Eleven individuals were arrested by the Ghana Police Service for operating a scam that used AI-generated deepfake videos to impersonate President John Dramani Mahama. The group targeted members of the public to solicit money and personal information. The police operation, conducted in early May 2026, resulted in the seizure of various electronic devices and the arrest of suspects in the Volta Region.
Ghanaian media reported that an alleged online scam used AI-generated deepfake videos to impersonate President John Dramani Mahama and solicit money and personal information from members of the public. Police said the operation was linked to suspects in Ghana's Volta Region and involved fake social media accounts and digitally manipulated presidential imagery.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
The scammers generated and circulated false deepfake videos of the president to deceive the public.
The suspects used AI-generated deepfakes to impersonate a high-profile individual to fraudulently solicit money and personal information for financial gain.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was caused by human scammers intentionally using deployed AI deepfake technology to commit financial fraud.
Added categories peak at 2: Minor (Epistemic Harm, Direct)
A cybercrime network in Ghana utilized AI-generated deepfake videos of President John Dramani Mahama to conduct a financial scam. While the incident represents an evolved cyber threat leveraging synthetic media to target citizens and impersonate leadership, it was localized, financially motivated, and successfully disrupted by law enforcement, resulting in minor national security impact.
The report describes the suspects using AI-generated content and deepfake videos as a tool to impersonate the president. The AI performed the specific function of generating synthetic media based on direct inputs.
Limited Risk: The report describes the use of 'AI-generated deepfake videos' to impersonate a public figure, which falls under the category of deepfakes requiring transparency obligations.
The suspects explicitly used AI to create deepfake videos of the president to impersonate him.
The report clearly details the police operation, the arrests of 11 individuals, and the specific use of AI-generated deepfakes to impersonate the president for financial fraud. While the exact AI tools used and the specific financial losses are not detailed, the nature of the incident is unambiguous.
None
Technology
AI Deepfake Tools
Used to create realistic videos impersonating the president.
Pre-registered SIMs
120 pre-registered SIM cards used to facilitate anonymous fraud.
Lack of Platform Detection
Online platforms failed to detect and block deepfake videos.
Data Inputs
Presidential Media Data
Public footage of the president used to train the AI model.
Human Factors
Financial Motivation
Suspects driven by financial gain to conduct cyber fraud.
Victim Gullibility
Unsuspecting public members easily fooled by realistic deepfakes.
Process and Methods
Coordinated Cybercrime
Network structured to produce and distribute fraudulent content.
Online Impersonation
Method of soliciting money by pretending to be a public figure.
Management
Organized Fraud Management
Cybercrime network managed logistics and roles for the operation.
Regulatory Environment
SIM Registration Gaps
Weak enforcement allowed acquisition of pre-registered SIM cards.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.