YouTube phishing scam uses AI-generated deepfake of CEO Neal Mohan
Phishers used AI-generated deepfake video of YouTube CEO Neal Mohan announcing monetization policy changes to conduct phishing scams targeting content creators. The fraudulent videos and accompanying emails directed users to malicious sites designed to steal credentials and install malware. YouTube acknowledged the scam and warned users not to click links in privately shared videos claiming to be official communications.
What happened
Phishers distributed AI-generated videos depicting YouTube CEO Neal Mohan announcing changes to the platform's monetization policies. The videos were shared privately with users to appear as official communications from YouTube.
Fraudulent emails accompanied the deepfake videos, impersonating YouTube using official-looking addresses and names like 'Notification for YouTube Creators.' These emails directed users to click links leading to phishing sites and fake forms such as DocuSign.
Reported impact
YouTube creators received the deceptive communications targeting them to steal login credentials and personal information. The phishing sites could install malware or compromise user accounts.
Index analysis
YouTube stated that the company never uses private video sharing to contact users or share policy updates. The platform advised users not to click links in these videos and to report suspicious content.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.