Deepfake Video Promotions
A recognisable figure endorsing a giveaway, in video, convincingly. The format has changed and the scam underneath has not.
Priya Raman · 2 min read
Giveaway scams have used stolen images and names for years. Video synthesis has made the same scam considerably more persuasive without changing its structure.
The format
A video of a recognisable public figure announcing a crypto giveaway or investment opportunity. Frequently presented as a livestream, sometimes using footage of a genuine past event with synthesised audio.
The mechanics beneath are unchanged: send funds to an address and receive more back, or register on a platform and deposit.
Why video works better than images
Motion and voice defeat the heuristics people have. Users learned that a photograph proves nothing. Video still carries residual credibility for many people.
Livestream framing implies currency. A recording could be old; a stream appears to be happening now.
The production quality is high. Where these appear on advertising platforms, they have passed some review, which itself confers credibility.
The consistent tells
The ask is unchanged. Send funds to receive more. This has never once been real, regardless of who appears to be saying it.
Urgency. A limited window, a countdown, a limited number of participants.
The destination is an address, not a platform you already use.
The account is not the real one. Verification badges are purchasable on several platforms and the name may differ by a character.
No corroboration. A genuine announcement by a public figure appears on their own verified channels and in coverage. A synthesised one appears only where it was placed.
The rule that survives any improvement in the technology
No legitimate entity sends you more than you send them.
That statement does not depend on video quality, on who appears to be speaking, or on how the offer is framed. It is a property of how giving away money works.
Every version of this scam, across a decade, reduces to that sentence.
What is coming
Real-time synthesis in video calls, which has already appeared in targeted corporate fraud. The defence is the same: verify through an independent channel, and never act on a request received in a single medium.
For anything involving money, a call from someone who appears to be a person you know should be confirmed by contacting them through a number or channel you already have.
The structural version
The reason this scam persists is that it asks for an irreversible transfer to an address.
Funds held at a regulated venue such as an exchange you can actually contact, with a withdrawal allowlist enabled, cannot be sent to a new address without a delay. That delay is the practical defence against acting on a persuasive video at midnight, and it is off by default.
Move any remaining funds to a wallet with a newly generated seed phrase before anything else. Then revoke token approvals, and report the incident to your local authorities and the exchange involved. Do not pay anyone who promises to "recover" your coins. That is a second scam, aimed at victims of the first.