Bolivian Criminal Network Allegedly Used Deepfake of Education Minister to Defraud at Least 19 Victims in Employment Scam

A criminal organization in Bolivia operated a large-scale fraud scheme from within a prison, using AI voice cloning technology to impersonate the Minister of Education. By calling victims with the cloned voice, the scammers convinced at least 19 individuals to pay for fake job opportunities. The operation resulted in the theft of approximately 5 million Bolivianos, leading to the arrest of multiple suspects and an investigation into money laundering and security failures in the prison system.

A Bolivian criminal network allegedly used AI-generated deepfake audio of Education Minister Omar Véliz Ramos to impersonate him in phone calls, defrauding at least 19 victims in a fake job scheme. Scammers reportedly lured applicants via social media, used cloned voices for credibility, and demanded payment via QR codes. Authorities uncovered the scheme, seizing devices and arresting multiple suspects, including one orchestrating the fraud from prison. Losses reportedly exceed $720,000 USD.

Source: AI Incident Database

Risk classification

  • Primary risk domain: 4 Malicious actors
  • Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves a criminal group using AI voice cloning to impersonate a public official to execute a targeted financial scam against job seekers.

Causal factors

  • Entity: Human
  • Intent: Intentional
  • Timing: Post-deployment

The harm was directly caused by the intentional actions of a criminal group using a deployed AI voice cloning tool to defraud victims.

EU AI Act risk tier

  • Risk tier: 3 Limited Risk

Limited Risk: The system involves AI-generated content (deepfakes/voice clones), which falls under transparency obligations to ensure users are aware they are interacting with synthetic media.

AI system and alleged parties

  • AI system: unspecified
  • AI purpose: Voice Generation; Text Style Replication
  • Behaviour type: Tool
  • Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
  • Alleged deployer: Vilma C.C., Unknown scammers, Scammers impersonating Omar Véliz Ramos, Mariana A.S., Luis G.C., Jackelin A.M., Alfredo Ch. S.
  • Alleged harmed parties: Unnamed Servicio Departamental de Salud (SEDES) Potosí official, Omar Véliz Ramos, Ministry of Education of Bolivia, General public of Bolivia, At least 19 Bolivian citizens seeking employment

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

  • Physical: direct Negligible, indirect Negligible
  • Infrastructure: direct Negligible, indirect Negligible
  • Property: direct Negligible, indirect Negligible
  • Financial: direct Minor, indirect Negligible
  • Environmental: direct Negligible, indirect Negligible
  • Malicious content: direct Negligible, indirect Negligible
  • Differential treatment: direct Negligible, indirect Negligible
  • Civil rights: direct Negligible, indirect Negligible
  • Democracy: direct Negligible, indirect Negligible
  • Privacy: direct Negligible, indirect Negligible
  • Psychological: direct Negligible, indirect Negligible
  • Epistemic: direct Negligible, indirect Negligible
  • Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: The report explicitly describes financial losses totaling approximately 5 million Bolivianos across the scam campaign.

Directly caused: The criminal group directly stole approximately 5 million Bolivianos from victims, with individual victims asked to pay an initial fee of 3,500 Bolivianos.

People affected

  • Occurrences reported: 1
  • People reportedly harmed: 19
  • People reportedly exposed: 19

Potential causes

Management

  • Inadequate Prison Surveillance: Management failed to enforce security checks on inmates in San Roque prison.
  • Lack of Multi-Agency Coordination: Slow initial tracking of financial flows across different cities.

Technology

  • AI Voice Cloning Technology: Allowed criminals to clone the minister's voice to run realistic phone scams.
  • Smuggled Mobile Phones: Inmates bypassed security to access phones capable of running AI applications.
  • Vulnerable Mobile Banking: Quick QR code payments facilitated rapid, anonymous transfers from victims.

Data Inputs

  • Minister Voice Audio: Public audio of the minister was used as training input for the AI clone.
  • Fake Social Media Ads: Fraudulent job postings on TikTok and Facebook collected victim contact data.

Human Factors

  • Victim Trust in Voice Calls: Victims believed the voice call was real proof of official job offers.
  • Exploitation of Homeless: Vulnerable people were paid small fees to open bank accounts for laundering.
  • Social Engineering Deception: Scammers successfully impersonated HR directors to build initial trust.

Process and Methods

  • Weak Prison Security Protocols: Failed to prevent inmates from smuggling and using phones inside cells.
  • Inadequate Bank Verification: Banks allowed accounts to be opened by proxies without rigorous checks.

Regulatory Environment

  • Lack of AI Misuse Laws: Absence of strict regulations governing the creation of deepfakes and clones.
  • Weak Ad Platform Moderation: Social media platforms failed to detect and block fraudulent job ads.

Information quality

  • Classification confidence: High
  • Reason for confidence: The reports from multiple local news sources consistently detail the mechanics of the scam, the involvement of AI voice cloning, the number of victims (19), the total financial loss (5 million Bolivianos), and the police action.
  • Ambiguities identified: The specific AI tool or platform used to clone the voice is not named.

A Bolivian criminal network operating from prison used AI voice cloning to impersonate the Minister of Education, stealing 5 million Bolivianos from job seekers. While representing an evolved cybercrime capability, the national security impact is minor and manageable through standard law enforcement and prison security reforms.

  • Overall national security impact: Minor
  • Scope: Single nation
  • Primary target: Bolivia
  • Alleged perpetrator: Criminal organization operating from San Roque prison

Threat characteristics

  • Imminence: Long-term. The specific criminal operation has been dismantled by police, representing a long-term strategic concern regarding AI-enabled fraud rather than an active crisis.
  • Autonomy: Human-controlled. The AI voice cloning system was used purely as a tool by human operators to generate specific audio files for calls.
  • Novelty: Evolved capability. AI voice cloning for financial scams is an established threat, but conducting the operation from within a prison represents an evolved capability and security challenge.

Impact by dimension

  • Physical security: Negligible. No physical threat, kinetic targeting, or critical infrastructure compromise was reported in this incident.
  • Information security: Negligible. While a deepfake voice was used, it was for localized financial fraud rather than systematic information warfare or intelligence compromise.
  • Sovereignty: Minor. Impersonation of the Minister of Education (Omar Veliz Ramos) impacts government credibility, but was resolved through standard law enforcement and prison transfer procedures.
  • Economic security: Minor. The theft of 5 million Bolivianos represents a significant criminal fraud, but does not threaten national financial stability or strategic industries.
  • Societal stability: Negligible. The scam targeted a small group of 19 identified victims, presenting no broad threat to societal stability or human rights.
Explore in the interactive Incident Tracker