Skip to content
Submit incident
AII-1002-09437
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.Supporting sources are pending verification.

Criminal network used AI-modified lookalikes to defraud doctors in Brazil

A criminal network in Brazil recruited lookalikes of doctors and used AI to modify their facial images to bypass biometric verification systems and fraudulently access doctor bank accounts and investment platforms. Police arrested nine suspects across three states in two operations in 2025, with victims reporting combined losses of approximately R$80,000 and attempted transfers exceeding R$700,000.

January 2025 · Polícia Civil do Rio Grande do Sul · Fraud, scams and manipulation
January 2025
AII-1002-09437
Quick facts
Category
Fraud, scams and manipulation
Country
Brazil
Date
January 2025
Drafted by
Raidu Incident Detection

What happened

A criminal network in Rio Grande do Sul targeted doctors by first invading their email and gov.br accounts to access personal documents. The first reported case occurred in January 2025, when a doctor discovered his accounts had been compromised and criminally used to attempt transfers exceeding R$700,000 through an investment brokerage.

The gang recruited lookalikes of the doctors, primarily from São Paulo, and used AI to modify their facial images to make them resemble the target doctors more closely. They used the AI-modified images to create fraudulent documents and to pass facial biometric verification checks required for banking access, including selfie verification.

Reported impact

Five doctors in Rio Grande do Sul were identified as victims, with combined losses of approximately R$80,000. The network attempted to transfer over R$700,000 through investment accounts using the compromised credentials.

Index analysis

Facial biometric systems failed to detect that the AI-modified images of lookalikes did not match the legitimate account owners. The criminals successfully passed verification processes that were intended to confirm the identity of the actual account holders.

Governance controls

The Polícia Civil do Rio Grande do Sul's Departamento Estadual de Repressão aos Crimes Cibernéticos conducted a two-phase investigation. The first phase in June 2025 resulted in five arrests in São Paulo; the second phase on 12 August 2025 resulted in three preventive arrests and three search warrants across São Paulo, Ananindeua (Pará), and Vila Velha (Espírito Santo).

Classification

Category
Fraud, scams and manipulation
Industry
Healthcare, drugs and biotechnology
Country
Brazil
Harm status
Actual harm
Intent
Intentional
Timing
Post-deployment
Harm types
Economic or property
Failure modes
Deepfake image, Manipulation or dark pattern, Misidentification
Consequences
Police investigation
AI systems
Facial image modification AI

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident