Six Arrests After AI Deepfakes of Celebrities Drove a €19 Million Investment Fraud in Spain
What happened
In April 2025, Spanish police arrested six people they alleged ran a global investment scam that used deepfake technology to defraud 208 victims of approximately €19 million. The operation was not improvised. It combined AI-generated advertising, profiling algorithms, and a layered fraud structure that recycled the same victims multiple times.
The visible face of the scheme was a set of deepfake ads featuring national celebrities, images and voices synthesized by AI and deployed as social media or online advertisements to make an investment opportunity look credible. Victims who responded were contacted by scammers posing as financial advisors or government officials, who guided them through what appeared to be a functioning investment process. At no point did any of the professionals the victims spoke with actually exist.
What separated this operation from older celebrity endorsement frauds was how targets were chosen. According to the incident record, victims were selected through targeting algorithms. The scheme did not rely on casting a wide net and hoping for the best. It used data-driven tools to identify individuals most likely to respond to a fabricated investment pitch, then placed deepfake content in front of them. The AI did not just produce the deceptive material; it steered the deception toward the most useful recipients.
The extraction did not end with the first fraud. The operation cycled victims through romance baiting, investment fraud, and recovery scams in sequence. A person who had already lost money would receive contact from someone posing as a recovery service, and would lose additional money trying to reclaim the first loss. The €19 million total reflects, at least in part, this stacking of rounds against the same pool of victims.
Spanish law enforcement dismantled the network through conventional investigative work. That matters because it points to the accountability gap the case reveals. The advertising platforms that served AI-generated celebrity likenesses to algorithmically selected victims had no mechanism to flag content built to deceive. No record of who created the deepfakes, who paid to promote them, and which targeting parameters guided them to those 208 people existed outside the scammers' own infrastructure. A provable record of what a system generated, who directed it, and whom it reached would not prevent every fraud, but it would make the chain visible before a single victim engaged and long before investigators had to reconstruct it from scratch.
Reported impact
- Affected parties
- Not publicly disclosed
- Harm type
- Not publicly disclosed
- Scale
- Not publicly disclosed
- Financial impact
- Not publicly disclosed
- Regulatory action
- Not publicly disclosed
Classification
Relevant governance controls
Governance control mapping is not available for this record.
- No controls mapped
Not publicly disclosed
Control mapping is analytical. It does not state that any control would have prevented the incident.
Sources and evidence
This record was researched and written by the Index. The event is also catalogued in the following database, which is listed for cross-reference.