This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
A fraudulent Facebook page impersonating the news outlet N1 HR posted a video featuring AI-generated audio of Croatian footballer Luka Modrić. The video falsely claimed that Modrić was endorsing an investment platform called 'Immediate Matrix' that promised high monthly returns. The incident is part of a broader pattern of 'pig butchering' scams using AI-generated content of public figures to deceive victims.
A Facebook page presented as N1 HR, a Croatian news outlet, posted a video that purported to show Croatian footballer Luka Modrić endorsing the investment platform Immediate Matrix and promising returns of up to €4,000 per month. The clip was reported to use AI-generated audio and to link to an Index-style article promoting the scheme.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
The AI system was used to generate highly realistic false statements and misleading claims about a non-existent investment platform.
The incident involved using AI-generated voice clones of a celebrity to impersonate them for financial fraud and targeted manipulation of victims.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The harm was caused by malicious human actors who intentionally deployed an AI voice-cloning tool to create a fraudulent video for financial gain.
Added categories peak at 3: Substantial (Epistemic Harm, Inferred)
An AI-generated deepfake video of Croatian footballer Luka Modric was used to promote a fraudulent investment platform. The incident represents a minor, localized threat to economic and information security, fitting into a well-established global pattern of AI-enabled financial scams with negligible broader national security implications.
The AI system acted as a tool to generate synthetic audio mimicking Luka Modric's voice based on text inputs provided by the scammers.
Limited Risk: The system involves AI-generated content such as deepfakes, which under the EU AI Act are subject to transparency obligations to ensure users are aware they are interacting with synthetic media.
The AI system was used to clone and generate the voice of Luka Modric to make it sound like he was endorsing the platform.
The report from Faktograf is highly detailed, providing specific context about the Facebook post, the nature of the deepfake audio, the domain used for the scam, and the fact-checking process that confirmed it was fake. There is little ambiguity about the events.
None
Technology
AI Voice Generation
AI synthesized Modric's voice to make the scam sound authentic.
Unnatural Speech Synthesis
Synthesized audio had weird pauses and made-up words like 'semtram'.
Data Inputs
Scraped Interview Media
Clips from Club del Deportista interview were used to build the deepfake.
Spoofed Social Media Assets
Fake X screenshots and cloned Index.hr articles used as input data.
Human Factors
Trust in Public Figures
Victims trusted Modric's identity, leading them to believe the scam.
Financial Vulnerability
Desire for quick financial stability makes users susceptible to scams.
Process and Methods
Flawed Platform Moderation
Facebook allowed the fake 'N1 HR' page to host and share scam videos.
Identity Spoofing Methods
Scammers easily cloned N1 TV and Index.hr branding to deceive users.
Management
Lack of Page Verification
Facebook managed page creation without verifying official N1 TV ownership.
Regulatory Environment
Inadequate Domain Control
Regulators struggle to police domains like wirelesscartes.com.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.
