Scammers Allegedly Use Deepfake of Hong Kong Entertainer Andy Lau to Steal NT$2.64 Million from Fan

Scammers allegedly defrauded a woman in New Taipei City of NT$2.64 million (US$81,116) by impersonating Hong Kong entertainer Andy Lau using purported deepfakes. The alleged scam convinced the victim, a long-time fan, through a video call that "Lau" needed funds for a visit to Taiwan. The victim reportedly wired the money, but her family suspected a scam and involved the police. An alleged scammer was arrested after attempting to collect a staged cash payment.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The scammers used AI face-changing and voice-cloning technology to impersonate a celebrity and target a specific victim for financial fraud.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by human scammers who intentionally deployed and used AI face-changing and voice-cloning tools to defraud a victim.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The AI systems used are deepfakes (AI-generated content), which under the EU AI Act pose a moderate risk and are subject to transparency obligations to inform users they are interacting with AI-generated content.

AI system and alleged parties

• AI system: AI face-changing technology
• AI purpose: Deepfake Video Generation; Voice Generation
• Behaviour type: Tool
• Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
• Alleged deployer: Unknown scammers, Unknown scammer impersonating Andy Lau
• Alleged harmed parties: Truth, Lin (林), Epistemic integrity

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Minor, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: The report explicitly describes a financial loss of NT$2.64 million (approximately US$81,116) for the victim.

Directly caused: The victim was defrauded of NT$2.64 million directly through the AI-enabled impersonation scam, representing an average loss of NT$2.64 million for this single occurrence.

People affected

• Occurrences reported: 1
• People reportedly harmed: 2
• People reportedly exposed: 2

Potential causes

Management

• Inadequate Platform Moderation: Social media platforms failed to detect and remove fake fan pages.

Technology

• AI Face-Changing Technology: Deepfake technology allowed scammers to realistically mimic the star's face.
• AI Voice Generation: AI was used to clone the entertainer's voice, increasing credibility.
• Real-Time Video Manipulation: Enabled live video interaction, convincing the victim the call was genuine.

Data Inputs

• Celebrity Media Data: Abundant public images and videos of the star were used to train AI models.

Human Factors

• Starstruck Vulnerability: The victim's deep admiration for the celebrity clouded her judgment.
• Misplaced Trust in Video: Victim naively believed video calls were foolproof proof of identity.
• Deception of Money Mule: Another fan was manipulated into acting as a courier under false pretenses.

Process and Methods

• Social Media Impersonation: Scammers initiated contact through fake celebrity fan groups on Facebook.
• Urgent Financial Requests: Fabricated stories of travel expenses pressured the victim to wire money.

Regulatory Environment

• Lack of Deepfake Regulation: Absence of strict laws governing the creation and use of AI-cloning apps.

Information quality

• Classification confidence: High
• Reason for confidence: The reports from TVBS and Taipei Times provide consistent, clear details about the scam, the specific amount stolen (NT$2.64 million), the technology used (AI face-changing and voice-cloning), the arrest date, and the individuals involved. There is very little ambiguity regarding the events.

A localized financial fraud incident in Taiwan where scammers used real-time AI face-changing and voice-cloning to impersonate a celebrity and defraud an individual of NT$2.64 million. While demonstrating the evolving accessibility of deepfake tools for criminal activity, the incident is a standard law enforcement matter with negligible national security implications.

• Overall national security impact: Negligible
• Scope: Single nation
• Primary target: Taiwan
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. The specific incident is resolved, representing an ongoing strategic concern regarding consumer-focused deepfake fraud.
• Autonomy: Human-controlled. The AI tools were directly operated by human scammers to generate synthetic media during video calls.
• Novelty: Evolved capability. Represents an evolution of traditional financial scams leveraging increasingly accessible real-time video and voice synthesis technology.

Impact by dimension

• Physical security: Negligible. No physical systems, infrastructure, or human safety capabilities were threatened or impacted by this financial scam.
• Information security: Negligible. While AI deepfakes were used, this was a localized financial fraud targeting an individual rather than a systematic information warfare campaign or intelligence compromise.
• Sovereignty: Negligible. The incident was a civil criminal matter with no impact on state authority, electoral processes, or government operations.
• Economic security: Negligible. The financial loss of approximately US$81,116 was limited to a single private individual and does not threaten strategic industries or national economic stability.
• Societal stability: Negligible. The incident was an isolated criminal fraud targeting a single individual and did not threaten social cohesion, civil liberties, or broader societal stability.