Purported Deepfake WhatsApp Scam Impersonating Tamil Nadu Chief Minister and Actor C. Joseph Vijay Reportedly Defrauded Bengaluru Security Guard of ₹104,000 (~$1,085.40)

Ratikanta Giri, a 29-year-old security guard in Bengaluru, India, reportedly lost ₹104,000 (~$1,085.40) after a WhatsApp video caller used a purportedly AI-generated deepfake to impersonate C. Joseph Vijay, the actor and chief minister of the southern Indian state of Tamil Nadu. The caller promised financial aid, while accomplices allegedly demanded fees and later impersonated India's Central Bureau of Investigation.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves fraudsters using a deepfake video of a public figure to target and manipulate a specific victim into transferring money, which fits the boundary rule B1 for public likeness used to deceive for financial gain.

Additional risk subdomains

• 1.2 Exposure to toxic content: The victim was exposed to synthetic media designed to deceive and manipulate, which constitutes harmful and unsafe content.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by human fraudsters intentionally using a deepfake video generation tool to deceive and scam a victim.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The system involves AI-generated content such as deepfakes, which under the EU AI Act are subject to specific transparency obligations to inform users that the content is artificially generated.

AI system and alleged parties

• AI system: None named
• AI purpose: Deepfake Video Generation; Voice Generation
• Behaviour type: Tool
• Alleged developer: Synthetic video generation technology developers, Synthetic media generation technology developers, Deepfake technology developers
• Alleged deployer: Synthetic media creators, Scammers in India, Scammers, Impersonation scammers, Deepfake creators, Cybercriminals in India, Cybercriminals
• Alleged harmed parties: Victims of impersonation scams, Victims of deepfake-enabled fraud, Ratikanta Giri, Public figures, Politicians in India, Politicians, Impersonated public figures, Financial scam victims, Epistemic integrity, C. Joseph Vijay

Harm severity

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

People affected

• Occurrences reported: 1
• People reportedly harmed: 1
• People reportedly exposed: 1

Potential causes

Technology

• AI Deepfake Video Generation: Fraudsters used realistic AI deepfake video of a famous politician to deceive.
• Voice Cloning Technology: AI-generated voice matched the politician's persona to build credibility.

Data Inputs

• Political Media Availability: Abundant public video and audio of CM Vijay enabled training the AI model.

Human Factors

• Victim Credulity: Victim believed the high-profile figure was personally calling him.
• Sunk Cost Fallacy: Victim made additional payments fearing he would lose earlier payments.
• Fear of Authority: Victim complied due to fear of a fake CBI officer demanding a fine.

Process and Methods

• Unverified Video Calls: WhatsApp video calls lacked verification of caller authenticity.
• Instant Digital Payments: Digital payment apps allowed rapid, irreversible transfer of victim's funds.
• Social Engineering Script: Fraudsters used a structured process involving a 'manager' and 'CBI officer'.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides a clear, detailed, and consistent account of the scam, including specific dates, monetary amounts, and the exact method of deception using a deepfake video call.

A localized cybercrime incident in India where fraudsters used a deepfake of Tamil Nadu Chief Minister Vijay to scam a security guard of Rs 1.04 lakh. While it highlights the threat of synthetic media in social engineering, it remains a domestic criminal matter with negligible national security implications.

• Overall national security impact: Minor
• Response level: Moderate
• Scope: Single nation
• Primary target: India
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. This was a localized, completed criminal act. It does not present an immediate national security crisis requiring urgent federal intervention.
• Autonomy: Human-controlled. The deepfake technology was used strictly as a tool by human fraudsters who actively guided the interaction and demanded payments.
• Novelty: Established threat. Deepfake-enabled financial scams and impersonation of public figures are established criminal tactics seen globally.

Impact by dimension

• Physical security: Negligible. This incident was a financial scam targeting a single individual's personal savings. It did not involve kinetic attacks, weapons, or disruptions to critical infrastructure.
• Information security: Minor. The incident involved a deepfake of a public political figure (Tamil Nadu Chief Minister Vijay) to execute a targeted scam, but it was not a coordinated information warfare campaign or state-sponsored intelligence threat.
• Sovereignty: Minor. While a high-ranking politician's likeness was impersonated, the scam was aimed at criminal financial extraction rather than disrupting electoral processes or compromising state sovereignty.
• Economic security: Negligible. The financial loss of approximately Rs 1.04 lakh (under $1,300 USD) represents a localized consumer fraud incident with no systemic economic or technological security implications.
• Societal stability: Minor. The incident demonstrates the growing accessibility of deepfake tools to target vulnerable citizens, but it did not cause wide-scale societal instability or systemic human rights violations.