Interpol launches campaign warning of AI deepfake scams

What happened

Interpol announced on 18 October 2026, from Singapore, that it had launched an awareness campaign on the growing risk of crime that uses AI-generated or AI-altered media to scam members of the public. According to Interpol's own news release, the campaign features three short videos, themselves made with AI, that show how synthetic media can be used in scams. The organisation describes the examples plainly: a video call from a supposed colleague requesting a bank transfer, a call from a family member in a difficult situation, or an online relationship that seems genuine. Its stated aim is to steal money or sensitive personal information.

The campaign's core message is "Wait. Validate. Don't take the bait." According to Forensicspot's summary of the release, Interpol advises people to check suspicious requests through a separate, trusted channel rather than relying on the voice or appearance of the caller. The same summary says Interpol also recommends two-factor authentication and agreed verification phrases with family members or trusted contacts.

Police in Cyprus repeated the warning on 19 October. According to Cyprus Mail, the police said criminals can mimic the faces and voices of loved ones and colleagues, and that the public should never transfer money without independent confirmation. Cyprus Mail also reported that the police encouraged businesses to set clear verification procedures for financial transactions, even when a request seems to come from a trusted source.

Why it matters for businesses that automate work

Automated back offices are built to act on instructions quickly. A payment run, a supplier bank change or a data export can be triggered by a message that looks routine. Interpol's point is that the usual warning signs are becoming less reliable. Its Innovation Centre director, Toshinobu Yasuhira, was quoted by Fox News saying that AI is erasing the tell-tale signs of a scam, such as spelling mistakes and clumsy formatting.

The risk is not theoretical. In March 2024, according to a China Daily report carried by PressReader, a finance employee at the Hong Kong branch of a multinational company transferred HK$200 million, about US$25.5 million, in 15 instalments after a video call in which the participants, including people posing as senior executives, were deepfakes. The victim only realised the fraud days later, when he contacted headquarters. Police said the scammers had used readily available online videos of the executives.

What changes in practice

The change is in the approval design, not in the staff's ability to spot a fake. A business of any size can apply the same logic. Five steps cover most of the exposure:

1. Any request to pay a new payee, change bank details or release data should be confirmed by calling a number already held on file, not one supplied in the request.
2. Payments above an amount you set should need a second approver who did not receive the original request.
3. Bank detail changes for suppliers and staff should follow a fixed waiting period and a written check.
4. Senior staff and finance teams should agree a verification phrase that is never shared on social media or in email.
5. Staff should be told that urgency, secrecy and requests to avoid colleagues are warning signs, as Cyprus police also advised.

For a firm with a few staff, this may be one owner's phone call before any transfer over an agreed limit. For a large group, it becomes a written control in the payment system, with logs of who verified what. Automation helps here because it can hold a request in a queue until the verification step is recorded. It cannot confirm that a voice on a call is genuine. That judgment still sits with a named person, and the control only works if people follow the hold.

What to watch next

Three things will show whether the campaign changes behaviour. The first is whether national police forces repeat the message, as Cyprus did within a day. The second is whether Interpol publishes results from the three videos, such as how many people engaged with them. Neither has been published yet. The third is how banks and payment platforms respond, since the campaign asks people to rely on out-of-band checks that banks may also need to support. Businesses should review their payment approval rules now rather than wait for a second warning.