Purported Deepfake Impersonating Sudha Murty Reportedly Promoted Quantum AI India Investment Scam via Spoofed News Link

A purported deepfake impersonating Rajya Sabha MP and Infosys Foundation chairperson Sudha Murty circulated on social media urging viewers to click a link for "investment opportunities." The link allegedly directed users to a spoofed news website intended to collect personal details and promoted a "Quantum AI India" investment platform. Murty publicly warned the video was AI-generated and fraudulent.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves the use of AI-generated deepfakes to impersonate a prominent figure to deceive individuals for financial gain through an investment scam.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by human actors intentionally deploying deepfake generation tools post-deployment to commit financial fraud.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Risk Level 3. Limited Risk: The report describes the creation of deepfakes, which are explicitly classified under Limited Risk due to transparency obligations requiring users to be informed of AI-generated content.

AI system and alleged parties

• AI system: unspecified
• AI purpose: Deepfake Video Generation; Voice Generation
• Behaviour type: Tool
• Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
• Alleged deployer: Unknown scammers, Quantum AI scammers, Quantum AI
• Alleged harmed parties: Sudha Murty, Rajya Sabha, Quantum AI victims, General public of India, General public, Epistemic integrity

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Minor
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Minor
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Minor, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: Yes, the report describes a victim losing Rs 43 lakh in a related deepfake scam targeting Sudha Murty and her husband.

Indirectly caused: A 59-year-old man from Pune lost Rs 43 lakh after falling prey to a deepfake advertisement on Instagram.

Inferred additional harm: It is highly likely that other investors fell prey to the viral video and suffered unquantified financial losses.

Malicious content

Reported: Yes, the report describes the creation and spread of deepfake videos of Sudha Murty to promote a scam.

Directly caused: AI was used to generate deepfake videos of Sudha Murty to promote a fraudulent investment platform.

Privacy

Reported: Yes, the report notes that the link led to a fake news website in an attempt to steal the user's personal details.

Indirectly caused: The fraudulent website attempted to harvest personal details of users who clicked the link.

Inferred additional harm: It is likely that some users entered and lost their personal data to the scammers.

Epistemic

Reported: Yes, the report describes the creation of deepfake videos and fake news websites to mislead the public.

Directly caused: AI-generated deepfake videos fabricated Sudha Murty's speech and voice to promote a non-existent investment opportunity.

Inferred additional harm: The proliferation of such deepfakes erodes public trust in digital media and the authentic statements of public figures.

People affected

• Occurrences reported: 3
• People reportedly harmed: 3
• People reportedly exposed: 3

Potential causes

Technology

• AI Voice and Video Cloning: Advanced AI cloned Sudha Murty's face and voice to deceive viewers.

Data Inputs

• Public Audio and Video Data: Abundant public footage of public figures used to train deepfake models.

Human Factors

• Trust in Public Figures: Victims believed the scam because they trusted Sudha Murty's reputation.
• Financial Vulnerability: The promise of high returns lured victims into investing without verifying.

Process and Methods

• Inadequate Platform Screening: Instagram allowed the fraudulent deepfake advertisement on its platform.

Information quality

• Classification confidence: High
• Reason for confidence: The reports clearly describe the nature of the deepfake scam, the target, the platform, and the financial impact on at least one victim. The role of AI in generating the fake video and voice is explicitly stated.
• Ambiguities identified: The specific AI models or software used to generate the deepfakes are not identified.

A deepfake-enabled financial scam impersonating Indian public figure Sudha Murty led to individual financial losses. While exploiting the identity of a Member of Parliament, the incident constitutes localized cybercrime and fraud rather than a coordinated threat to national security.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: India
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. Represents an ongoing cybercrime threat rather than an active, imminent national crisis requiring immediate state response.
• Autonomy: Human-controlled. The AI tool was directly controlled and utilized by human actors to generate specific synthetic media assets.
• Novelty: Established threat. Deepfake-based financial scams impersonating prominent figures are a well-documented and frequently occurring threat vector.

Impact by dimension

• Physical security: Negligible. No physical systems, critical infrastructure, or kinetic threats were involved in this digital financial scam.
• Information security: Minor. Involves deepfakes of a public figure, but the intent is financially motivated fraud rather than state-sponsored information operations or intelligence compromise.
• Sovereignty: Minor. The target is a Member of Parliament, but the scam does not compromise government decision-making, electoral systems, or core state authority.
• Economic security: Minor. Resulted in individual financial losses, including one victim losing Rs 43 lakh, but does not threaten systemic financial stability or strategic industries.
• Societal stability: Minor. Erodes public trust in digital media and the authenticity of public figures, but does not scale to civil unrest or systematic rights violations.