Broadway Performer and SiriusXM Host Seth Rudetsky Reportedly Lost Facebook Page Access in Purportedly AI-Assisted Scam Impersonating Comedian Nikki Glaser

Scammers are using highly personalized, AI-generated invitation emails to impersonate famous podcasters and defraud entertainment industry figures of money and social media account credentials.

Broadway performer and SiriusXM host Seth Rudetsky reportedly received a personalized invitation purportedly from comedian Nikki Glaser's podcast. After scammers guided him through Facebook permissions during a supposed technical setup, he lost access to his page; he said a former marketing company was also compromised. Reporting described the invitation as most likely AI-composed.

Source: AI Incident Database

Risk classification

  • Primary risk domain: 4 Malicious actors
  • Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves malicious actors using AI-generated text to impersonate famous podcasters in highly targeted phishing scams to defraud victims of money and hijack social media accounts.

Causal factors

  • Entity: Human
  • Intent: Intentional
  • Timing: Post-deployment

The incident was caused by human malicious actors intentionally using post-deployment AI text generation tools to draft highly persuasive phishing emails.

EU AI Act risk tier

  • Risk tier: 3 Limited Risk

Risk Level 3: Limited Risk. The system is described as generating AI-generated text content that impersonates real individuals ('imitate Terry Gross' voice itself', 'AI themselves into all of the work'), which falls under the category of AI-generated content requiring transparency.

AI system and alleged parties

  • AI system: unspecified
  • AI purpose: Writing Assistant; Text Style Replication
  • Behaviour type: Assistant
  • Alleged developer: Large language model developers
  • Alleged deployer: Scammers, Cybercriminals
  • Alleged harmed parties: Targets of fraudulent professional opportunities, Social media users, Seth Rudetsky, public figures, Nikki Glaser, Facebook users, Epistemic integrity, Companies

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Negligible. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

  • Physical: direct Negligible, indirect Negligible
  • Infrastructure: direct Negligible, indirect Negligible
  • Property: direct Negligible, indirect Negligible
  • Financial: direct Negligible, indirect Negligible
  • Environmental: direct Negligible, indirect Negligible
  • Malicious content: direct Negligible, indirect Negligible
  • Differential treatment: direct Negligible, indirect Negligible
  • Civil rights: direct Negligible, indirect Negligible
  • Democracy: direct Negligible, indirect Negligible
  • Privacy: direct Negligible, indirect Negligible
  • Psychological: direct Negligible, indirect Negligible
  • Epistemic: direct Negligible, indirect Negligible
  • Child sexual exploitation and abuse: direct Negligible, indirect Negligible

People affected

  • Occurrences reported: 3
  • People reportedly harmed: 2
  • People reportedly exposed: 3

Potential causes

Management

  • Weak Credential Governance: Marketing firm retained legacy Facebook admin rights, exposing the page.

Technology

  • AI-Generated Persuasive Text: AI generated highly articulate emails mimicking 'Terry Gross' voice.
  • Lack of Email Authentication: No robust email verification allowed scammers to spoof booking requests.

Data Inputs

  • Harvested Career Details: AI used specific public data like Broadway cruises to build false trust.

Human Factors

  • Cognitive Bias of Flattery: Victims believed the scam due to highly personalized and flattering invites.
  • Unfamiliarity with AI Risks: Victims did not consider AI capabilities to automate deep research.
  • Benefit of the Doubt: Victims naturally trusted the scammers, overlooking initial red flags.

Process and Methods

  • Flawed Booking Verification: Lack of standard protocol to verify podcast invitations independently.
  • Insecure Permission Delegation: Sharing Facebook admin controls during a Zoom call without verification.

Regulatory Environment

  • Lack of Deepfake Regulations: Absence of strict laws governing AI-powered text and voice impersonation.

Information quality

  • Classification confidence: High
  • Reason for confidence: The report provides detailed first-hand accounts from two prominent victims of the scam, outlining the exact methods used by the fraudsters. While the use of AI is described as 'most likely' rather than definitively proven by technical forensics, the highly personalized and articulate nature of the text strongly aligns with modern LLM capabilities, and the victims themselves attribute the feasibility of the scam to AI.
  • Ambiguities identified: The exact AI model used is not specified, and the technical confirmation of AI use relies on victim and reporter inference rather than forensic analysis.
  • Alternative interpretations: The emails could have been written entirely by highly dedicated human scammers without AI assistance, though the scale and specificity make AI highly probable.

A localized phishing campaign utilized AI-generated text to impersonate famous podcasters and defraud entertainment industry figures in the United States. While demonstrating the evolving capability of AI-assisted social engineering, the incident remains a standard cybercrime matter with negligible implications for national security.

  • Overall national security impact: Negligible
  • Scope: Single nation
  • Primary target: United States
  • Alleged perpetrator: Unknown

Threat characteristics

  • Imminence: Long-term. Represents an ongoing, low-level cybercrime capability rather than an active national security crisis requiring urgent government intervention.
  • Autonomy: Human-controlled. AI was used as a writing assistant by human operators who drafted and sent the phishing emails manually.
  • Novelty: Evolved capability. Represents an evolution of traditional phishing techniques through the integration of highly personalized large language model text generation.

Impact by dimension

  • Physical security: Negligible. No physical infrastructure, systems, or human safety were threatened by this incident.
  • Information security: Negligible. The phishing campaign targeted entertainment industry figures for financial fraud, with no impact on national intelligence, classified systems, or state-level information operations.
  • Sovereignty: Negligible. No government functions, electoral systems, or sovereign state operations were affected or targeted.
  • Economic security: Negligible. Financial impacts were limited to individual victims losing minor sums and personal/business social media credentials, presenting no threat to national economic stability or strategic industries.
  • Societal stability: Negligible. The scam targeted specific individuals for opportunistic fraud and does not represent a threat to broader societal stability, civil liberties, or human rights.
Explore in the interactive Incident Tracker