Artificial Intelligence Policy Tracker

AI Incident Database

Browse AI incidents

Every incident record (metadata only) from the weekly snapshot of 2026-09-07. Filter, then export the selection with its licence attached; each row links to the full record and its reports.

Filter incidents (1 active)

Two-letter code, e.g. US

Reset

412 incidents · subdomain: Fraud, scams, and targeted manipulation · page 13 of 17

  1. #898 · 2 reports

    Alleged LLMjacking Targets AI Cloud Services with Stolen Credentials AIID ↗

    Attackers reportedly exploited stolen cloud credentials obtained through a vulnerable Laravel system (CVE-2021-3129) to allegedly abuse AI cloud services, including Anthropic’s Claude and AWS Bedrock, in a scheme referred to as “LLMjacking.” The attackers are said to have monetized access through reverse proxies, reportedly inflating victim costs to as much as $100,000 per day. Additionally, they allegedly bypassed sanctions, enabled LLM models, and evolved techniques to evade detection and logg

    Deployer: Llmjacking Attackers Exploiting Laravel, Entities Engaging In Russian Sanctions Evasion · Developer: Oai Reverse Proxy Tool Creators, Llmjacking Reverse Proxy Tool Creators · Harmed: Laravel Users, Laravel Cve 2021 3129 Users, Cloud Llm Users, Cloud Llm Service Providers

  2. #1463 · 1 report

    Purported Deepfake Facebook Advertisement Reportedly Used Bulgarian Actor, Director, and Playwright Kamen Donev's Likeness to Market Joint-Pain Product AIID ↗

    A reportedly AI-manipulated Facebook advertisement appeared to repurpose footage of Bulgarian actor, director, and playwright Kamen Donev, allegedly overlaying fabricated audio and altered lip movements to market a purported joint-pain product. The ad reportedly linked to a presumably fabricated article imitating a Bulgarian news outlet and to an online sales funnel for a product described as unavailable through pharmacies.

    Deployer: Scammers · Developer: Deepfake Technology Developers, Synthetic Audio Generation Technology Developers · Harmed: People Seeking Medical Advice, Kamen Donev, Epistemic Integrity, General Public, General Public Of Bulgaria

  3. #1462 · 1 report

    Purported Deepfake Facebook Advertisement Reportedly Used Bulgarian Actor and TV Host Mihail Bilalov's Likeness to Market Joint-Pain Product AIID ↗

    A reportedly AI-manipulated Facebook advertisement appeared to repurpose footage of Bulgarian actor and television host Mihail Bilalov, overlaying purportedly fabricated audio and altered lip movements to market an alleged joint-pain product. The ad reportedly linked to a fabricated article imitating a Bulgarian news outlet and to an online sales funnel for a product described as unavailable through pharmacies.

    Deployer: Scammers · Developer: Deepfake Technology Developers, Synthetic Audio Generation Technology Developers · Harmed: People Seeking Medical Advice, Mihail Bilalov, Epistemic Integrity, General Public, General Public Of Bulgaria

  4. #1024 · 1 report

    Kenyan Journalist Jeff Koinange Depicted Endorsing Gambling App in Purported AI-Generated Deepfake AIID ↗

    A viral video purportedly manipulated by AI shows Kenyan journalist Jeff Koinange endorsing a mobile gambling app. The video was reportedly created using AI deepfake techniques, uses footage from a legitimate news broadcast, and artificially alters Koinange's voice and mouth movements. Neither Koinange nor Citizen TV has promoted the app, and no legitimate source hosts the video.

    Deployer: Scammers Impersonating Jeff Koinange, Scammers · Developer: Deepfake Technology Developers · Harmed: Jeff Koinange, General Public Of Kenya

  5. #784 · 1 report

    AI incident: sexual content (Apr 2024) AIID ↗

    An AI Incident Database record involving sexual content, dated 23 April 2024. Risk classification, related incidents and the laws on record for this risk area.

    Deployer: Unknown Dark Web Users, Deepfake Creators · Developer: Unknown Ai Developers, Deepfake Creators · Harmed: Minors

  6. #792 · 10 reports

    Unauthorized Use of AI to Replicate Tupac Shakur's and Snoop Dogg's Voices in Drake's 'Taylor Made Freestyle' AIID ↗

    Drake released a song, "Taylor Made Freestyle," featuring AI-generated voices of Tupac Shakur and Snoop Dogg. The unauthorized replication of Tupac’s voice without the estate's consent led to a cease-and-desist order.

    Deployer: Drake · Developer: Deepfake Technology Developers · Harmed: Tupac Shakur, Estate Of Tupac Shakur, Snoop Dogg

  7. #936 · 1 report

    Deepfake of Former Prime Minister of Malta Joseph Muscat Allegedly Promotes Nord Invest Scam AIID ↗

    A reported doctored video falsely depicts former Maltese Prime Minister Joseph Muscat promoting the crypto platform Nord Invest. The manipulated footage, originally from a 2013 Sky News interview, was overlaid with AI-generated audio to mimic Muscat’s voice endorsing a fraudulent scheme. The video was reportedly shared through Facebook.

    Deployer: Unknown Scammers Impersonating Joseph Muscat, Scammers · Developer: Deepfake Technology Developers, Synthetic Audio Generation Technology Developers · Harmed: Joseph Muscat, General Public Of Malta

  8. #1100 · 3 reports

    Reported Audio Deepfake Impersonating CEO Karim Toubba Targets LastPass Employee via WhatsApp AIID ↗

    A LastPass employee was reportedly targeted by an audio deepfake impersonating CEO Karim Toubba via WhatsApp. The message used voice-cloning AI in a social engineering attempt to create urgency and bypass security protocols. The employee recognized red flags, reported the incident, and no breach occurred. LastPass shared the incident publicly to raise awareness about deepfake-driven fraud campaigns targeting executives and companies.

    Deployer: Unknown Scammer Impersonating Karim Toubba, Scammers · Developer: Deepfake Technology Developers, Synthetic Audio Generation Technology Developers · Harmed: Karim Toubba, Lastpass Employee, Employees Of Lastpass, General Public

  9. #687 · 1 report

    AI incident: sexual content (Apr 2024) AIID ↗

    An AI Incident Database record involving sexual content, dated 8 April 2024. Risk classification, related incidents and the laws on record for this risk area.

    Deployer: Pornhub, Various Porn Sites · Developer: Deepfake Creators · Harmed: Breeze Liu

  10. #832 · 2 reports

    Reportedly Viral AI-Generated Song about 'Diddy Party' Allegedly Mimics Justin Bieber AIID ↗

    A purportedly AI-generated song imitating Justin Bieber's voice, allegedly referencing a "Diddy party," spread widely across social media, reportedly leading fans to believe it was authentic. Experts reportedly identified the audio as likely AI-made, citing frequency mismatches and digital artifacts. The reportedly viral song misrepresented Bieber, posing potential brand and revenue impacts for the artist while misleading listeners.

    Deployer: Unknown Youtube User, Unknown Tiktok User, The_Real_Cool_Dad, X (Twitter) Users · Developer: Deepfake Technology Developers · Harmed: Sean Combs, Justin Bieber Fans, Justin Bieber

  11. #706 · 1 report

    Scammers Using AI to Impersonate Small Businesses AIID ↗

    Scammers are using AI to impersonate small businesses by copying their videos, logos, and social media posts. They create fake listings and ads, diverting customers to cheap knockoffs or stealing their money. This has severely impacted businesses like Bee Cups, Darn Tough Vermont, and Cascade hummingbird feeders, leading to significant financial losses, negative reviews, and damaged reputations. Their deployment of AI makes it challenging for small businesses to combat these fraudulent activitie

    Deployer: Scammers · Developer: Openai, Unknown Ai Developers · Harmed: Small Businesses, Small Business Customers, Small Business Employees, Bee Cups, Darn Tough Vermont, Jim Carter

  12. #1053 · 2 reports

    Mumbai Businessman Reportedly Defrauded via Purported AI-Cloned Voice Impersonating Son AIID ↗

    A Mumbai businessman reportedly identified as KT Vinod reportedly lost Rs 80,000 after receiving a call from someone claiming to be a representative of the Indian Embassy in Dubai, who said his son had been arrested. The caller allegedly used AI-generated voice cloning to simulate the voice of Vinod's son, pleading for help. Reportedly convinced of the urgency, Vinod instructed a money transfer via Google Pay. The scam was discovered only after he contacted his son directly.

    Deployer: Scammers · Developer: Deepfake Technology Developers, Synthetic Audio Generation Technology Developers · Harmed: General Public Of India, Mumbai Businessman, Son Of Mumbai Businessman

  13. #683 · 2 reports

    Scammers Using Deepfakes of Women's Faces and Voices for False and Offensive Advertisements AIID ↗

    Scammers used AI tools from HeyGen and ElevenLabs to create deepfake videos of influencers Michel Janse, Olga Loiek, Shadé Zahrai, and Carrie Williams, misusing Lana Smalls's voice in Williams's case. These videos promoted offensive products and false messages, in some cases targeting nationalist Chinese men to boost China-Russia ties, causing emotional distress and damaging the victims' reputations.

    Deployer: Scammers · Developer: Heygen, Elevenlabs · Harmed: Olga Loiek, Michel Janse, Lana Smalls, Carrie Williams, Shade Zahrai

  14. #689 · 4 reports

    AI incident: sexual content (Stable Diffusion, Mar 2024) AIID ↗

    An AI Incident Database record involving sexual content, dated 26 March 2024. Risk classification, related incidents and the laws on record for this risk area.

    Deployer: Steven Anderegg · Developer: Stable Diffusion, Stability Ai · Harmed: Minors, General Public

  15. #661 · 1 report

    AI incident: sexual content (Leonardo Ai, Mar 2024) AIID ↗

    An AI Incident Database record involving sexual content, dated 26 March 2024. Risk classification, related incidents and the laws on record for this risk area.

    Deployer: Telegram Community Users, Reddit Users, Leonardo Ai Users · Developer: Leonardo Ai · Harmed: Public Figures, Celebrities

  16. #660 · 1 report

    AI incident: sexual content (Mar 2024) AIID ↗

    An AI Incident Database record involving sexual content, dated 21 March 2024. Risk classification, related incidents and the laws on record for this risk area.

    Deployer: Deepfake Website Operators · Developer: Deepfake Technology Developers · Harmed: Celebrities, British Public Figures, Cathy Newman

  17. #765 · 5 reports

    AI incident: sexual content (Mar 2024) AIID ↗

    An AI Incident Database record involving sexual content, dated 14 March 2024. Risk classification, related incidents and the laws on record for this risk area.

    Deployer: Deepfake Creators · Developer: Deepfake Technology Developers · Harmed: Stevie Hyder, Richmond Burton Community High School

  18. #725 · 1 report

    Cartels Reportedly Using AI to Expand Operations into Financial Fraud and Human Trafficking AIID ↗

    The Jalisco New Generation Cartel is reportedly using AI to expand its financial fraud and human trafficking operations, coercing individuals into illegal activities under the guise of legitimate jobs. INTERPOL warns that this integration of AI into criminal enterprises is a growing trend among cartels across Europe, Asia, and Africa as well.

    Deployer: Cartels, Organized Crime Groups, Jalisco New Generation Cartel · Developer: Unknown Ai Developers · Harmed: Individuals Coerced Into Criminal Activities, Human Trafficking Victims, Financial Scam Victims

  19. #787 · 3 reports

    Deepfake ID Sales Allegedly Persist as OnlyFake Reportedly Relaunches with New Fraud Tools AIID ↗

    Researchers from Au10tix discovered the relaunch of OnlyFake, a site offering AI-generated fake IDs. Despite an earlier takedown, the site reemerged with disclaimers and new tools, including handwritten signature generation. These fakes are challenging biometric verification systems and are reportedly being used to perpetuate fraudulent activity.

    Deployer: Onlyfake, Yurii Nazarenko, Yuriy Nazarenko, Uriel Septimberus, Tor Ford, John Wick (Onlyfake) · Developer: Onlyfake · Harmed: Individuals Using Biometrics, Government Agencies Using Biometrics, Businesses Using Biometrics, Biometric Security, Epistemic Integrity, National Security And Intelligence Stakeholders

  20. #717 · 1 report

    Fake AI-Generated Law Firms Sent Fake DMCA Notices to Increase SEO AIID ↗

    In March 2024, fake law firms using AI-generated identities sent fraudulent DMCA takedown notices to website owners, demanding backlinks for SEO gains. These AI-generated law firms, like "Commonwealth Legal," used GAN models for realistic attorney images and fabricated bios. The scam involved fake legal threats to coerce site owners into adding backlinks, exploiting AI technology for deceptive practices.

    Deployer: Commonwealth Legal, Scammers · Developer: Deepfake Creators · Harmed: Website Owners, Website Operators, Ernie Smith

  21. #715 · 1 report

    Over 400 Purportedly AI-Driven Scams Reportedly Led to $8M Loss for Australians in 2023 AIID ↗

    In 2023, Australians reportedly lost over $8 million to scams involving purported deepfake videos and fake news articles that falsely endorsed investment trading platforms. Scammers reportedly used AI-generated content featuring celebrities to mislead victims, leading to significant financial losses. The National Anti-Scam Centre received over 400 reports of these incidents. One man is reported to have lost over $80,000 in cryptocurrency.

    Deployer: Scammers · Developer: Deepfake Technology Developers, Synthetic Audio Generation Technology Developers, Generative Ai Developers · Harmed: General Public Of Australia, General Public, Epistemic Integrity

  22. #641 · 12 reports

    AI incident: sexual content (Feb 2024) AIID ↗

    An AI Incident Database record involving sexual content, dated 20 February 2024. Risk classification, related incidents and the laws on record for this risk area.

    Deployer: X (Twitter), Deepfake Creators · Developer: Deepfake Creators · Harmed: Bobbi Althoff

  23. #644 · 6 reports

    Alleged State-Sponsored Hackers Escalate Purported Phishing Attacks Using Artificial Intelligence AIID ↗

    State-sponsored hackers from North Korea, Iran, Russia, and China are reportedly leveraging artificial intelligence to conduct sophisticated phishing and social engineering attacks. They target global defense, cybersecurity, and cryptocurrency sectors, aiming to steal sensitive information and, in the case of North Korea, cryptocurrencies to help fund its illicit nuclear program.

    Deployer: Russian Hackers, North Korean Hackers, Iranian Hackers, Chinese Hackers · Developer: Russian Government, Government Of North Korea, Iranian Government, Chinese Government · Harmed: Individual Professionals On Linkedin, Global Defense Companies, Cybersecurity Firms, Cryptocurrency Exchanges, Targets Of Fraudulent Professional Opportunities

  24. #649 · 1 report

    Deepfake Audio Falsely Attributes Controversial Remarks to Keir Starmer About the Rochdale Azhar Ali Crisis AIID ↗

    A deepfake audio clip, falsely claiming to be Keir Starmer discussing the Rochdale byelection and Labour's withdrawl of support for Azhar Ali, circulated online, achieving over 250,000 views. Experts confirmed its inauthenticity, highlighting a significant misuse of AI in fabricating political content.

    Deployer: Social Media Users · Developer: Unknown · Harmed: General Public, British Voters, British Labour Party, Keir Starmer, Democratic Integrity

  25. #919 · 1 report

    Purported Russian-Linked Network Allegedly Used Deepfake of Maria Ressa on Facebook and Bing to Promote Cryptocurrency Scam Targeting Filipinos AIID ↗

    A purportedly Russian-linked scam network allegedly circulated an AI-generated deepfake of journalist Maria Ressa on Facebook and Microsoft Bing. The video reportedly manipulated a 2022 interview to falsely depict Ressa endorsing cryptocurrency. Fraudulent websites allegedly impersonating Rappler and CNN Philippines reportedly amplified the scam. Investigators reportedly linked the operation to a fraudulent network targeting Filipino audiences. Meta and Microsoft removed the content, but similar

    Deployer: Td Globus Contract, Russian Linked Scam Network, M1 Shop · Developer: Deepfake Technology Developers, Synthetic Audio Generation Technology Developers · Harmed: Rappler, Public Trust In Media Institutions, Potential Cryptocurrency Scam Victims, Maria Ressa, Filipino Social Media Users, Cnn Philippines

Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.

Frequently asked questions

What is recorded in each incident?

What happened, when, who was involved as developer or deployer, who was harmed, the sectors and countries affected, and the domain and subdomain the harm falls under. Incidents are mirrored from the AI Incident Database and each links back to its source record.

Does an incident mean wrongdoing was proven?

No. These are reported incidents, not findings of liability. Entities named in a report are named as reported, allegations are marked as alleged, and nothing here is a legal determination.

How current is the incident data?

It syncs directly from the AI Incident Database several times a day, so a new incident usually appears within hours. Each record carries the date it was last synced, and the snapshot date is shown on the page.

Does this page include the full incident reports?

No. The report texts are outside the licence this data is shared under, so only the metadata and the classifications appear here. Every row links to the original incident record, which carries the reports themselves.