South Korean Fraud Ring Allegedly Used Deepfake Identities to Traffic Victims into Cambodia Scam Operations

Authorities in Vietnam arrested three South Korean men alleged to have used purported deepfake identities in a cross-border romance scam scheme. Victims were reportedly deceived into travel and coerced into moving to Cambodia, where they reportedly were forced into performing scam operations after their passports were taken. The network allegedly obtained about USD $1 million in 2024 before the suspects fled Cambodia and were arrested in Da Nang on October 28, 2025.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The perpetrators used deepfake technology to run a romance-scam network, impersonating women to defraud targeted victims of approximately US$1 million.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by human scammers who intentionally used deepfake technology post-deployment to defraud and traffic victims.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The AI system involved is a deepfake generator used to impersonate individuals, which falls under the Limited Risk category of the EU AI Act due to transparency and disclosure requirements.

AI system and alleged parties

• AI system: None named
• AI purpose: Deepfake Video Generation; Voice Generation
• Behaviour type: Tool
• Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
• Alleged deployer: Seo Jaeseok, Choi Minsu, Choi Jinwoo
• Alleged harmed parties: Victims of romance scams, Trafficking victims coerced into scam operations, General public, Epistemic integrity

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Substantial, indirect Minor
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Minor, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Minor
• Epistemic: direct Minor, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: The report describes 1 incident causing total financial loss of $1000000.

Directly caused: Average financial loss per incident: $1000000. The romance-scam network directly defrauded victims of approximately US$1,000,000 in total.

Indirectly caused: Victims likely incurred additional indirect financial losses from traveling to Vietnam or Thailand, loss of employment during detention, and costs to recover their passports and return home.

Inferred additional harm: Additional unquantified financial losses may have been suffered by victims' families trying to secure their release or from unpaid forced labor.

Malicious content

Reported: The report explicitly describes the use of deepfake technology to pose as women.

Directly caused: Deepfake video or audio content was generated to impersonate women and establish romantic contact with male victims online.

Inferred additional harm: Numerous deepfake media files were likely created and distributed across various social media and messaging platforms to target a wider pool of victims.

Civil rights

Reported: The report explicitly describes human trafficking and forced labor violations.

Directly caused: Victims were trafficked across borders, had their passports confiscated, and were illegally detained and forced to work in online fraud operations.

Inferred additional harm: Dozens of victims likely had their fundamental human rights to freedom of movement, liberty, and fair labor violated during their detention in Cambodia.

Psychological

Reported: The report does not explicitly quantify psychological harm, but the romance scam and subsequent trafficking imply severe distress.

Indirectly caused: The victims suffered severe psychological manipulation through the romance scam and the trauma of being trafficked, detained, and forced to commit fraud.

Inferred additional harm: It is highly likely that all victims suffered significant long-term psychological trauma, anxiety, and distress from both the romantic betrayal and the forced labor detention.

Epistemic

Reported: The report explicitly describes the use of deepfakes to fabricate identities.

Directly caused: Deepfake technology was used to create false female personas, misleading victims into believing they were interacting with real women.

Inferred additional harm: The widespread use of deepfakes in romance scams contributes to a general erosion of trust in online human interactions.

People affected

• Occurrences reported: 1
• People reportedly harmed: 20
• People reportedly exposed: 100

Potential causes

Management

• Organized Crime Coordination: The three suspects managed a highly organized international fraud network.

Technology

• Deepfake Generation Technology: Used to realistically impersonate women online and build trust with victims.
• Online Communication Platforms: Enabled scammers to contact and build relationships with target victims.

Human Factors

• Victim Trust in Online Personas: Victims believed the deepfake personas were real women, leading to compliance.
• Scammer Manipulation Tactics: Scammers exploited romantic desires and financial incentives to lure victims.

Process and Methods

• Romance Scam Methodology: Structured process of building trust before introducing travel offers.
• Forced Labor Scam Operations: Confiscating passports and forcing victims to run online fraud schemes.

Regulatory Environment

• Weak Cross-Border Enforcement: Scammers exploited borders between Vietnam, Thailand, and Cambodia.

Information quality

• Classification confidence: High
• Reason for confidence: The reports from Vietnam News and The Star provide consistent, clear factual details about the arrest of the three suspects, their methods (using deepfakes for romance scams), the location of the scam hub, and the estimated financial damage. The role of AI (deepfakes) is clearly defined as a tool for impersonation.
• Ambiguities identified: The exact number of victims trafficked or defrauded is not specified, and the specific deepfake software or platform used is not named.
• Alternative interpretations: None. The incident is clearly a case of cyber-enabled fraud and human trafficking using synthetic media.

Three South Korean nationals utilized deepfake technology to conduct cross-border romance scams, subsequently trafficking victims into forced labor at a Cambodian scam hub. While representing severe human rights abuses and cyber-enabled crime, the incident has minor national security implications and is managed through standard international law enforcement and extradition processes.

• Overall national security impact: Minor
• Scope: Multiple nations
• Primary target: No clear primary
• Other affected: South Korea, Vietnam, Cambodia, Thailand
• Alleged perpetrator: Three South Korean nationals (Minsu, Jinwoo, and Seo Jaeseok)

Threat characteristics

• Imminence: Long-term. The immediate threat is resolved following the arrest and extradition of the suspects, though the strategic risk of similar deepfake-enabled scams remains.
• Autonomy: Human-controlled. The deepfake technology was strictly human-controlled, acting as a digital tool to facilitate deception rather than possessing autonomous decision-making.
• Novelty: Evolved capability. Represents an evolved capability where scammers integrate increasingly accessible deepfake technology into established transnational trafficking and fraud pipelines.

Impact by dimension

• Physical security: Minor. No critical infrastructure damage occurred, but the incident involved physical detention and cross-border human trafficking of victims lured through AI-enabled deception.
• Information security: Negligible. No state-sponsored intelligence compromise, military targeting, or systematic information warfare operations were identified in this incident.
• Sovereignty: Negligible. The incident represents criminal activity and illegal border crossings, but did not threaten state authority, elections, or core government decision-making.
• Economic security: Negligible. The financial loss of approximately $1 million represents localized criminal fraud rather than a systemic threat to economic stability or strategic industries.
• Societal stability: Minor. Severe human rights violations occurred through forced labor and trafficking, but the scale remains limited and manageable within standard international law enforcement frameworks.