Imagine receiving a video call from your bank manager asking you to verify a transaction. The person’s face looks real, the voice sounds familiar, and the instructions seem convincing. But what if the person on the screen is not who they claim to be?
This is the growing risk of deepfake scams.
Artificial intelligence can now generate or manipulate realistic voices, images, and videos. Cybercriminals can misuse these technologies to impersonate family members, company executives, public figures, customer support agents, and other trusted individuals to steal money or personal information.
According to India’s Computer Emergency Response Team (CERT-In), deepfakes can facilitate financial fraud, misinformation, social engineering, and reputational damage.
In this guide, we explain what deepfake scams are, how they work, the most common types of AI-powered fraud, warning signs to watch for, and practical ways to protect yourself.
Quick answer: Deepfake scams use AI-generated or manipulated audio, images, or videos to impersonate real people and deceive victims. The safest response is to verify identities through a separate, trusted communication channel before sending money, sharing sensitive information, or following urgent instructions.
What Are Deepfake Scams?
Deepfake scams are fraudulent activities that use AI-generated or manipulated media to make someone appear to say or do something they never actually said or did.
These scams often use deepfake technology, voice cloning, face swapping, or AI-generated images to create believable impersonations.
For example, a scammer might clone a relative’s voice from publicly available audio and call you claiming they need emergency financial assistance. Another criminal might create a fake video of a business executive instructing an employee to transfer company funds.
The objective is to make the victim trust the impersonation and act before checking whether the request is genuine.
Deepfake technology is not inherently malicious. It also has legitimate applications in entertainment, education, accessibility, and visual effects. The danger arises when people use it for deception, fraud, or non-consensual manipulation.
How Do Deepfake Scams Work?
Deepfake scams typically combine AI technology with social engineering. Social engineering means manipulating people into revealing information, transferring money, or taking actions that benefit a scammer.
Here is how a typical deepfake scam may unfold:
- Collecting information: The scammer gathers publicly available photographs, videos, voice recordings, names, or professional details about the target.
- Creating a fake identity: The scammer uses AI tools to generate or manipulate a voice, image, or video.
- Contacting the victim: The scammer reaches out through a phone call, messaging app, email, social media account, or video conference.
- Creating urgency: The victim is told that an emergency, confidential transaction, or serious problem requires immediate action.
- Requesting money or information: The scammer asks for a bank transfer, payment, password, verification code, or sensitive document.
- Disappearing: After receiving money or information, the scammer may stop responding or continue exploiting the victim.
Not every deepfake scam follows all these steps. Some use fake investment advertisements or fabricated celebrity endorsements to attract victims directly.
The key warning is that a realistic face, familiar voice, or convincing video is not sufficient proof of identity.
7 Common Types of Deepfake Scams
1. AI Voice Cloning Scams
Voice cloning allows AI systems to imitate aspects of a person’s voice using audio samples. Scammers may misuse this technology to impersonate relatives, friends, colleagues, or public figures.
A common example involves a caller pretending to be a family member who has been arrested, injured, or stranded and urgently needs money.
The caller may sound remarkably similar to the real person, making the request emotionally convincing.
How to stay safe: End the call and contact the person through a phone number you already trust. If necessary, verify the situation with another family member. Do not rely solely on the caller’s voice.
The US Federal Trade Commission provides additional guidance in its article on AI voice cloning and family emergency scams.
2. Deepfake Video Call Scams
In a video call scam, a fraudster may use manipulated video or a synthetic face to impersonate a real person.
The impersonator might pose as a manager, company director, financial adviser, or government official.
For example, an employee may join a video meeting where someone appears to be a senior executive and requests a confidential payment. The employee may comply because the face and voice seem authentic.
How to stay safe: Confirm unusual requests through an independently verified phone number or an established internal communication channel. Follow your organization’s approval procedures for financial transactions.
3. CEO Fraud and Business Payment Scams
Business email compromise and executive impersonation scams exploit trust within organizations. AI-generated audio or video can make these schemes more convincing.
A criminal might impersonate a company’s CEO or finance director and instruct an employee to transfer funds to a supposedly urgent supplier account.
The scammer may also research the organization to learn employee names, reporting relationships, and ongoing projects.
How to stay safe:
- Require independent verification for unusual payment requests.
- Use dual approval for high-value transactions.
- Confirm bank account changes with an established supplier contact.
- Never bypass financial controls because a request appears to come from a senior executive.
4. Fake Celebrity and Investment Scams
Scammers may create manipulated videos of celebrities, entrepreneurs, or financial personalities promoting fake investments.
These advertisements may promise guaranteed returns, exclusive investment opportunities, or quick profits from cryptocurrency and other assets.
A familiar face can make a fraudulent offer appear legitimate, but the person shown in the video may never have endorsed the investment.
How to stay safe: Check whether the endorsement appears on the person’s verified official channels. Verify the investment provider independently, be suspicious of guaranteed returns, and never invest based only on a video advertisement.
5. AI-Generated Customer Support Scams
Fraudsters may impersonate customer support representatives, bank employees, delivery companies, or technology providers.
They may use convincing profile photographs, cloned voices, fabricated video calls, or fake websites to gain trust.
The scammer might claim that your account has been compromised and ask for your password, one-time password (OTP), remote-access permission, or payment to resolve the issue.
How to stay safe: Contact the organization using the phone number or website you independently locate. Never share your OTP, password, or banking credentials with an unverified caller.
6. Deepfake Romance and Personal Impersonation Scams
In romance scams, criminals may use AI-generated photographs, manipulated videos, or cloned voices to create a convincing online identity.
They may build a relationship over time before requesting money for medical expenses, travel, business problems, or other emergencies.
A video call does not automatically prove that an online relationship is genuine if the identity itself has not been independently verified.
How to stay safe: Avoid sending money to people you have not reliably verified. Be cautious of repeated emergencies, requests for secrecy, and pressure to move conversations to private channels.
7. Fake News and Public Figure Impersonation
Deepfakes can also be used to fabricate speeches, announcements, interviews, or breaking-news videos involving public figures.
These videos may be designed to influence opinions, damage reputations, spread misinformation, or promote fraudulent products.
How to stay safe: Check the claim against multiple reputable news sources and the person’s verified official channels. Do not share emotionally provocative videos before confirming their authenticity.
How to Identify a Deepfake: Warning Signs to Watch For
Deepfake detection is becoming more difficult as generative AI improves. Some manipulated videos contain visible errors, while others may look and sound convincing.
Look for warning signs, but remember that no single visual or audio clue proves a video is fake.
| Warning Sign | What to Check |
|---|---|
| Unusual facial movements | Expressions or movements that appear inconsistent with the conversation |
| Lip-sync problems | Speech that does not seem to match mouth movements |
| Strange lighting | Inconsistent shadows, reflections, or skin tones |
| Distorted details | Unnatural edges around the face, hair, glasses, or ears |
| Unnatural voice | Unusual pauses, inconsistent pronunciation, or awkward speech patterns |
| Suspicious behaviour | Urgent requests for money, secrecy, or sensitive information |
| Unverified source | A video shared by an unfamiliar account or suspicious website |
| Pressure to act | Instructions to transfer funds or reveal credentials immediately |
These signs are not definitive. Genuine videos may have poor lighting, compression artefacts, or unusual audio, while sophisticated deepfakes may not show obvious defects.
The most reliable practical defence is independent verification, not visual inspection alone.
How to Protect Yourself from Deepfake Scams
You do not need advanced technical skills to reduce the risk of becoming a victim. A few consistent security habits can make impersonation scams much harder to carry out.
1. Establish a Family Verification Phrase
Families can agree on a private phrase or question for emergencies involving requests for money.
If someone calls claiming to be a relative in distress, ask for the agreed verification phrase. Do not reveal it to the caller.
Choose something that cannot easily be discovered from public social media posts.
2. Verify Urgent Requests Separately
If a caller asks you to send money, share sensitive information, or approve a transaction, pause and verify the request.
Use a known phone number, an established workplace channel, or an independently confirmed contact method. Do not use only the contact details supplied by the suspicious caller.
3. Never Share OTPs or Passwords
An impersonator may try to obtain one-time passwords, banking credentials, account recovery codes, or other authentication information.
Do not share these details with unverified callers, even when they claim to represent a bank, government agency, or technical support team.
4. Enable Multi-Factor Authentication
Use multi-factor authentication (MFA) on email, banking, social media, and other important accounts where available.
MFA adds a layer of protection beyond a password. Prefer phishing-resistant authentication methods, such as passkeys or security keys, where supported.
Remember that MFA cannot prevent every scam, particularly when someone is manipulated into approving an authentication request.
5. Limit Public Sharing of Sensitive Media
Public videos and audio recordings may provide material that can be misused for impersonation.
Review the privacy settings on your social media accounts and think carefully before publishing sensitive personal information or recordings.
You do not need to stop sharing normal content, but reducing unnecessary exposure can make impersonation more difficult.
6. Verify Websites and Social Media Accounts
Scammers may create fake profiles, advertisements, and websites that closely resemble legitimate organizations.
Check website addresses carefully and access important services through official apps or websites you already know. Do not assume that a verified-looking logo or professional design guarantees legitimacy.
7. Use Strong Passwords and Security Updates
Use unique passwords for important accounts and a reputable password manager where practical. Keep your operating system, browser, messaging apps, and security software updated.
These steps help reduce the risk of account compromise, which scammers may use alongside deepfake impersonation.
8. Train Employees to Recognize AI Impersonation
Businesses should teach employees to verify unusual requests, especially those involving money transfers, sensitive documents, access permissions, or changes to supplier details.
Financial controls should apply regardless of whether the request arrives by email, telephone, or video call.
What Should You Do If You Become a Victim of a Deepfake Scam?
If you suspect you have been targeted, act quickly. Your priorities should be limiting financial loss, securing compromised accounts, preserving evidence, and reporting the incident.
Step 1: Stop Further Payments
Do not send additional money or share more information with the suspected scammer.
If you have already made a payment, contact your bank or payment provider immediately and request that it investigate the transaction. Ask whether the payment can be stopped, recalled, or disputed.
Step 2: Secure Your Accounts
If you disclosed a password, change it from a trusted device. Sign out of unfamiliar sessions, review account recovery details, and enable MFA where possible.
If you shared banking information, contact your bank for specific steps to protect the account.
Step 3: Preserve Evidence
Save relevant information, including:
- Phone numbers and email addresses
- Chat messages and email headers
- Screenshots and suspicious URLs
- Transaction receipts and reference numbers
- Video or audio files, where safely available
- Dates, times, and a description of what happened
Do not delete evidence that may help your bank or the authorities investigate the incident.
Step 4: Report the Scam
In India, you can report suspected cyber financial fraud through the National Cyber Crime Reporting Portal at cybercrime.gov.in. For urgent financial cyber fraud, call 1930 as soon as possible.
You can also contact your local police or cybercrime unit. Reporting does not guarantee recovery, but quick action may improve the chances of limiting losses.
If you are outside India, use your country’s official cybercrime reporting service.
Step 5: Warn Others
If scammers impersonated you or someone you know, notify affected contacts through a trusted channel. This can help prevent further fraud using the same fake identity.
Deepfake Scams in India: What Should Internet Users Know?
India’s growing use of digital payments, messaging apps, online banking, and social media makes digital fraud awareness particularly important.
Deepfake scams may target individuals, families, businesses, and public figures. Fraudsters can combine impersonation with familiar scam tactics such as fake investment schemes, emergency payment requests, phishing links, and fraudulent customer support.
Indian internet users should take particular care with:
- Unexpected requests for UPI payments or bank transfers
- Calls claiming to come from relatives in emergencies
- Fake investment videos featuring celebrities
- Messages requesting OTPs or banking credentials
- Video calls from people claiming to represent an employer or government department
- Suspicious links promising refunds, prizes, or account recovery
If someone requests money through UPI or another payment service, verify the person’s identity and the reason for the payment before approving it.
For official cybersecurity advice, consult CERT-In and use the National Cyber Crime Reporting Portal to report suspected cybercrime.
Can AI Detection Tools Identify Deepfakes?
AI-based detection tools can analyse audio, images, or videos for patterns associated with manipulation. Some tools examine visual inconsistencies, audio characteristics, or technical signals to estimate whether media may have been artificially generated.
However, no detection tool can guarantee that every deepfake will be identified correctly.
Detection systems may produce false positives, miss sophisticated manipulations, or perform differently across file types and recording conditions. Some online tools may also pose privacy risks if they require you to upload sensitive personal media.
If you use a deepfake detector:
- Choose a re