Loading story…
Criminals are using AI-generated deepfakes to impersonate real OnlyFans creators and defraud their followers, according to reports from Malwarebytes and Security Affairs. The scam commonly begins with fake videos or outreach on TikTok, then moves to direct conversations on Snapchat where the impersonator builds trust before requesting money through Cash App or similar payment channels. Victims who send funds are then blocked, while the real creators lose revenue and face backlash from followers who believed they were interacting with authentic accounts.
Reported cases cited by Security Affairs include creators such as Jessieanna Campbell and Elaina St. James, whose likenesses were used in fraudulent schemes. Researchers said the fake content can sometimes be identified by artifacts such as distorted teeth, unnatural facial movement, or frozen eyebrows, but the impersonations are convincing enough to deceive fans. The reports add that legal measures including the Take It Down Act and the EU AI Act have not stopped the abuse, in part because enforcement remains difficult across borders, and they urge users to verify payment requests through creators’ official verified accounts.
Get the infrastructure and lures behind it.
2 events from the most recent confirmed update back to the earliest known activity.
Researchers at the University of Bristol conducted three experiments in 2026 and found that most participants still relied on deepfake content even after being told it was fake.
Criminals launched a scam using AI-generated videos and cloned voices to impersonate real OnlyFans creators, typically drawing victims in on TikTok, moving them to Snapchat, and requesting payment via Cash App before blocking them. The scheme harmed both fans who lost money and creators who lost revenue and faced harassment.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A surge in **romance scams** is leveraging **AI-enabled impersonation** to make fraud harder to detect, combining manufactured intimacy with financial theft. Australian police warned more than 5,000 people they may have been targeted in a large-scale operation linked to overseas syndicates, where scammers used mainstream dating apps to initiate relationships and then steered victims into purchasing **fake cryptocurrency**. The playbook described includes rapidly escalating emotional commitment, isolating targets, and pushing conversations off-platform to apps like *WhatsApp* or *Telegram*, reducing victims’ access to in-app safety controls and reporting mechanisms. The fraud techniques increasingly rely on **deepfakes** and automated “AI personas,” undermining traditional verification methods such as requesting custom photos or relying on video calls as proof of identity. Reported tactics include real-time face-swapping and AI voice synthesis during video calls, long-running bot-driven conversations that build trust over months, and “celebrity” impersonation to intensify emotional leverage and extract larger payments. Despite the technology shift, the core mechanism remains psychological manipulation—using scripted narratives and social engineering to move victims from online rapport to off-platform communication and ultimately to financial transfers.
Jun 29, 2026
Criminals are leveraging AI tools to manipulate publicly available images and videos from social media, creating convincing fake 'proof of life' media for use in virtual kidnapping and extortion scams. The FBI has warned that these scams involve contacting victims with claims of having kidnapped a loved one, often accompanied by doctored images or videos to increase credibility and pressure for ransom payment. The ease of accessing personal media online and the sophistication of AI-driven image and video manipulation have made these scams more convincing and difficult to detect, with the FBI noting a rise in such emergency scams and significant financial losses for victims. The proliferation of AI-generated media has also led to broader concerns about the spread of deepfakes and nonconsensual explicit imagery. Security researchers have uncovered exposed databases from AI image generator startups containing millions of manipulated images, including nonconsensual 'nudified' photos of real people and even children. These developments highlight the growing risks posed by AI-powered media manipulation, both for targeted extortion schemes and for the privacy and safety of individuals whose images are scraped and abused online.
Jun 29, 2026
Security researchers have identified a surge in malicious applications and scams leveraging the branding of popular AI platforms such as ChatGPT, DALL·E, and WhatsApp to deceive users, particularly in the United States. Investigations revealed that some of these apps, available on third-party app stores, masquerade as legitimate AI tools but are in fact either adware or full-fledged spyware. For example, a fake DALL·E 3 app was found to display only advertisements while pretending to generate images, and a counterfeit WhatsApp Plus app operated as spyware, harvesting sensitive data including contacts, SMS, and device accounts, enabling identity theft and financial fraud. These findings highlight the growing risk of users being tricked into installing harmful software under the guise of trusted AI brands. In a related incident, a deepfake video of Nvidia CEO Jensen Huang was used to promote a cryptocurrency scam during a fake Nvidia GTC keynote stream on YouTube. The AI-generated hoax attracted nearly 100,000 viewers, significantly outpacing the legitimate event, and was even promoted above the official stream in search results. This demonstrates the increasing sophistication and reach of AI-powered scams, where attackers exploit both the popularity of AI brands and the capabilities of generative AI to create convincing fraudulent content, posing significant risks to user privacy, financial security, and trust in digital platforms.
Jun 29, 2026