TLDR
Attacker uses face swap to insert victim into compromising photos with a child / mistress / political enemy at a fake event, then extorts: pay or photos go to spouse, employer, media. Victim panics because face looks like them. Tells: 1)...
How it works
Attacker uses face swap to insert victim into compromising photos with a child / mistress / political enemy at a fake event, then extorts: pay or photos go to spouse, employer, media. Victim panics because face looks like them. Tells: 1)...
Red flags
- Urgent pressure to click, pay, or share codes immediately.
- A link or sender that does not match the official organization.
- Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What to do
- 1DO: do NOT pay; deepfake forensics (Hive AI, Reality Defender, Truepic) can produce expert report; preserve original email + image.
- 2IF VICTIM: report to NCMEC if minor depicted, to police for extortion; for high profile victims, proactively publish authentic alibi to inoculate.
Source
UK-NCSC-AI-Threat
Source reviewed by Mythos Forensic Team
https://www.ncsc.gov.uk/report/impact-of-ai-on-cyber-threatFAQ
Is AI generated 'wedding / event photo' extortion — 'you were there with [person]' a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What should I do first?
DO: do NOT pay; deepfake forensics (Hive AI, Reality Defender, Truepic) can produce expert report; preserve original email + image.; IF VICTIM: report to NCMEC if minor depicted, to police for extortion; for high profile victims, proactively publish authentic alibi to inoculate.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.