Ottawa Couple Reportedly Loses CA$177,023 After Purported Deepfake Elon Musk Investment Scam

A retired Ottawa couple, Doug and Victoria Lloyd, lost CA$177,023 after being lured by a purported deepfake video of Elon Musk promoting a fake investment platform. The deepfake allegedly led to prolonged social engineering, remote access to their computer, and fraudulent cryptocurrency transfers. The couple reportedly suffered major financial loss and ongoing debt. Police say recovery is unlikely.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The scammers used a deepfake video of Elon Musk to lure the victims into a targeted investment scam, resulting in a significant financial loss.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was initiated by human scammers who intentionally deployed a deepfake video of Elon Musk to defraud the victims.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The report describes the use of a deepfake video, which is subject to transparency obligations under the EU AI Act.

AI system and alleged parties

• AI system: None named
• AI purpose: Deepfake Video Generation; Voice Generation
• Behaviour type: Tool
• Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
• Alleged deployer: Unknown scammers, Unknown scammer impersonating Elon Musk
• Alleged harmed parties: Victoria Lloyd, Investors, General public of Canada, General public, Epistemic integrity, Elon Musk, Elderly investors, Elderly individuals, Doug Lloyd, Canadian investors

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Minor
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Minor
• Epistemic: direct Minor, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: Yes, the report explicitly describes a financial loss of $177,023 CAD through a line of credit.

Indirectly caused: The couple lost $177,023 CAD due to the fraudulent investment scheme initiated by the deepfake video.

Malicious content

Reported: Yes, the report describes a deepfake video used to facilitate a scam.

Directly caused: A deepfake video of Elon Musk was created and posted online to promote a fraudulent investment opportunity.

Psychological

Reported: Yes, the report describes severe emotional distress and devastation experienced by the couple.

Indirectly caused: The couple experienced severe emotional distress, describing the situation as 'devastating' and stating that 'all our dreams are gone' after losing their life savings.

Epistemic

Reported: Yes, the report describes the generation of a deepfake video that misled the victims.

Directly caused: The creation of a deepfake video of Elon Musk misled the victims into believing a fake investment opportunity was legitimate.

People affected

• Occurrences reported: 1
• People reportedly harmed: 2
• People reportedly exposed: 2

Potential causes

Management

• Platform Safety Oversight Gaps: Hosting platforms prioritized content volume over strict safety verification.
• Bank Fraud Detection Failures: Financial institution failed to detect or block unauthorized transactions.

Technology

• Deepfake Video Generation: AI deepfake tech was used to create a realistic video of Elon Musk.
• Remote Control Software: Scammer used remote access tools to bypass user controls on the laptop.

Data Inputs

• Malicious Link Submission: Victims submitted phone number via link in the video description.
• Fraudulent Credentials: Scammers used fake UK registration data to appear legitimate.

Human Factors

• Social Engineering Trust: Scammer built personal rapport to exploit the victims' trust.
• Physical Vulnerability: Victim's physical challenges made remote computer access easier to exploit.
• Optimism Bias: Financial need for a dream house made the couple ignore friend warnings.

Process and Methods

• Inadequate Platform Moderation: Online platforms failed to detect and remove the deepfake scam video.
• Lack of Link Verification: Platform processes allowed unchecked malicious links in video descriptions.

Regulatory Environment

• Lack of Deepfake Standards: Absence of strict regulations governing AI-generated deepfake content.
• Cross-Border Enforcement Gaps: Lack of international coordination to track global financial scammers.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide clear and consistent details about how the scam was initiated using a deepfake video of Elon Musk, the exact financial loss suffered by the couple, and the subsequent social engineering tactics used by the scammers.

A retired Canadian couple was defrauded of CA$177,023 in an online investment scam initiated by a deepfake video of Elon Musk. While the incident caused severe personal financial and psychological distress, its national security implications are negligible, representing a localized cybercrime rather than a threat to state infrastructure, sovereignty, or economic stability.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: Canada
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. The specific incident is resolved, but it represents an ongoing, long-term strategic threat regarding the proliferation of deepfake-enabled financial fraud.
• Autonomy: Human-controlled. The AI system acted as a static tool to generate a deepfake video, while human scammers actively controlled the subsequent social engineering and theft.
• Novelty: Established threat. The use of celebrity deepfakes to lure victims into fraudulent investment schemes is an established threat with numerous prior occurrences.

Impact by dimension

• Physical security: Negligible. The incident was a financial fraud scam targeting individuals, with no impact on physical security, critical infrastructure, or human safety.
• Information security: Negligible. While a deepfake of a prominent public figure was used, it was deployed for localized financial fraud rather than systematic information warfare or intelligence compromise.
• Sovereignty: Negligible. The incident did not target or affect government operations, decision-making, electoral systems, or sovereign authority.
• Economic security: Minor. The incident resulted in a significant personal financial loss of CA$177,023 but has negligible impact on national economic systems, strategic industries, or technological security.
• Societal stability: Minor. The scam caused severe financial and emotional distress to two individuals, but does not represent a large-scale threat to social cohesion, civil liberties, or societal stability.