Man in Touba, Senegal, Allegedly Used AI Voice Alteration to Impersonate a Woman and Collect Intimate Images

Police in Touba, Senegal, alleged that a man used his former sister-in-law's WhatsApp photos and videos in false profiles and altered his voice with AI during calls. Posing as a woman, he reportedly drew people into explicit video calls, collected intimate images and solicited money or phone credit. He allegedly misused victims' likenesses and caused reputational harm. Police reportedly arrested him, and he allegedly admitted the conduct.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The suspect used AI voice-changing tools to impersonate a specific individual and deceive victims for financial gain and targeted manipulation.

Additional risk subdomains

• 1.2 Exposure to toxic content: The suspect used the victim's likeness for virtual prostitution and exposed other victims to sexually explicit content during calls.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The harm was caused by a human actor who intentionally deployed and used AI voice-changing tools to commit fraud and identity theft.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The system is an AI-generated content tool (voice changer/deepfake creator) which poses moderate risk and falls under transparency obligations to ensure users know they are interacting with synthetic media.

AI system and alleged parties

• AI system: None named
• AI purpose: Voice Generation
• Behaviour type: Tool
• Alleged developer: Synthetic media generation technology developers, Synthetic audio generation technology developers, Deepfake technology developers, AI voice conversion technology developers
• Alleged deployer: Synthetic media creators, Scammers in Senegal, Scammers, Online impersonators, Extortionists, Deepfake creators, Cybercriminals
• Alleged harmed parties: Women and girls, Women, Victims of impersonation scams, Victims of deepfake abuse, Privacy, Men and boys, Men, Identity theft victims, Epistemic integrity

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Minor, indirect Negligible
• Psychological: direct Negligible, indirect Minor
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Malicious content

Reported: The report explicitly describes the creation and distribution of sexually explicit content and fake profiles used for virtual prostitution.

Directly caused: The suspect created fake profiles and distributed sexually explicit content during calls using AI voice-changing tools.

Inferred additional harm: It is likely that numerous explicit messages and recordings were generated and shared with various targets during the scam campaign.

Privacy

Reported: The report explicitly describes privacy violations through the unauthorized collection and use of the victim's WhatsApp media.

Directly caused: The suspect downloaded and misappropriated the victim's personal photos and videos from her WhatsApp status without consent.

Psychological

Reported: The report explicitly describes severe reputational damage and distress to the primary victim whose image was used for virtual prostitution.

Indirectly caused: The primary victim suffered severe reputational damage and distress due to her image being used for virtual prostitution, and other victims experienced distress upon discovering they were scammed.

Inferred additional harm: It is highly likely that the primary victim and scammed individuals suffered significant ongoing psychological distress, humiliation, and anxiety due to the targeted harassment and financial exploitation.

People affected

• Occurrences reported: 1
• People reportedly harmed: 6
• People reportedly exposed: 6

Potential causes

Technology

• Real-time AI voice modification: AI tools allowed real-time voice alteration to impersonate a woman.
• Accessible deepfake software: Easy access to advanced voice-changing software facilitated the fraud.
• Lack of biometric detection: Communication platforms lacked real-time synthetic voice detection.

Data Inputs

• Publicly accessible media: WhatsApp status photos and videos were easily harvested by the suspect.
• Unrestricted image downloading: Platform allowed downloading of personal media without owner consent.

Human Factors

• Gullibility of targets: Victims trusted the synthetic voice and fake profiles without verification.
• Malicious intent of perpetrator: Suspect actively sought to blackmail and extort money using AI.
• Oversharing on social media: Victim shared personal media on WhatsApp status, enabling harvesting.

Process and Methods

• Inadequate identity verification: Social platforms failed to verify the identity of the profile creator.
• Weak reporting mechanisms: Platforms lacked rapid response systems to flag active impersonation.

Regulatory Environment

• Lack of AI voice regulation: Absence of laws governing the creation and use of real-time voice changers.
• Weak cybercrime enforcement: Delayed detection of digital extortion rings due to regulatory gaps.

Information quality

• Classification confidence: High
• Reason for confidence: The police report provides clear, factual details about the suspect's methods, the specific AI capability used (real-time voice modification), the platform involved (WhatsApp), and the nature of the fraud and identity theft.
• Ambiguities identified: The exact name of the AI voice-changing software is not specified.
• Alternative interpretations: None, the facts of the criminal impersonation and fraud are clear and confessed to by the suspect.

A localized criminal incident in Senegal where an individual used AI voice-changing software for identity theft and financial extortion. The case represents a standard cybercrime handled by local law enforcement, carrying negligible national security implications.

• Overall national security impact: Negligible
• Scope: Single nation
• Primary target: Senegal
• Alleged perpetrator: Individual

Threat characteristics

• Imminence: Long-term. The suspect has been arrested by local police, neutralizing any immediate threat from this specific operation.
• Autonomy: Human-controlled. The AI voice-changing tool was directly operated by the suspect to facilitate real-time deception, requiring constant human control.
• Novelty: Established threat. AI-enabled voice cloning and impersonation for financial scams are well-documented tactics with existing law enforcement precedents.

Impact by dimension

• Physical security: Negligible. The incident was a localized cybercrime involving financial fraud and impersonation, posing no threat to physical systems or critical infrastructure.
• Information security: Negligible. No classified information was compromised, and the activity did not constitute a state-sponsored or large-scale information warfare campaign.
• Sovereignty: Negligible. The incident involved a common criminal scam and did not affect state authority, electoral systems, or core government operations.
• Economic security: Negligible. While individual victims suffered financial losses, there was no impact on strategic industries, financial systems, or national economic security.
• Societal stability: Negligible. Although the primary victim suffered privacy violations and distress, the impact was localized to a few individuals and did not threaten broader societal stability.