significant advancement of existing deepfake fraud techniques, combining multi-platform sponsored ads, coordinated messaging groups, and high-profile political impersonations.

Impact by dimension

• Physical security: Negligible. No physical threats, kinetic attacks, or critical infrastructure manipulation were reported in connection with this financial fraud campaign.
• Information security: Minor. Deepfake technology was used to impersonate the Prime Minister and central bank officials, representing a minor information security issue, though the intent was purely financial fraud rather than state-sponsored disinformation.
• Sovereignty: Negligible. No disruption to core government operations, electoral systems, or sovereign decision-making processes was reported.
• Economic security: Minor. The incident caused notable financial losses to dozens of individual investors through a stock pump-and-dump scheme, but it did not threaten national economic stability or strategic industries.
• Societal stability: Minor. The widespread dissemination of highly realistic deepfakes of public figures eroded public trust in digital media and financial communications, but did not lead to civil unrest or systematic human rights violations.