Purportedly AI-Assisted Impersonation of Martin Henderson in Romance Scam Leads to Reported NZ$375,000 Fraud

An alleged online romance scam exploiting AI-assisted impersonation defrauded a woman, "Lea," of NZ$375,000 over two years. The scammer allegedly used AI-generated voice messages and deceptive text communication to pose as New Zealand actor Martin Henderson and is reported to have built up a relationship beginning in early 2023. The victim, believing the scam was real, reportedly relocated to New Zealand in December 2024, only discovering the fraud in February 2025.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves a targeted romance scam where a perpetrator used AI-cloned voice messages to impersonate a celebrity and defraud a specific victim of $375,000.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The scam was orchestrated by a human actor who intentionally used AI voice cloning technology post-deployment to defraud the victim.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Risk Level 3: Limited Risk. The system involves AI-generated content such as deepfakes (AI-doctored voice messages), which pose a moderate risk and require transparency obligations so users are aware they are interacting with AI-generated content.

AI system and alleged parties

• AI system: unspecified
• AI purpose: Voice Generation; Text Style Replication
• Behaviour type: Tool
• Alleged developer: Unknown voice cloning technology developers, Unknown large language model developers, Unknown deepfake technology developers
• Alleged deployer: Unknown scammers, Unknown scammer impersonating Martin Henderson
• Alleged harmed parties: Martin Henderson, Lea (pseudonym)

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Minor, indirect Minor
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Minor, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: The report explicitly describes a financial loss of over $375,000 for the primary occurrence.

Directly caused: The victim lost $375,000 through bank loans, credit cards, bitcoin, and gift cards sent to the scammer.

Indirectly caused: The victim incurred indirect costs such as shipping fees of $56,000 for a nonexistent box and had her 18-year bank account closed due to money laundering flags.

Inferred additional harm: Other fans and victims of similar celebrity impersonation scams using AI voice clones likely suffer similar large-scale financial losses.

Psychological

Reported: The report explicitly describes psychological harm, noting the victim felt 'very foolish,' 'distraught,' and 'severely manipulated during some very traumatic events in my life.'

Directly caused: The victim suffered severe emotional distress, trauma, and manipulation from the two-year fake relationship facilitated by AI voice messages.

Inferred additional harm: It is likely the victim and other similar targets suffer long-term trust issues, anxiety, and depression, as noted in the comparison case where a victim was hospitalized with depression.

People affected

• Occurrences reported: 1
• People reportedly harmed: 1
• People reportedly exposed: 1

Potential causes

Technology

• AI Voice Cloning Technology: Scammer used AI-doctored voice messages to mimic the actor's voice.
• Unregulated Communication Platforms: WeChat and Telegram enabled unverified accounts to contact users.
• Lack of Deepfake Detection Tools: No automated tools on messaging apps flagged the AI-generated voice.

Data Inputs

• Celebrity Public Media Data: Public voice recordings of the actor were used to train the AI model.
• Victim's Personal Information: Victim shared details of family trauma, allowing targeted manipulation.

Human Factors

• Victim Vulnerability: Victim faced divorce and parents' illnesses, increasing vulnerability.
• Overreliance on Voice Verification: Victim trusted the AI voice messages as proof of identity.
• Cognitive Dissonance and Denial: Victim ignored official warnings, believing the scammer's excuses.

Process and Methods

• Inadequate Verification Processes: Fan pages and messaging apps lacked robust identity verification.
• Delayed Financial Fraud Detection: Banks took two years to detect and flag suspicious transactions.
• Ineffective Platform Moderation: Social media platforms failed to proactively remove fake accounts.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide consistent and detailed accounts of the scam, the amount of money lost, the specific tactics used (including AI voice cloning), and the emotional impact on the victim. Multiple sources corroborate the key facts of the incident.
• Ambiguities identified: The specific AI tool or platform used to generate the cloned voice is not identified.

An individual was defrauded of over $375,000 in a romance scam utilizing AI-cloned voice messages. While representing a tragic personal and financial loss, the incident is a localized criminal matter with negligible direct implications for national security.

• Overall national security impact: Negligible
• Scope: Multiple nations
• Primary target: No clear primary
• Other affected: United States, New Zealand, France
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. The incident represents an ongoing strategic concern regarding the proliferation of consumer-accessible voice cloning technologies.
• Autonomy: Human-controlled. The AI system acted as a tool to generate audio, with the human scammer retaining full control over the execution and direction of the fraud.
• Novelty: Evolved capability. The incident represents a significant advancement of traditional romance scams through the integration of highly convincing AI voice cloning technology.

Impact by dimension

• Physical security: Negligible. The incident is a financial romance scam targeting an individual with no impact on physical infrastructure, kinetic systems, or human safety.
• Information security: Negligible. While AI voice cloning was used to deceive the victim, this was a localized financial crime rather than a state-sponsored disinformation campaign or intelligence compromise.
• Sovereignty: Negligible. No threat to state authority, government operations, or constitutional processes was observed in this incident.
• Economic security: Negligible. The financial loss of $375,000, while severe for the individual, does not impact national financial systems, strategic industries, or technological security.
• Societal stability: Negligible. This was a targeted individual fraud case and does not represent a large-scale threat to societal stability, civil liberties, or population safety.