Yazılar

Brazilian Police Bust Deepfake Scam Using Gisele Bündchen’s Image in Instagram Ads

Brazilian authorities have dismantled a nationwide fraud network that used deepfake videos of supermodel Gisele Bündchen and other celebrities in Instagram ads to trick victims into buying fake products, marking one of the country’s first major crackdowns on AI-powered online scams.

Police arrested four suspects this week and froze assets across five states, after investigators traced more than 20 million reais ($3.9 million) in suspicious transactions uncovered by Brazil’s anti–money laundering agency COAF.

The investigation began in August 2024, when a victim reported being deceived by an Instagram ad showing an AI-generated video of Bündchen promoting a nonexistent skincare product. Another fraudulent campaign featured the supermodel supposedly offering free suitcases, with users asked to pay only for shipping—items that never arrived.

According to Eibert Moreira Neto, head of the cybercrime unit in Rio Grande do Sul, the group created a “series of scams” using deepfakes of multiple celebrities and fake betting platforms. Investigators believe the criminals operated at mass scale, collecting many small payments—usually under 100 reais ($19)—from victims who rarely reported the losses.

“That created a perverse situation,” explained investigator Isadora Galian. “The criminals enjoyed a kind of statistical immunity—they knew most people would not complain, so they operated without fear.”

Meta, owner of Instagram, said its policies ban ads that deceptively use public figures and that such content is removed “when detected.” The company added that it uses AI-based detection systems, trained review teams, and reporting tools to fight celebrity-impersonation scams.

A spokesperson for Bündchen’s team urged consumers to verify suspicious offers, avoid ads promising unrealistic discounts or giveaways, and report fraudulent content to authorities or official brand channels.

The case has broader implications for Brazil’s fight against digital deception. In June 2024, the Supreme Court ruled that social media platforms can be held liable for criminal ads if they fail to remove them swiftly—even without a court order.

The Rio Grande do Sul operation underscores the growing criminal use of deepfake technology, which allows scammers to replicate celebrity likenesses with stunning realism. What once required Hollywood budgets can now be done with cheap AI tools and a few clicks—a reality that’s forcing regulators, platforms, and the public to confront a new era of synthetic fraud.

EU Presses Apple, Google and Microsoft on Efforts to Combat Financial Scams

European Union regulators have asked Apple, Google, Microsoft, and Booking.com to detail the steps they are taking to prevent their platforms from being used for financial scams, highlighting growing concern over the rising cost of online fraud.

The inquiry falls under the Digital Services Act (DSA), the EU’s sweeping legislation that requires major tech companies to take stronger action against illegal and harmful online content.

“Today, we sent requests for information, under the DSA, to Apple, Booking.com, Google and Microsoft on how they identify and manage risks related to financial scams,” EU tech chief Henna Virkkunen wrote on X.

Virkkunen warned that online fraud has become easier than ever to launch, frequently leading to significant financial losses for consumers. She noted that scams such as fake hotel listings, fraudulent banking apps, and deepfake videos of public figures promoting false investments cost Europeans more than €4 billion ($4.7 billion) each year.

Authorities worldwide have also raised alarms that AI tools could make scams like phishing and fake investment schemes more convincing and harder to detect.

The EU’s probe underscores its heightened scrutiny of Big Tech’s responsibilities in protecting users against financial crime.

Telegram Blocks Two Massive Black Market Services Linked to Cybercrime and Money Laundering

Telegram has shut down two major digital black markets—Xinbi Guarantee and Huione Guaranteewhich collectively facilitated over $35 billion in transactions since 2021, according to blockchain analytics firm Elliptic. The services, which primarily operated in Chinese and were known hubs for cybercriminals and fraud networks, appeared inactive as of Thursday.

In a statement to Reuters, Telegram confirmed the takedowns, saying:

Criminal activities like scamming or money laundering are forbidden by Telegram’s terms of service and are always removed whenever discovered.”

Massive Fraud Ecosystems Dismantled:

  • Xinbi Guarantee and Huione Guarantee far surpassed older dark web markets such as Silk Road, which was infamous for illegal drug distribution.

  • The platforms served as critical infrastructure for illicit services, including:

    • Stolen data trading

    • Money laundering

    • Fraudulent telecom operations

Elliptic hailed the shutdown as a major win in the fight against online fraud, calling it a big blow for online fraudsters”.

Ties to Broader Cybercrime Networks:

  • Huione Guarantee, which once operated under the name Haowang Guarantee, is a subsidiary of Cambodia-based Huione Group, also linked to Huione Pay and Huione Crypto.

  • U.S. officials allege these entities were used by state-sponsored hacking groups, including North Korea’s Lazarus Group, which funneled more than $150,000 in cryptocurrency through Huione Pay.

Earlier this month, the U.S. Treasury Department sanctioned the Huione Group, describing it as the “marketplace of choice for malicious cyber actors,” effectively cutting it off from the U.S. financial system.

Platform Reaction and Future Concerns:

  • In a statement posted to its website, Huione Guarantee confirmed that it had been blocked by Telegram on Tuesday and would “cease operations from now on.”

  • Attempts to reach Xinbi Guarantee or Huione Group for comment were unsuccessful.

While Telegram’s move highlights growing efforts by tech platforms to combat illegal activity, analysts warn that such services may resurface under new identities unless systemic enforcement and financial sanctions continue to evolve alongside cybercrime techniques.