AI scammers are now impersonating US government bigwigs, says FBI

Deepfake technology is being weaponized in sophisticated phishing campaigns targeting US federal and state officials and cryptocurrency founders. The FBI issued a warning on May 15th detailing a campaign active since April, where hackers use deepfake voice and text messages to impersonate senior government officials. This deception establishes trust, enabling access to victims’ accounts via malicious links leading to data-stealing platforms. The FBI emphasizes that compromised official accounts amplify the threat, allowing further targeting of government officials and their contacts using acquired information. The agency advises verifying sender identities, scrutinizing addresses and media for inconsistencies, and avoiding sharing sensitive information with unknown individuals or clicking unfamiliar links. Two-factor or multi-factor authentication is strongly recommended.

Separately, Sandeep Narwal, Polygon co-founder, reported a deepfake scam targeting him and others. Hackers impersonated Narwal and Shreyansh, Polygon’s ventures lead, via compromised Telegram accounts, luring victims into Zoom calls featuring deepfakes. With audio disabled, scammers pressured victims to install malicious SDKs, compromising their systems. Narwal highlighted Telegram’s lack of effective reporting mechanisms for such attacks, a concern echoed by others who experienced similar incidents, including Web3 OG Dovey Wan. He recommends never installing software during unsolicited online interactions and using a separate device for crypto wallet access.

Both incidents underscore the escalating threat of deepfake-enabled scams. The FBI’s advice— verifying identities, scrutinizing messages, and employing strong authentication—remains crucial. Narwal’s experience highlights the need for improved reporting mechanisms on platforms like Telegram and proactive measures to protect against this emerging threat, such as using separate devices for sensitive financial transactions. The combination of social engineering and advanced AI technology poses a significant challenge, requiring enhanced vigilance and security protocols.