Deepfake Scams: How They Work and How to Protect Yourself
From fake celebrity investment ads to cloned voices of family members, deepfake scams follow predictable scripts. Learn the scripts and the defenses.
Deepfake scams don’t succeed because the fakes are perfect. They succeed because they arrive with urgency, authority, or emotion attached — and because the target doesn’t know the script. Here are the scripts.
The four dominant scripts
1. The celebrity endorsement
A famous investor, TV host, or entrepreneur “reveals” an investment platform in a video ad. The platform shows fake returns, lets you withdraw a small amount once to build trust, then takes everything. Defense: endorsements of get-rich platforms are fabricated by default. Search the person’s official channels; you will find denials, not confirmations.
2. The executive video call
An employee is invited to a video call with the CFO (or several executives — entire fake meetings have been staged) and instructed to wire funds urgently and confidentially. Defense: callback verification through a known internal channel, no exceptions for seniority or urgency. Companies that enforce this don’t lose.
3. The family emergency voice call
A cloned voice of your child or parent, in distress, needs money now. Defense: agree on a family safe word today. Hang up and call the person’s real number. Scammers rely on you staying on the line.
4. The romance video
A dating match who video-chats briefly (real-time face swap), builds a relationship over weeks, then needs money — or introduces you to an “investment opportunity” (the pig-butchering pattern). Defense: treat any money topic in an online-only relationship as the scam reveal, regardless of how real the video calls felt.
The universal red flags
- Urgency + secrecy, always. “Now” and “tell no one” is the signature of every script.
- Channel isolation. The scammer keeps you inside one app and resists moving to a channel where identity is verifiable.
- Payment methods that can’t be recalled: crypto, gift cards, wire transfers to new accounts.
Layer your defenses
- Behavioral: safe words, callback rules, and a personal policy of never moving money based on a single call or video.
- Procedural: for companies — dual authorization for transfers, verification channels that don’t depend on the requesting channel.
- Technical: automated deepfake detection for the media itself, because the visual quality of fakes will keep improving while the scripts stay the same.
Frequently asked questions
What is the most common deepfake scam?
Fake celebrity endorsement ads — a well-known figure appearing to promote an investment platform, crypto scheme, or miracle product. The face and voice are real people; the endorsement never happened.
How do voice-cloning scams work?
A few seconds of someone's voice from social media is enough to clone it. Scammers then call relatives with an emergency script — an accident, an arrest, a kidnapping — demanding urgent money transfers.
What's a safe word and should my family have one?
A pre-agreed phrase that only your family knows, used to verify identity in urgent calls. It costs nothing to set up and defeats voice cloning completely, because the scammer can clone the voice but not the shared secret.