Scammers used AI-generated deepfake videos and cloned voices on TikTok to impersonate trusted Nigerian brands and public figures, defrauding users of significant financial sums through fake grants and investment schemes.
Mohammed Yusuf, a small-business operator in Ilorin, Kwara State, Nigeria, reportedly lost about ₦150,000 (~US$108.86) after responding to a purportedly AI-generated TikTok ad impersonating digital payments company OPay. The ad allegedly promised a free payment terminal and cash grant. A caller reportedly posing as OPay staff requested a one-time password; unauthorized betting-voucher transactions reportedly depleted nearly all the operator's business capital.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
The AI systems generated highly realistic, false video and audio representations of public figures and corporate representatives to mislead users.
The incident involves malicious actors using AI-generated deepfakes and voice clones to impersonate trusted brands and individuals to execute targeted financial fraud and phishing scams against specific victims.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The risk and subsequent financial harms were caused by human malicious actors intentionally deploying AI voice cloning and deepfake generation tools post-deployment to defraud victims.
Added categories peak at 3: Substantial (Epistemic Harm, Inferred)
This incident involves the malicious use of AI-generated deepfakes and cloned voices in Nigerian languages to execute financial scams on TikTok. While the campaign targeted a large audience and caused severe individual financial and psychological distress, its primary impact is criminal fraud rather than a direct threat to national security, infrastructure, or state sovereignty.
The AI systems (voice cloners and deepfake generators) were used as tools by human scammers to perform specific, well-defined functions of generating synthetic audio and video based on direct inputs, without exhibiting independent planning or autonomous decision-making.
Limited Risk: The report describes the use of AI-generated content such as deepfakes and synthetic voices, which under the EU AI Act are subject to specific transparency obligations to ensure users are informed of their synthetic nature.
The primary technology exploited was the generation of realistic synthetic videos and cloned voices of trusted public figures and corporate representatives to deceive victims.
The investigative report is highly detailed, providing specific case studies of named victims, quantifying the number of monitored ads (130), identifying the specific brands and public figures impersonated, and detailing the financial losses and platform mechanics.
None. The evidence clearly points to a coordinated AI-enabled financial fraud campaign exploiting social media ad networks.
Technology
Deepfake Video Generation
AI tools generated realistic deepfakes of public figures to deceive users.
Voice Cloning Technology
Cloned voices of trusted individuals were used to make fake ads look real.
Deficient Automated Moderation
Automated moderation systems struggled to detect evolving AI-generated content.
Data Inputs
Phished User Credentials
Users submitted OTPs and account details directly into malicious links.
Harvested Public Media
Scammers used publicly available videos of figures like Aliko Dangote.
Unlabeled AI Content
Deceptive ads lacked mandatory labels identifying them as AI-generated.
Human Factors
Trust in Sponsored Ads
Users assumed promoted ads had passed platform verification.
Fear of Missing Out
Urgency tactics pressured users into making quick, unsafe choices.
Economic Vulnerability
Financial hardship drove users to seek online grants and opportunities.
Process and Methods
Weak Advertiser Verification
Flawed verification allowed anonymous scammers to run paid promotions.
Exploitative Ad Infrastructure
Targeting tools allowed scammers to hyper-personalize deceptive ads.
Evasive Scammer Tactics
Scammers disabled comments and sharing to prevent public warnings.
Management
Prioritizing Ad Revenue
ByteDance focused on ad revenue growth over robust safety safeguards.
Inadequate Local Moderation
Platform management failed to moderate local-language content effectively.
Opaque Ad Transparency
TikTok obscured advertiser identities in the documented scam ads.
Regulatory Environment
Digital Governance Gap
Nigeria lacked proactive laws holding platforms accountable for ad fraud.
Weak Regulatory Enforcement
Regulatory bodies failed to enforce strict verification of online ads.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.