A woman in Guelph, Ontario, lost $14,000 after falling victim to a cryptocurrency scam that utilized AI-generated deepfakes of a popular YouTuber to impersonate the celebrity and solicit funds. The victim was deceived by social media advertisements and a phone call, leading her to transfer money into a fraudulent cryptocurrency wallet. Local police have issued a warning regarding the use of AI in celebrity-endorsed financial scams.
A Guelph, Ontario, woman reportedly lost $14,000 after clicking a social-media ad for a cryptocurrency investment purportedly promoted by MrBeast. Police said her losses accumulated through an initial $250 payment and later transfers made after she spoke with supposed representatives and someone she believed was the YouTube creator, including $5,000 sent to a crypto wallet.
Risk classification
- Primary risk domain: 4 Malicious actors
- Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation
The incident involves malicious actors using AI-generated deepfakes and voice clones of a celebrity to execute a targeted financial scam and defraud a victim of $14,000.
Causal factors
- Entity: Human
- Intent: Intentional
- Timing: Post-deployment
The incident was caused by human scammers who intentionally used deployed AI deepfake tools to defraud a victim.
EU AI Act risk tier
- Risk tier: 3 Limited Risk
Risk Level 3: The incident involves 'AI-generated content such as deepfakes' used to impersonate a celebrity, which falls under the transparency obligations of Limited Risk systems.
AI system and alleged parties
- AI system: unspecified
- AI purpose: Deepfake Video Generation; Voice Generation
- Behaviour type: Tool
- Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
- Alleged deployer: Unknown scammers impersonating MrBeast, Unknown scammers
- Alleged harmed parties: YouTube users, Unnamed Guelph, Ontario woman, social media users, General public, Fans of MrBeast, Epistemic integrity
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Minor, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Minor, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Negligible, indirect Negligible
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Negligible, indirect Negligible
- Psychological: direct Negligible, indirect Negligible
- Epistemic: direct Minor, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
Financial
Reported: The report explicitly describes financial losses of $14,000 for a single occurrence of the scam.
Directly caused: The victim directly lost $14,000 through fraudulent cryptocurrency transfers and initial payments to the scammers.
Inferred additional harm: It is highly likely that other individuals have fallen victim to similar deepfake ads featuring Jimmy Donaldson, resulting in further unquantified financial losses globally.
Malicious content
Reported: The report explicitly describes the creation and spread of malicious deepfake videos and voice clones used to impersonate a celebrity.
Directly caused: Scammers created and distributed an AI-generated deepfake video of Jimmy Donaldson on social media and used a cloned voice over a phone call to deceive the victim.
Inferred additional harm: It is likely that these and similar malicious deepfake advertisements reached thousands of other social media users, exposing them to fraudulent content.
Epistemic
Reported: The report explicitly describes epistemic harm in the form of AI-generated deepfakes and voice clones that misled a victim into believing a celebrity was endorsing an investment.
Directly caused: The victim was misled by a highly realistic AI-generated video and phone call, corrupting her ability to distinguish real endorsements from fabricated ones.
Inferred additional harm: The widespread proliferation of such deepfakes erodes public trust in digital media, video evidence, and legitimate celebrity communications.
People affected
- Occurrences reported: 1
- People reportedly harmed: 1
- People reportedly exposed: 1
Potential causes
Management
- Prioritizing Ad Revenue: Platforms prioritized ad sales over rigorous safety and verification.
- Inadequate Risk Mitigation: Platform management failed to address known risks of AI deepfake ads.
Technology
- Deepfake Video Generation: AI-generated video mimicked celebrity likeness to deceive the victim.
- AI Voice Cloning: AI-synthesized voice used during phone calls to build trust.
- Algorithmic Ad Targeting: Social media algorithms delivered malicious deepfake ads to users.
Data Inputs
- Celebrity Likeness Training Data: Publicly available media used to train AI models of the celebrity.
- Unverified Ad Media Assets: Malicious ad assets uploaded to platforms without input validation.
Human Factors
- Trust in Celebrity Likeness: Victim trusted the fake endorsement due to celebrity's reputation.
- Low AI Deepfake Awareness: Victim lacked awareness that video and voice could be faked with AI.
- Urgency and Financial Pressure: Victim acted quickly due to high-pressure tactics from the scammer.
Process and Methods
- Inadequate Ad Screening: Social media platforms failed to screen ads for AI-generated deepfakes.
- Weak Identity Verification: Lack of robust identity checks for advertisers promoting investments.
- Delayed Scam Takedowns: Slow response in removing reported deepfake ads from the platform.
Regulatory Environment
- Lack of Deepfake Regulation: No strict legal framework governing AI impersonation and deepfakes.
- Weak Platform Liability: Platforms are not legally liable for hosting fraudulent AI-generated ads.
Information quality
- Classification confidence: High
- Reason for confidence: The report clearly details the scam, the specific amount lost ($14,000), the method of deception (AI-generated deepfake video and phone call), and the identity of the impersonated celebrity. There is minimal ambiguity regarding the events described.
- Ambiguities identified: The specific AI tools or platforms used to generate the deepfake video and voice clone are not identified.
- Alternative interpretations: None. The incident is a straightforward financial fraud facilitated by synthetic media.
A Canadian citizen lost $14,000 to a financial scam utilizing AI-generated deepfakes and voice cloning of a popular YouTuber. While demonstrating the growing accessibility of sophisticated social engineering tools, the incident is a localized cybercrime with negligible implications for national security.
- Overall national security impact: Negligible
- Scope: Single nation
- Primary target: Canada
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Long-term. The event is a localized criminal matter rather than an active national security crisis, representing a long-term strategic challenge in policing synthetic media.
- Autonomy: Human-controlled. AI tools were strictly utilized by human operators to generate media and clone voices, with no autonomous decision-making by the system.
- Novelty: Established threat. AI-generated celebrity deepfakes and voice cloning scams are well-documented techniques that have been observed globally for several years.
Impact by dimension
- Physical security: Negligible. The incident was a financial scam with no physical dimension, kinetic impact, or threat to critical infrastructure.
- Information security: Negligible. The deepfake was used for localized financial fraud rather than state-sponsored information warfare, intelligence compromise, or political influence.
- Sovereignty: Negligible. No government systems, democratic processes, or sovereign functions were targeted or disrupted by this incident.
- Economic security: Negligible. The loss of $14,000 by a single individual represents a negligible impact on national economic security or strategic industries.
- Societal stability: Negligible. While tragic for the victim, this isolated scam does not threaten social cohesion, civil liberties, or population-scale stability.