Hong Kong Man Reportedly Lost More Than HK$10 Million in WhatsApp Scam Using Purported AI-Generated Voice Impersonation of His Father

A Hong Kong man reportedly lost more than HK$10 million after scammers hijacked his father's WhatsApp account and sent voice messages closely resembling his father's voice and speech. The victim allegedly made repeated transfers until his savings were depleted.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The scammers used AI voice-cloning technology to impersonate a trusted family member and deceive a specific victim for financial gain.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by human scammers intentionally using AI voice-cloning technology to commit fraud after the model was deployed.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The system is an AI-generated content tool (deepfake/voice clone) which poses a moderate risk and requires transparency obligations so users know they are interacting with AI-generated content.

AI system and alleged parties

• AI system: unspecified
• AI purpose: Voice Generation; Text Style Replication
• Behaviour type: Tool
• Alleged developer: Voice cloning technology developers, Synthetic media generation technology, Synthetic audio generation technology developers, Deepfake technology developers
• Alleged deployer: Voice cloning impersonation scammers, Synthetic media creators, Scammers in Hong Kong, Scammers, Deepfake creators, Cybercriminals
• Alleged harmed parties: WhatsApp users, Victims of voice cloning impersonation scams, Victims of impersonation scams, Financial scam victims

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Substantial, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: The report explicitly describes a financial loss of HK$10 million for the primary victim, and a total of HK$26 million across 150 cases.

Directly caused: The primary victim lost HK$10 million (approximately US$1.27 million) directly through fraudulent bank transfers.

Inferred additional harm: The other 149 victims of the broader WhatsApp hijacking campaign suffered an average loss of approximately HK$107,000 each.

People affected

• Occurrences reported: 1
• People reportedly harmed: 1
• People reportedly exposed: 2

Potential causes

Technology

• AI Voice Cloning Tools: Scammers used realistic AI to clone the father's voice and speech style.
• WhatsApp Hijacking Methods: Fraudsters used fake websites to obtain registration codes and hijack accounts.

Data Inputs

• Compromised Account Data: Scammers accessed victim contacts and info after taking over the account.
• Fake App Registration Codes: Fraudsters extracted registration codes to gain unauthorized account access.

Human Factors

• Blind Trust in Voice Messages: Victim believed the cloned voice matched his father's voice and speech style.
• Lack of Identity Verification: Victim failed to call the father directly to verify the urgent money request.
• Susceptibility to Urgency: Scammers used panic and urgency to prevent the victim from thinking straight.

Process and Methods

• Absence of Security Codewords: No pre-arranged family codewords were established to verify identities.
• Lack of Two-Factor Authentication: Victims failed to enable 2FA, allowing easy account hijacking by scammers.

Information quality

• Classification confidence: High
• Reason for confidence: The reports from multiple sources (SCMP, HKCNA, TechRadar) consistently describe the same incident with matching details, including the specific loss of HK$10 million, the method of WhatsApp hijacking, and the use of AI voice cloning. There is little ambiguity about the sequence of events or the role of AI.
• Ambiguities identified: The specific AI voice-cloning software used by the scammers is not identified, nor is the exact method they used to acquire the father's voice sample.

A high-value financial fraud incident in Hong Kong leveraging AI voice-cloning to steal HK$10 million. While representing an advanced cybercrime capability that erodes public trust in digital communications, the incident remains a localized criminal matter with minor national security implications manageable by standard law enforcement.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: Hong Kong
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. AI-enabled fraud represents an ongoing strategic capability concern rather than an immediate national security crisis requiring urgent response.
• Autonomy: Human-controlled. The voice-cloning software was utilized directly by human scammers as a tool to generate specific audio outputs, lacking autonomous operational capability.
• Novelty: Evolved capability. Represents a significant technological advancement of traditional social engineering and impersonation scams through high-fidelity synthetic media.

Impact by dimension

• Physical security: Negligible. No physical systems, critical infrastructure, or human safety elements were targeted or affected in this financial fraud incident.
• Information security: Negligible. The incident was a localized cybercrime for financial gain, with no evidence of state-sponsored information warfare or compromise of intelligence capabilities.
• Sovereignty: Negligible. Core government operations, electoral systems, and state authority remained unaffected by this private consumer fraud case.
• Economic security: Minor. While causing significant individual losses (HK$10 million) and part of a larger HK$26 million wave, the economic impact is minor and manageable under standard law enforcement procedures.
• Societal stability: Minor. The incident represents a minor threat to societal stability by eroding public trust in digital communication and highlighting privacy risks from voice data harvesting.