AI-Themed Investment Scam Network Reportedly Used Keitaro Cloaking Across 15,500 Domains

October 1, 2025

Researchers have uncovered a network of AI-themed investment scams reportedly utilizing Keitaro Tracker infrastructure for cloaking and routing. The elaborate schemes involve claims of AI trading, deepfake media, generative AI-generated content, spoofed news pages, and fraudulent trading platforms. These activities are designed to deceive potential victims by concealing scam content from detection while targeting them. Stay vigilant and informed – JOIN US for updates on responsible AI governance and harm prevention measures in the HISPI Project Cerebellum TAIM.

Matched TAIM controls

Suggested mapping from embedding similarity (not a formal assessment). Browse all TAIM controls

Alleged deployer
faikast, unknown-operators-of-malicious-keitaro-infrastructure, scammers, unknown-ai-themed-investment-scammers, unknown-cryptocurrency-scammers, quantum-ai, quantum-ai-scammers
Alleged developer
deepfake-technology-developers, image-generation-technology-developers, synthetic-audio-generation-technology-developers, generative-ai-developers, synthetic-video-generation-technology-developers
Alleged harmed parties
cryptocurrency-investors, investment-scam-victims, cryptocurrency-scam-victims, social-media-users, epistemic-integrity, news-consumers, impersonated-public-figures, general-public

AI governance case studies

For forensic AI governance failure analysis (TAIMScore™ case studies), browse Human Signal’s Failure Files™.

Source

Data from the AI Incident Database (AIID). Cite this incident: https://incidentdatabase.ai/cite/1486

Data source

Incident data is from the AI Incident Database (AIID).

When citing the database as a whole, please use:

McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. In Proceedings of the Thirty-Third Annual Conference on Innovative Applications of Artificial Intelligence (IAAI-21). Virtual Conference.

Pre-print on arXiv · Database snapshots & citation guide

We use weekly snapshots of the AIID for stable reference. For the official suggested citation of a specific incident, use the “Cite this incident” link on each incident page.