This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
A large-scale, AI-assisted financial scam operating out of Tbilisi, Georgia, defrauded over 6,000 victims of $35 million between 2022 and 2025. The perpetrators utilized deepfake celebrity endorsements, AI-generated fake trading platforms, and AI-assisted persuasion tactics to manipulate victims into transferring funds. The operation, which targeted individuals in the UK and Canada, also employed AI tools to create fraudulent documentation, such as fake passports, to bypass banking security protocols.
A large-scale AI-assisted financial scam, allegedly operated from Tbilisi, Georgia, used deepfake celebrity endorsements and manipulated victims through fraudulent trading dashboards that simulated high returns. Call center agents, trained with AI-driven persuasion tactics, convinced individuals to invest more money while falsely promising profits. Many reportedly lost their life savings, with the total losses reaching $35M across more than 6,000 victims.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
Scammers obtained sensitive personal information and remote access to victims' devices using AnyDesk under false pretenses.
The scammers deployed fake trading platforms displaying simulated live market data and fabricated account balances to mislead victims.
The incident involves malicious actors using AI-generated deepfakes, cloned websites, and fake documents to conduct targeted financial fraud and scams against individual victims for personal gain.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The financial scam was orchestrated intentionally by human malicious actors who deployed AI tools post-deployment to generate deepfakes and fraudulent documents to deceive victims.
Added categories peak at 3: Substantial (Psychological Harm, Indirect)
A highly sophisticated financial fraud operation (AK Group) utilized generative AI, including deepfakes and synthetic document generation, to defraud over 6,000 victims of $35 million. While the incident represents a significant evolution in cyber-enabled financial crime and exposes vulnerabilities in digital banking security, its direct national security impact remains minor.
The report describes scammers using generative AI as a tool to quickly copy and create clone websites, fake passport images, and deepfake videos. The AI did not act autonomously or as an agent, but rather as a highly effective tool to accelerate and enhance human-driven fraudulent activities.
Risk Level 3: Limited Risk. The incident involves 'AI-generated content such as deepfakes' used to impersonate celebrities and 'cloned website interfaces' to deceive users, which falls under transparency obligations for synthetic content.
The scammers primarily used AI to generate deepfake videos of celebrities to advertise the scam, and ChatGPT to generate fake passport images to bypass bank security.
The reports are highly detailed, drawing from a massive data leak of over 1 million recorded calls, internal spreadsheets, and regulatory warnings. The roles of deepfakes, cloned websites, and fake documents are explicitly documented.
None. The incident is clearly a coordinated financial fraud facilitated by generative AI tools.
Technology
Generative AI Deepfakes
Scammers generated realistic celebrity videos and voices to lure victims.
AI Passport Image Generation
ChatGPT used to easily generate fake passport images to bypass bank KYC.
Rapid AI Web Cloning Tools
AI tools allowed scammers to quickly copy real trading platforms like Exante.
Data Inputs
Targeting Profile Data
User profile data was harvested by algorithms to target vulnerable victims.
Human Factors
Overreliance on Digital Content
Victims trusted highly realistic deepfakes of trusted public figures.
Coerced Compliance Deception
Victims lied to bank compliance staff under direct instruction from scammers.
Remote Device Control Consent
Victims handed over remote PC control via AnyDesk due to tech struggles.
Process and Methods
Weak KYC Verification
Challenger banks accepted AI-generated fake passports to open accounts.
Ineffective Ad Moderation
Social media platforms failed to filter out AI deepfake promotional ads.
Structured Boiler Room Tactics
Organized multi-tier call centers systematically groomed and pressured victims.
Management
Prioritizing Ad Revenue
Social media platforms hosted fake ads without adequate safety verification.
Lack of Proactive AI Risk Audit
Financial institutions failed to anticipate AI-enabled identity fraud.
Regulatory Environment
Lagging AI Fraud Regulations
Regulators have not fully addressed AI-driven fraud and cyberthreats.
Jurisdictional Enforcement Gaps
Cross-border operations in Tbilisi evade UK and US law enforcement.
Inadequate Big Tech Oversight
Lack of government mandates to stop platforms publishing dangerous fakes.
AI system involved
Identified by automated extraction; can differ from the alleged developers above.
