Deepfake Videos Allegedly Used to Defraud Canadian Immigrants Out of Thousands of Dollars

Deepfake videos allegedly impersonated Toronto immigration lawyer Max Chaudhary, targeting Canadian immigrants via WhatsApp. The videos, appearing personal and realistic, requested thousands of dollars for legal services never rendered. Exploiting confusion caused by changing immigration rules, the scam reportedly aimed to defraud vulnerable individuals during a time of desperation and uncertainty.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves the use of AI-generated deepfakes to impersonate a trusted professional in order to conduct a targeted financial scam.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The risk and subsequent scam were caused by the intentional actions of human malicious actors deploying deepfake technology to defraud individuals.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Risk Level 3: Limited Risk. The system involves 'AI-generated content such as deepfakes', which under the EU AI Act poses a moderate risk and requires specific transparency obligations to ensure users are informed.

AI system and alleged parties

• AI system: None named
• AI purpose: Deepfake Video Generation; Voice Generation
• Behaviour type: Tool
• Alleged developer: Unknown deepfake technology developers
• Alleged deployer: Unknown scammers
• Alleged harmed parties: Max Chaudhary, Immigrants in Toronto, Immigrants in Canada

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Negligible. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

People affected

• Occurrences reported: 1
• People reportedly harmed: 1
• People reportedly exposed: 2

Potential causes

Technology

• Deepfake Video Generation: AI technology was used to synthesize realistic videos of the lawyer.

Human Factors

• Desperation of Newcomers: Confusion over shifting immigration targets made targets more vulnerable.
• Overreliance on Video Evidence: Victims assumed video messages in chats represented authentic communication.

Process and Methods

• Premature Financial Transactions: Newcomers sending money before receiving actual proof of legal services.

Regulatory Environment

• Frequent Immigration Rule Changes: Rapid federal policy shifts created widespread confusion and uncertainty.

Information quality

• Classification confidence: High
• Reason for confidence: The report clearly details the nature of the scam, the technology used (deepfakes), the target audience, and the specific lawyer affected. While the exact number of successful scams is not confirmed, the mechanics of the AI risk are unambiguous.
• Ambiguities identified: The total number of victims who actually lost money is not confirmed, only the attempt of $7,000 against one individual who realized it was a scam.

Malicious actors utilized personalized AI-generated deepfake videos to impersonate a Canadian immigration lawyer in a WhatsApp financial scam targeting newcomers. The incident represents a minor national security concern, reflecting an evolved criminal capability to exploit vulnerable populations using synthetic media, but remains within the scope of standard law enforcement.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: Canada
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. This represents an ongoing, evolving criminal capability and strategic concern rather than an active national security crisis requiring immediate response.
• Autonomy: Human-controlled. The AI system was used as a tool by human operators to generate specific media assets, with no autonomous decision-making or execution.
• Novelty: Evolved capability. While deepfake impersonation is an established threat, the use of highly personalized, targeted videos addressing victims by name represents an evolved capability.

Impact by dimension

• Physical security: Negligible. No threat to physical systems, critical infrastructure, or human safety was reported in connection with this financial scam.
• Information security: Negligible. While deepfakes were used, this was a localized financial scam targeting individuals rather than a state-sponsored information warfare campaign or intelligence compromise.
• Sovereignty: Negligible. The incident leveraged changes in immigration policy for context but did not compromise government decision-making, elections, or state sovereignty.
• Economic security: Negligible. The scam targeted individual financial assets (attempted $7,000 payments) and does not pose a threat to strategic industries, financial systems, or technological security.
• Societal stability: Minor. Minor impact targeting a vulnerable community (newcomers to Canada) through identity fraud and emotional manipulation, manageable within standard law enforcement procedures.