How to Spot Deepfake Crypto Scams
The face is real, the voice is right, the stream is live, and none of it happened. How synthetic video sells crypto fraud, and the checks that still work.

TL;DR
- Deepfake crypto scams put a synthetic celebrity or executive on video to front an offer the real person never made.
- The giveaway is almost never the pixels. It is the ask: send crypto now, double your money, keep it quiet.
- Verify through a second channel you already trust, never through the channel that delivered the pitch.
- No genuine figure or firm runs send-one-get-two promotions. That single rule filters nearly all of it.
In January 2024, a finance employee at the engineering firm Arup joined a video call with the company's chief financial officer and several colleagues, and the faces were right, the voices were right, the meeting mundane. On instruction, the employee made transfers totalling around 25.6 million US dollars. Every other person on that call was a deepfake, and Hong Kong police later confirmed the fraud, with the firm confirming it was the victim. Nobody hacked a server, they synthesised a meeting.
Retail crypto users meet the same technology with less production budget: a familiar billionaire on a live stream, announcing a giveaway. The mechanics are worth ten minutes, because the defence is not better eyesight.
The standard play
Most deepfake crypto scams are wrapped around one loop. A hijacked or lookalike account, often a YouTube channel with stolen branding, runs a live stream featuring a well-known figure, historically Elon Musk more than anyone, apparently announcing a crypto promotion. Waves of these streams have run since 2020, some drawing tens of thousands of live viewers during real events such as SpaceX launches. A QR code sits beside the video: send coins to this address and receive double back, a limited event, act now.
The video can be old genuine footage re-cut, or a full synthetic performance, and it does not matter which. The wrapper varies but the ask never does: money flows one way, to an address, immediately, and blockchain transfers do not come back.
Judge the ask, not the pixels
Detection advice that fixates on visual tells, odd blinking, mismatched lighting, smeared edges, ages badly, because generation quality improves monthly. The reliable tells sit in the request itself.
The doubling promise. No company, exchange or public figure runs promotions where you send crypto first and receive more back, an offer with a hundred per cent fraud rate. One rule, most of the category gone.
Urgency plus secrecy. Countdown clocks, limited slots, keep this confidential: legitimate announcements survive being checked, synthetic ones are priced against your pause.
The channel doing the announcing. Real corporate news appears on official sites and verified accounts you can reach independently, and it appears in more than one place at once. A world-changing giveaway announced solely on one stream is announcing what it is.
Interaction, if any, is scripted. Live deepfake streams dodge unscripted moments, and comments are usually locked or flooded with bot praise. On a call, a request to move money that arrived by video deserves a voice-line callback on a number you already had. That single step would have saved Arup 25 million dollars.
The quieter versions
Not every synthetic pitch is a stadium stream. Voice clones make phone calls: the US FTC warned in March 2023 about cloned family voices staging emergencies, and the same technique fronts fake investment managers. Romance-adjacent long cons increasingly use brief deepfake video calls to prove a persona exists, a pattern covered in this library's guide to pig-butchering scams. Recruiters, support agents, account managers: any role that needs a trustworthy face for eleven minutes can now rent one.
The countermeasure stays boringly constant: verify through a second, independent channel that predates the pitch. Call the number you already had, type the exchange's address yourself and look for the promotion there, ask the platform's support through its site. Identity claims arriving by video now deserve the same scepticism email links earned two decades ago.
If you sent something
Report the address to the platform you sent from and to national reporting channels such as IC3 in the US or Action Fraud in the UK, quickly, because exchanges can sometimes freeze funds that land in their custody, so keep the stream link, screenshots, transaction hashes. And treat anyone who contacts you offering to recover the loss for a fee as chapter two of the same scam, because that is exactly what recovery fraud is.
Frequently Asked Questions
A fraud that uses synthetic video or audio of a real person, a celebrity, executive or official, to front a crypto offer they never made, most commonly a stream promising to double whatever you send.
Judge the ask before the video. Send-first-get-more promotions are always fraud. Then check independently: real announcements appear on official channels you can reach yourself, in more than one place at once.
Yes. In a case confirmed by Hong Kong police in 2024, a finance employee transferred about 25.6 million dollars after a video call in which every other participant was synthetic. Assume quality, and verify through a second channel instead.
Report it immediately to the platform you sent from and to your national fraud channel, with transaction hashes and screenshots. Then ignore anyone offering paid recovery: that follow-up is a second scam targeting the same loss.
No. Voice clones stage family emergencies and investor calls, and long-con scams use short deepfake video calls to make a fake persona seem real. Any unexpected request for money that arrives by video or voice deserves a callback on a channel you already trusted.
