Reported AI-Generated Video Call Impersonation of Cryptocurrency Analyst Leads to Alleged Malware Installation and Account Theft

June 19, 2025

Cryptocurrency analyst Mai Fujimoto reported a distressing incident where she lost access to her X, Telegram, and MetaMask accounts. This was allegedly due to a video call with an impersonator using deepfake technology disguised as a trusted contact on Zoom. The attacker, appearing as the acquaintance, instructed Fujimoto to install software under false pretenses, potentially enabling malware installation. Binance founder Changpeng Zhao underscored the vulnerabilities of such attacks that undermine the reliability of video call verification. This incident highlights the importance of trustworthy AI and AI governance in preventing such harm. To contribute to safe and secure AI practices, JOIN US.

Learn how HISPI Project Cerebellum TAIM can help manage and mitigate AI incidents like this by mapping appropriate strategies.

Matched TAIM controls

Suggested mapping from embedding similarity (not a formal assessment). Browse all TAIM controls

Alleged deployer
unknown-scammers, unknown-scammer-impersonating-acquaintance-of-mai-fujimoto
Alleged developer
unknown-deepfake-technology-developers, unknown-voice-cloning-technology-developers
Alleged harmed parties
unnamed-acquaintance-of-mai-fujimoto, mai-fujimoto, general-public

Source

Data from the AI Incident Database (AIID). Cite this incident: https://incidentdatabase.ai/cite/1111

Data source

Incident data is from the AI Incident Database (AIID).

When citing the database as a whole, please use:

McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. In Proceedings of the Thirty-Third Annual Conference on Innovative Applications of Artificial Intelligence (IAAI-21). Virtual Conference.

Pre-print on arXiv · Database snapshots & citation guide

We use weekly snapshots of the AIID for stable reference. For the official suggested citation of a specific incident, use the “Cite this incident” link on each incident page.