Purported Deepfake Impersonating Dubai Crown Prince Reportedly Used to Defraud Filipino Domestic Worker

A Filipino domestic worker identified as "Maria" reportedly paid ₱100,000 (about $1,625) after a scammer deployed purportedly manipulated real-time video to impersonate Dubai Crown Prince Hamdan bin Mohammed during WhatsApp calls. The scammer reportedly claimed the money was for a marriage certificate and "royal membership card" that would help her secure a job in Dubai. Maria reportedly ended contact after noticing that the Facebook account was based in Nigeria.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves scammers using AI deepfake video technology to impersonate a public figure's likeness to conduct a targeted romance scam and defraud the victim of money.

Additional risk subdomains

• 5.1 Overreliance and unsafe use: The victim experienced emotional dependence and placed trust in the AI-generated persona, describing it as a 'love spell' connecting their minds.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The harm was caused by human scammers intentionally using deployed AI deepfake technology to impersonate a public figure and defraud a victim.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The system involves AI-generated content such as deepfakes, which under the EU AI Act are subject to transparency obligations to ensure users are aware they are interacting with AI-generated media.

AI system and alleged parties

• AI system: unspecified
• AI purpose: Deepfake Video Generation; Voice Generation
• Behaviour type: Tool
• Alleged developer: Synthetic video generation technology developers, Synthetic media generation technology developers, Deepfake technology developers
• Alleged deployer: Scammers in Nigeria, Scammers, Romance scammers, Employment scammers, Cybercriminals
• Alleged harmed parties: WhatsApp users, Targets of scams in the United Arab Emirates, Targets of scams, Targets of romance scams, Targets of employment scams, Social media users, Maria (victim of Dubai prince impersonation scam), Hamdan bin Mohammed Al Maktoum, Facebook users

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Minor, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Psychological

Reported: The report explicitly describes psychological harm, noting the victim was 'lovelorn' and felt a 'love spell' before realizing she was scammed.

Directly caused: The victim experienced emotional distress and manipulation, believing she was in a genuine romantic relationship with a prince.

Inferred additional harm: It is likely that the victim and other unnamed victims experienced significant psychological distress, shame, and anxiety upon realizing they had been defrauded of their savings.

People affected

• Occurrences reported: 1
• People reportedly harmed: 1
• People reportedly exposed: 1

Potential causes

Management

• Slow Platform Response: Social media management delayed taking down reported impersonation accounts.
• Inadequate Risk Mitigation: Platform management failed to implement safeguards against deepfake scams.

Technology

• Real-Time Deepfake Video Tools: AI face-swapping and motion-control tools allowed real-time impersonation.
• Flawed Identity Verification: Messaging and dating apps lack real-time identity verification features.

Data Inputs

• Abundant Public Media Data: Scammers used the prince's extensive public social media photos and videos.
• Forged Legal Documents: Scammers provided fake marriage certificates and royal cards to deceive.

Human Factors

• Emotional Manipulation: Victim's emotional attachment lowered skepticism toward suspicious requests.
• Lack of Digital Literacy: Victims struggle to distinguish real-time AI deepfakes from actual video.

Process and Methods

• Inadequate Platform Moderation: Social platforms failed to proactively block impersonator accounts and groups.
• Complex Cross-Border Payments: Use of international banks and crypto made tracing stolen funds difficult.

Regulatory Environment

• Lack of Deepfake Regulation: Absence of strict laws governing the creation and use of real-time AI tools.
• Weak Law Enforcement Oversight: International jurisdictions struggle to prosecute cross-border cyber scams.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides a clear, detailed account of a specific romance scam incident, including the victim's name (pseudonym), the specific amount of money lost, the platform used, and the technology employed. The role of AI deepfakes is explicitly described.
• Ambiguities identified: The specific AI tools or platforms used to generate the real-time deepfake video calls were not identified.
• Alternative interpretations: None. The incident is a clear-cut case of romance fraud facilitated by synthetic media.

An individual was defrauded of 100,000 pesos in a romance scam utilizing real-time AI face-swapping technology to impersonate the Crown Prince of Dubai. This incident represents a cyber-enabled criminal fraud with negligible national security implications, though it highlights the evolving threat of real-time synthetic media in social engineering.

• Overall national security impact: Negligible
• Scope: Multiple nations
• Primary target: No clear primary
• Other affected: Philippines, UAE, Nigeria
• Alleged perpetrator: Nigeria-based scammers

Threat characteristics

• Imminence: Long-term. Represents an ongoing strategic concern regarding cyber-enabled fraud rather than an immediate crisis requiring urgent national security response.
• Autonomy: Human-controlled. The AI face-swapping tool was directly controlled and operated by human scammers during live video calls.
• Novelty: Evolved capability. Represents an evolved capability where traditional romance scams are enhanced by real-time video deepfakes.

Impact by dimension

• Physical security: Negligible. No kinetic impact, physical harm, or critical infrastructure compromise reported in this incident.
• Information security: Negligible. Deepfake technology was used for financial fraud targeting an individual, rather than state-sponsored disinformation or intelligence compromise.
• Sovereignty: Negligible. No disruption to government decision-making, elections, or state sovereignty occurred. The impersonation of a royal figure was strictly for criminal fraud.
• Economic security: Negligible. The financial loss of approximately 1,625 USD represents a minor personal fraud loss with negligible impact on national economic security.
• Societal stability: Negligible. The incident represents localized criminal fraud targeting individuals, with no systemic threat to civil liberties, societal stability, or human rights.