A Deepfake MrBeast Crypto Ad Cost a Guelph Woman $14,000
What happened
A woman in Guelph, Ontario scrolled past what looked like a social-media advertisement for a cryptocurrency investment, apparently endorsed by MrBeast, the YouTube creator with over 200 million subscribers. She clicked on it. By the time she realized the account was fraudulent, she had lost $14,000.
The scam worked in stages, each one designed to build enough confidence for the next transfer. She made an initial $250 payment. After that she was connected with supposed representatives who guided her through additional steps. At some point she was placed in contact with someone she believed was the actual YouTube creator. A $5,000 transfer to a cryptocurrency wallet was among the payments that followed. Guelph police confirmed the losses and logged the incident, but the account structures and wallets involved were consistent with the kind of layered anonymity that routinely defeats tracing attempts in these cases.
The deepfake portion of the scam carries most of the weight in the early stages. MrBeast is among the most recognizable figures in online video, and his voice, face, and delivery are extensively documented across thousands of hours of public content. That volume of source material is exactly what makes high-quality impersonation easier to produce. An ad that captures enough of those characteristics to survive casual scrutiny does something no written script can achieve on its own: it borrows the trust a viewer already has in a real person. By the time she was speaking with representatives, the deepfake had already done its job.
MrBeast has publicly flagged fraudulent ads using his likeness on multiple occasions, and platforms have removed individual instances after complaints. But removal after the fact does not address the window in which the ad runs, reaches targets, and generates victims. A new fraudulent ad can be placed, approved by automated systems, distributed to thousands of accounts, and produce real financial harm before any takedown request is processed.
What the record after this incident cannot show is who generated the deepfake video, which account placed the ad, and what review process, if any, evaluated it before it ran. The victim can describe what she saw. Police can document the transactions. But the ad itself and the system decisions that put it in front of her are typically gone before anyone thinks to look. A provable record of what a system did at the moment it approved and distributed that content, including who placed it and under what account, would give investigators and regulators something to work with rather than a gap where the evidence should be.
Reported impact
- Affected parties
- Not publicly disclosed
- Harm type
- Not publicly disclosed
- Scale
- Not publicly disclosed
- Financial impact
- Not publicly disclosed
- Regulatory action
- Not publicly disclosed
Classification
Relevant governance controls
Governance control mapping is not available for this record.
- No controls mapped
Not publicly disclosed
Control mapping is analytical. It does not state that any control would have prevented the incident.
Sources and evidence
This record was researched and written by the Index. The event is also catalogued in the following database, which is listed for cross-reference.