Scammers used AI-generated deepfake videos of a real immigration attorney to defraud a vulnerable immigrant out of thousands of dollars and steal his personal documents.
Scammers reportedly used AI-generated videos impersonating Miami immigration attorney Angel Leal to solicit a Bronx legal resident seeking U.S. citizenship. The victim said he sent $4,820 through Zelle and provided Social Security and residency documents before discovering the scheme. He later reported falling behind on rent and utilities and said the scammers sought additional money.
Risk classification
- Primary risk domain: 4 Malicious actors
- Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation
The incident involves scammers using AI-generated deepfakes of an attorney's public likeness to run a targeted financial fraud scheme against vulnerable immigrants.
Causal factors
- Entity: Human
- Intent: Intentional
- Timing: Post-deployment
The harm was caused by human scammers intentionally using AI video-cloning tools to defraud victims.
EU AI Act risk tier
- Risk tier: 3 Limited Risk
Limited Risk: The report describes the use of AI-generated content such as deepfakes, which falls under Risk Level 3 due to transparency and disclosure obligations.
AI system and alleged parties
- AI system: unspecified
- AI purpose: Deepfake Video Generation; Social Media Content Generation
- Behaviour type: Tool
- Alleged developer: Synthetic video generation technology developers, Synthetic media generation technology developers, Deepfake technology developers
- Alleged deployer: Synthetic media creators, Scammers impersonating Angel Leal, Scammers, Deepfake creators, Cybercriminals
- Alleged harmed parties: Victor Hernandez, Scam victims, Immigrants in the United States, Immigrants, Financial scam victims, Angel Leal
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Minor, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Negligible, indirect Negligible
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Minor, indirect Negligible
- Psychological: direct Minor, indirect Negligible
- Epistemic: direct Minor, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
Malicious content
Reported: Yes, the report describes the creation and spread of malicious impersonation content.
Directly caused: Scammers created and distributed close to or over 8,000 fake profile videos on social media platforms using Leal's cloned image.
Privacy
Reported: Yes, the report describes identity theft and the compromise of sensitive personal documents.
Directly caused: Leal's identity and image were cloned without his knowledge to create fake profiles. Hernandez's sensitive personal documents, including his Social Security card and residency card, were obtained by the scammers.
Inferred additional harm: It is highly likely that other victims of the 8,000 fake profiles also had their sensitive personal documents compromised by the scammers.
Psychological
Reported: Yes, the report explicitly describes psychological distress suffered by both the scam victim and the impersonated attorney.
Directly caused: Hernandez suffered severe anxiety and insomnia, stating he had not slept in days and was constantly glued to his phone. Leal experienced significant anger and disappointment, feeling the scam cheapened his life's work.
Inferred additional harm: Given that over 8,000 fake videos were deployed, it is highly likely that many other victims suffered similar severe distress and anxiety from being defrauded.
Epistemic
Reported: Yes, the report describes the fabrication of realistic video content to mislead users.
Directly caused: AI-generated videos fabricated the likeness of attorney Leal to falsely claim he was offering legal services without exams.
Inferred additional harm: The proliferation of 8,000 fake videos erodes public trust in legitimate online legal advertisements and social media profiles.
People affected
- Occurrences reported: 1
- People reportedly harmed: 2
- People reportedly exposed: 2
Potential causes
Management
- Inadequate Platform Oversight: Social media management failed to prevent AI scams on platforms.
Technology
- AI-Generated Deepfake Video: Scammers used AI to clone the attorney's image for deceptive ads.
- Sophisticated Identity Cloning: AI technology allowed easy replication of a real person's likeness.
Data Inputs
- Attorney's Public Image Data: Publicly available images of the attorney were harvested to train AI.
- Personal Identity Documents: Scammers acquired sensitive personal documents from the victim.
Human Factors
- Trust in Social Media Ads: Victim trusted the AI-generated ad featuring a real attorney.
- Vulnerability of Immigrants: Scammers targeted immigrants eager to obtain U.S. citizenship.
Process and Methods
- Inadequate Ad Verification: Social media platforms failed to verify the legitimacy of AI ads.
- Ineffective Video Takedown: Manual takedown of 8000+ videos was slow and barely hit the surface.
Regulatory Environment
- Lack of Platform Accountability: Social media lacks the strict regulations of traditional media.
Information quality
- Classification confidence: High
- Reason for confidence: The report provides clear, first-hand accounts from both the scam victim (Hernandez) and the identity theft victim (Leal). The role of AI in generating the fake videos is explicitly stated, and the financial and psychological impacts are well-documented.
- Ambiguities identified: The specific AI tools or platforms used by the scammers to clone Leal's image are not named.
Scammers used AI video-cloning technology to impersonate an immigration attorney and defraud a U.S. resident. While causing direct financial and psychological harm to individuals, the incident represents a localized criminal matter rather than a threat to national security.
- Overall national security impact: Minor
- Scope: Single nation
- Primary target: United States
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Long-term. Reflects an ongoing cybercrime trend rather than an imminent national security crisis.
- Autonomy: Human-controlled. The AI system was used as a tool by human scammers to generate fraudulent content.
- Novelty: Evolved capability. Represents a significant advancement of traditional impersonation scams using sophisticated AI video-cloning.
Impact by dimension
- Physical security: Negligible. No impact on physical systems, kinetic assets, or critical infrastructure.
- Information security: Negligible. The deepfakes were used for localized financial fraud rather than state-sponsored information warfare or intelligence compromise.
- Sovereignty: Negligible. No disruption to core government operations or sovereignty, though individual government-issued identification documents were stolen.
- Economic security: Negligible. Impact is limited to individual financial loss of 4,820 dollars and does not threaten strategic industries or national economic stability.
- Societal stability: Minor. Represents a minor threat to vulnerable populations through targeted AI-enabled fraud, manageable within standard law enforcement procedures.