LIVE · cybersecurity feed
Live wire
deepfakehigh

AI Deepfakes Used to Impersonate OnlyFans Creators in New Scam

Scammers are employing AI-generated deepfakes to impersonate OnlyFans creators, tricking fans into sending money through peer-to-peer payment platforms before disappearing. This scheme, which leverages various social media platforms, has resulted in financial losses for fans and significant distress for the creators whose identities are being stolen.

ZeroDay News ·

Source: Security Affairs

Scammers are employing AI-generated deepfakes to impersonate OnlyFans creators, tricking fans into sending money through peer-to-peer payment platforms before disappearing. This scheme, which leverages various social media platforms, has resulted in financial losses for fans and significant distress for the creators whose identities are being stolen.

The fraud begins on platforms like TikTok, where attackers create fake accounts using photos and videos of legitimate OnlyFans creators. These accounts often feature synthetic voices to animate still images, making them appear more convincing. Viewers are then encouraged to move to direct messaging services such as Snapchat for private conversations, often under the pretense of offering exclusive content or live chats.

Once a rapport is established, the scammers request payment via Cash App, a peer-to-peer platform designed for informal transfers. The choice of Cash App is strategic, as transfers are instant and largely irreversible, making it difficult for victims to reclaim their funds once sent. After receiving payment, the scammer blocks the victim and deletes the fake account.

This type of "catfishing" has a dual impact. Fans lose money, while the real creators suffer reputational damage and potential loss of income. Some creators, like Jessieanna Campbell, have reported receiving angry messages from fans accusing them of fraud for transactions they never initiated. In more extreme cases, one creator described fans showing up at her home, leading to concerns for her personal safety.

Identifying these deepfakes can be challenging, but experts note common artifacts. For example, a TikTok video impersonating creator Elaina St. James, which animated a still photo with a cloned voice, reportedly showed distorted teeth and frozen eyebrows. These inconsistencies are often indicators of AI-generated video, particularly when the source material is limited. Malwarebytes has published a guide to help users spot deepfakes.

The issue is compounded by the international nature of the internet. While laws like the U.S. Take It Down Act criminalize non-consensual explicit content, including AI-generated material, and the EU’s AI Act requires disclosure of AI-generated images, enforcement is difficult across national borders, especially when content is hosted overseas. Research from the University of Bristol indicates that many participants continued to trust deepfake content even after being informed of its artificial nature.

This scam mirrors patterns seen in other online frauds, such as romance scams and impersonation scams involving major brands like Amazon and Apple. The underlying manipulation remains consistent: establish familiarity, create a sense of urgency, and then request payment through an irreversible channel.

To avoid falling victim, users are advised to be wary if a creator contacts them through a third-party platform and attempts to steer the conversation toward direct payment for exclusive content. It is crucial to verify any such requests through the creator's official, verified accounts before making any payments. Any request for Cash App payment from someone claiming to be a creator, particularly before any content is delivered, should be treated as a significant red flag.

deepfakeaiscamonlyfansimpersonation
ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.