This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
Organized scammer groups known as 'Yahoo Boys' are utilizing real-time face-swapping and deepfake technology to impersonate individuals during video calls. These tools allow scammers to build trust with victims under false identities, facilitating romance fraud and financial theft. The sophistication of these attacks is increasing, with scammers leveraging various software tools to manipulate their appearance in real-time.
Scammers from Nigeria, known as "Yahoo Boys," are reportedly utilizing real-time deepfake technology to impersonate individuals during video calls, deceiving victims in romance scams. By allegedly altering their appearance with face-swapping software, they build trust under false identities to defraud targets of substantial sums.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
Scammers utilize deepfake nude generators and explicit photographs to harass, degrade, and sextort victims.
The incident involves scammers using real-time deepfake face-swapping technology to impersonate trusted individuals for financial gain and targeted emotional manipulation.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The harm is directly caused by the intentional actions of human scammers (the Yahoo Boys) who deploy and manipulate consumer face-swapping tools to defraud and exploit victims.
Added categories peak at 4: Severe (Child Sexual Exploitation & Abuse (CSEA), Inferred)
Organized cybercriminal networks known as the Yahoo Boys are leveraging real-time face-swapping AI to conduct highly convincing romance scams and sextortion. While the technology represents a significant evolution in synthetic media capabilities and causes devastating financial and psychological harm to individuals, its current impact is classified as a minor national security threat managed under standard law enforcement procedures.
The face-swapping applications function strictly as tools that perform specific, well-defined functions of mapping facial expressions in real-time based on direct camera inputs, without exhibiting independent planning or autonomous goal-directed behavior.
Limited Risk: The report describes the deployment of AI-generated content, specifically real-time deepfakes, which fall under transparency obligations to ensure users are aware they are interacting with synthetic media.
The primary function of the AI systems described is real-time face-swapping to generate deepfake video feeds during live calls, alongside the secondary use of deepfake nude generators to manipulate images.
The report provides detailed, first-hand observations from fraud researchers and cybersecurity experts who monitored the scammers' Telegram channels, analyzed self-shot setup videos, and documented the exact technical configurations used to execute the real-time deepfakes.
None, the evidence clearly points to a coordinated, technology-enabled financial fraud and extortion campaign.
Technology
Real-Time Face-Swapping Software
Advanced tools allow real-time face-swapping during live video calls.
Voice Pitch Manipulation Tools
Software enables scammers to alter their voice pitch to match fake personas.
Glitch Masking via Low Bandwidth
Unstable mobile connections mask visual glitches in deepfake video feeds.
Data Inputs
Pre-built App Personas
Existing personas and faces built into apps are leveraged by scammers.
Explicit Photo Albums
Albums of explicit photographs are sold to build convincing fake personas.
Pre-written Scam Scripts
Free downloadable scripts are used to manipulate victims systematically.
Human Factors
Vulnerability of Victims
Scammers exploit victims depression, eating disorders, and loneliness.
Scammer Social Manipulation Skills
Con artists are highly skilled at building trust and rapport with targets.
Scammer Lack of Fear
Scammers brazenly show faces because they do not fear legal repercussions.
Process and Methods
Dual-Phone Setup Technique
Using two phones with ring lights to capture and swap faces in real-time.
Laptop Webcam Setup Technique
Using laptop webcams and software to stream manipulated video feeds.
Telegram Collaboration Clusters
Scammers organize in decentralized Telegram clusters to share tools and tips.
Management
No App Guardrails against Abuse
Software developers fail to restrict entertainment apps from scam usage.
Decentralized Crime Structure
Yahoo Boys lack a formal leadership or governance structure to monitor.
Platform Oversight Failures
Communication platforms fail to proactively ban scam coordination channels.
Regulatory Environment
Unregulated Entertainment Apps
No regulations restrict the creation of real-time face-swap software.
Delayed Platform Moderation
Telegram channels hosting scam networks remain active for long periods.
Lack of Cross-Border Enforcement
Scammers operate from Nigeria targeting global victims, complicating policing.
AI system involved
Identified by automated extraction; can differ from the alleged developers above.
