This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
Scammers in Singapore are utilizing AI-generated deepfake video calls to impersonate senior corporate executives and government officials. These calls are used to manipulate employees into authorizing fraudulent bank transfers and disclosing sensitive personal information. Authorities, including the Singapore Police Force, have issued warnings to businesses to establish verification protocols for such communications.
Scammers in Singapore are reportedly using AI-generated deepfake video calls to impersonate corporate executives. The calls seek to deceive employees into authorizing fraudulent bank transfers. Usually, it is reported, victims will receive WhatsApp messages inviting them to Zoom meetings. During the calls, the scammers are disguised as senior leaders and will instruct the employees to transfer company funds for fake business transactions and to disclose personal data.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
The scammers successfully manipulated victims into disclosing highly sensitive personal information, specifically NRIC and passport details.
The scammers used AI-generated deepfakes to impersonate executives and target specific corporate employees for financial fraud and personal data theft.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was caused by human scammers intentionally deploying deepfake technology post-deployment to deceive employees and steal corporate funds.
Added categories peak at 2: Minor (Epistemic Harm, Direct)
Scammers in Singapore utilized real-time AI deepfakes to impersonate corporate executives and Monetary Authority of Singapore (MAS) officials during live video calls, executing financial fraud and harvesting sensitive personal data. While demonstrating an evolved cyber-threat capability, the incident remains a localized criminal matter with minor national security implications.
The AI system functioned as a tool to alter the scammers' appearances and voices in real-time based on direct inputs, without exhibiting autonomous planning or agency.
Risk Level 3: Limited Risk. The incident involves 'AI-generated content such as deepfakes', which falls under Limited Risk and is subject to transparency obligations under the EU AI Act.
The scammers used AI to digitally alter their appearances and voices to impersonate executives in live-streamed video calls, which directly maps to deepfake video and voice generation.
The report clearly outlines the attack vector (WhatsApp to Zoom deepfake calls), the impersonated entities (executives, MAS officials), and the outcomes (financial transfers, PII disclosure). While specific financial amounts and the exact deepfake software are not named, the nature of the AI safety incident is unambiguous.
None. This is a classic deepfake-enabled business email compromise (BEC) / CEO fraud style incident.
Technology
AI Digital Manipulation
Scammers used AI to alter appearances and impersonate executives.
Lack of Deepfake Detection
Zoom and messaging platforms lacked tools to detect manipulated video.
Data Inputs
Impersonated Identity Data
Scammers used executive identities to craft convincing video feeds.
Human Factors
Cognitive Bias and Trust
Victims trusted the visual representation of their high-ranking executives.
Lack of Employee Awareness
Employees failed to recognize tell-tale signs of AI video manipulation.
Process and Methods
Absent Verification Protocols
No processes existed to verify the authenticity of video call participants.
Insecure Communication Channels
Unsolicited WhatsApp messages were used to initiate corporate Zoom calls.
Management
Lack of Verification Protocols
Management failed to establish protocols to verify executive instructions.
Inadequate Employee Training
Management did not train staff to check for manipulated audio or video.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.
