Organized crime group used deepfake AI to commit large-scale loan fraud in Ukraine
Ukrainian police discovered an organized crime group that used deepfake AI technology to create fake identity verification videos and fraudulently obtain loans in the names of at least 286 citizens, stealing over 4 million hryvnia. The group, led by a 33-year-old woman operating from Poland, hacked into banking systems to access personal data and bypass automated security measures. Three members of the group have been notified of suspicion charges related to fraud committed by an organized group during wartime using unauthorized computer operations on a large scale.
What happened
A 33-year-old woman who had fled to Poland during Russia's full-scale invasion organized a criminal group that obtained personal data of online banking users from unidentified sources, including financial account numbers, mobile phone numbers, passwords, and authorization codes.
The group conducted unauthorized access to Ukrainian bank mobile applications and the Diia government app through BankID authentication systems. After gaining access to citizens' electronic cabinets, they downloaded digital documents and the organizer created short deepfake videos by overlaying victims' faces onto her own face to bypass automated photo-verification in banking systems.
Using this method, the group opened accounts and contracts in the names of at least 286 Ukrainian citizens and obtained loans exceeding 4 million hryvnia for some of them. The stolen funds were transferred to controlled accounts across various financial institutions, then converted to cryptocurrency and cashed out.
Reported impact
At least 286 Ukrainian citizens had accounts opened in their names without authorization, with loans exceeding 4 million hryvnia issued fraudulently.
Index analysis
The use of deepfake technology to create fake identity verification videos represents a novel application of AI for financial fraud, exploiting the reliance of automated banking systems on biometric verification.
Governance controls
The National Police of Ukraine investigation revealed that financial institutions' automated photo-verification systems were vulnerable to deepfake manipulation, lacking adequate safeguards against synthetic media.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.