Purported Deepfake Impersonating Elon Musk Allegedly Defrauded Elderly U.S. Woman of $50,000 via Gift Card–to-Crypto Scam

An 80-year-old U.S. woman was reportedly deceived by scammers using purportedly AI-generated messages and deepfake media impersonating Elon Musk into believing she was in a romantic relationship with him. The perpetrators allegedly induced her to buy over $50,000 in Apple gift cards to be converted into cryptocurrency, leaving her financially endangered and at risk of foreclosure on her home.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involved scammers using AI-generated deepfakes to impersonate a celebrity and target a specific elderly victim for financial gain.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The harm was caused by malicious human actors intentionally using deployed AI deepfake generation tools to defraud the victim.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Risk Level 3. Limited Risk: The report describes the use of AI-generated content such as deepfakes, which are subject to transparency obligations under the Act.

AI system and alleged parties

• AI system: unspecified
• AI purpose: Deepfake Video Generation; Voice Generation
• Behaviour type: Tool
• Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
• Alleged deployer: Unknown scammers impersonating Elon Musk, Unknown scammers
• Alleged harmed parties: Unnamed 80-year-old U.S. woman, Epistemic integrity, Elon Musk, Elderly investors, Cryptocurrency investors defrauded by AI-generated profiles

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Minor, indirect Minor
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Minor
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: The report describes 1 incident causing total financial loss of $50000.

Directly caused: Average financial loss per occurrence: $50000 representing the gift cards purchased and sent to the scammers.

Indirectly caused: The victim fell $28,000 behind on her mortgage payments, putting her home on the cusp of foreclosure.

Inferred additional harm: The victim may face additional financial losses from potential foreclosure costs, legal fees, or selling her home under market value.

Psychological

Reported: The report explicitly describes psychological manipulation where the victim believed she was in a relationship with Elon Musk and struggled to understand she was being scammed.

Indirectly caused: The victim experienced severe cognitive manipulation, forming a false romantic attachment to an AI-impersonated persona and experiencing denial when confronted.

Inferred additional harm: It is highly likely the victim suffered significant emotional distress, confusion, and trauma upon realizing the relationship was fraudulent and facing the potential loss of her home.

People affected

• Occurrences reported: 1
• People reportedly harmed: 1
• People reportedly exposed: 1

Potential causes

Technology

• Realistic Deepfake Generation: AI enables scammers to create highly convincing fake videos and audio.
• Personalized AI Content: AI allows targeting victims by name in synthesized video messages.

Data Inputs

• Abundant Training Data: Large amounts of public celebrity media enable training of deepfake models.
• Victim Identity Data: Personal details of the victim are used to customize the scam attempt.

Human Factors

• Age-Related Vulnerability: Cognitive decline and clouded judgment in older adults increase scam risk.
• Lack of AI Literacy: Victims are unaware of deepfake technology and cannot spot synthetic media.
• Emotional Exploitation: Scammers build fake romantic relationships to manipulate victims for money.

Process and Methods

• Inadequate Identity Verification: Lack of reliable methods for victims to verify who they are talking to.
• Delayed Financial Intervention: Family members did not monitor the victim's financial activity early enough.

Regulatory Environment

• Lack of Deepfake Regulation: Absence of clear laws governing synthetic media creation and misuse.
• Insufficient Platform Oversight: Weak enforcement and monitoring of fraudulent content on online platforms.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides a clear and detailed account of a specific financial scam involving deepfakes, detailing the victim's situation, the amount lost, and the specific impersonation target. While the exact AI model is not named, the nature of the technology and its role in the scam are unambiguous.
• Ambiguities identified: The specific AI tools used to generate the deepfakes are not identified.
• Alternative interpretations: None. The incident is a clear case of targeted financial fraud utilizing synthetic media.

An elderly U.S. citizen was defrauded of 50,000 USD in a romance scam utilizing AI-generated deepfakes of Elon Musk. While devastating to the individual, the incident constitutes localized cybercrime with negligible direct national security implications. It highlights the evolving threat of accessible synthetic media being used for targeted financial fraud.

• Overall national security impact: Negligible
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. Represents an ongoing cybercrime trend and strategic concern regarding synthetic media, rather than an active national security crisis.
• Autonomy: Human-controlled. AI tools were used strictly as a tool by human scammers to generate synthetic media, with humans directing the overall operation.
• Novelty: Evolved capability. Represents a significant advancement of traditional romance and financial scams through the integration of accessible, high-realism AI deepfakes.

Impact by dimension

• Physical security: Negligible. No physical infrastructure, kinetic systems, or human safety operations were impacted or targeted in this incident.
• Information security: Negligible. The deepfake was utilized for localized financial fraud targeting a single individual, rather than state-sponsored information warfare or intelligence compromise.
• Sovereignty: Negligible. The incident did not impact state authority, electoral processes, or core government decision-making functions.
• Economic security: Negligible. The financial loss of 50,000 USD is isolated to a single victim and does not threaten national financial systems or strategic economic security.
• Societal stability: Negligible. While causing severe personal distress to the victim, the incident does not present a large-scale threat to societal stability, civil liberties, or population safety.