WhatsApp has been named in 23 documented digital harm incidents, including 1 fatality and 2 involving minors. The most common harm domain is Fraud & Financial, followed by Privacy & Surveillance.
Documented Incidents
23Retiree defrauded via pig butchering scam initiated on Facebook and encrypted messaging apps
A Bedford, Indiana retiree named Timothy Patton lost $10,000 to a pig-butchering scam after being targeted online through a fake investment group. The scam involved a fake advisor named "Sabrina" and a fraudulent trading platform that claimed he earned $15 million from his investment. Patton was contacted through Facebook and used encrypted messaging apps like WhatsApp and Signal to communicate with the scammers, who sent him a gold coin in the mail as part of the scam. He filed complaints with the FBI, the Federal Trade Commission, and the SEC, and WRTV Investigates confirmed the trading platform was fake. The Wisconsin Department of Financial Institutions filed a cease-and-desist order against "Sabrina" and the same platform, seeking $17,000 in restitution for a separate victim. The FBI reported that cryptocurrency investment scams, including pig-butchering, cost $5.8 billion in 2024, with people over 60 being the hardest hit.
20-year-old woman awarded $4.2 million after Meta and YouTube found liable for mental health harm via addictive platform design
On March 25, juries in Los Angeles, California, ruled that Meta and YouTube were liable for negligence in a case involving youth addiction and mental health. The plaintiff, a now 20-year-old woman known as Kaley G.M., claimed she became addicted to Instagram and YouTube during grade school, which contributed to her anxiety and depression. Meta was ordered to pay $4.2 million in damages, and YouTube was ordered to pay $1.8 million. The case is significant because it challenges Section 230 of the Communications Decency Act, which has previously shielded social media companies from liability. The ruling sets a legal precedent by suggesting that social media platforms can be held responsible for personal injury caused by their product design. Meta has stated it is considering an appeal.
Singapore finance director duped by deepfake Zoom call, wires $499,000
In March 2025 a finance director at a multinational firm in Singapore was tricked into transferring US$499,000 after a deep‑fake Zoom video call impersonated senior executives, including the CFO. The fraudsters used AI‑generated video and audio to simulate a boardroom meeting, convincing the director to authorize the payment. Singapore police later issued a report identifying the scheme as a sophisticated deep‑fake impersonation, highlighting emerging synthetic‑media risks for financial fraud. The case underscores the need for stronger verification protocols and AI‑detection tools such as those offered by Tookitaki’s FinCense platform.
Rise in Deepfake-Enabled Corporate Fraud Costs U.S. Companies $1.1 Billion in 2025
In 2025, U.S. corporations suffered an estimated $1.1 billion loss due to deepfake‑enabled fraud, a threefold increase from the previous year. The article cites a 2019 scam in which a British energy executive wired $243,000 after believing they were speaking with their CEO, and a recent Italian scheme that used a cloned voice of the defence minister to extract nearly €1 million. It explains how executives' public appearances provide training data for attackers, enabling synthetic videos and voice calls that authorize fraudulent transactions. The piece urges companies to develop crisis protocols, tabletop exercises, and coordinated response plans involving legal, cybersecurity, and communications teams.
Multiple Convictions for Sexual Offences in Essex Including Grooming via Snapchat and WhatsApp
In Essex, England, a series of recent court cases resulted in lengthy prison sentences for a range of sexual offences, from rape and violent assault to child sexual abuse. Among the convictions, Lewis Plane was sentenced to six years after grooming a child he met on Snapchat and WhatsApp, receiving a lifetime sexual harm prevention order. Other offenders received sentences ranging from weeks to over two decades, with cases heard at Basildon Crown Court, Southend Magistrates’ Court and Ipswich Crown Court. Essex Police and support services such as Synergy Essex coordinated the investigations and victim assistance.
Los Angeles woman loses $81,000 and home in AI deepfake romance scam
In Los Angeles, California, a woman identified as Abigail was targeted by a deep‑fake romance scam that began on Facebook and continued on WhatsApp. Scammers used AI‑generated video and voice to impersonate actor Steve Burton, persuading her to send gift cards, cash and cryptocurrency totaling $81,000. They then pressured her to sell her condominium at a steep discount to a wholesale real‑estate company, causing her to lose the equity and her home. The LAPD recorded the losses, but the funds were not recovered, and the family pursued a civil lawsuit to contest the sale.
India Hit by ₹2.68 Cr Crypto Fraud as Deepfake, Trading Apps Trap Victims
A Khammam businessman in Telangana lost ₹2.05 crore to a fake forex and crypto trading scheme run via WhatsApp by a scammer posing as "Jessica Meenakshi" between November 2025 and March 2026. Another Khammam resident was defrauded of ₹33.5 lakh through a stock scam involving a deepfake video of Finance Minister Nirmala Sitharaman between May and September 2025. In Visakhapatnam, Andhra Pradesh, residents collectively lost ₹35 lakh in a crypto investment scam, with victims lured through social media and fake apps. The total losses across Telangana and Andhra Pradesh exceeded ₹2.68 crore, and all cases are under investigation by local cybercrime units. The scams followed a consistent pattern: initial trust-building with small returns, followed by demands for larger deposits and eventual blocking of withdrawals.
Bihar man defrauded of lakhs when scammers clone his brother's voice to request urgent transfer
In Bihar, a resident of Muzaffarpur named Riyaz Ahmed was scammed out of ₹1.65 lakh by cybercriminals who used AI to clone the voice of his cousin. The fraud occurred in early 2024 and involved a scammer impersonating the victim’s cousin, who is employed in Saudi Arabia, to create a visa renewal ruse. The scammers used a fake social media account and AI-powered voice replication to deceive the victim, who transferred money after being shown a fabricated bank slip. The case was reported to the local cyber police station, and investigations are ongoing using cyber forensic techniques to trace the fraudsters' network. Authorities have issued a public advisory urging citizens to avoid suspicious calls and messages and to verify the authenticity of any financial requests. The incident highlights the growing use of AI in cybercrime and the need for increased digital security awareness.
MBA graduate in India loses Rs 9.29 lakh to pig butchering cryptocurrency scam
A 41-year-old MBA graduate from Bachupally, Hyderabad, lost Rs.9,29,786 in a pig-butchering fraud between November 5 and November 14. The victim received a Facebook friend request from a profile named Amrutha Chowdary, who claimed to have studied at the same college. She guided him through WhatsApp to a fake trading app, promising returns on gold-yield trading in US dollars. After an initial withdrawal of Rs.4,608, he was convinced to invest further, transferring Rs.8,84,394 into another bank account. When he attempted to withdraw the funds, the request failed, and he reported the incident to the cybercrime helpline 1930. Cyberabad cybercrime police have registered a case and are investigating.
WhatsApp removes 6.8 million accounts linked to pig butchering scams spreading via ChatGPT and Telegram
WhatsApp deleted over 6.8 million accounts linked to pig butchering scams, a type of fraud that combines romance and investment schemes. Scammers used AI tools like ChatGPT to craft initial messages and then shifted conversations to Telegram to carry out the fraud. These scams often involve building trust with victims before defrauding them, typically through fake investment platforms. A recent study found that crypto scams have caused over $60 billion in reported losses, with fraudulent trading platforms being the most common. Scammers also used tactics like asking victims to complete small tasks on social media before requesting real money deposits into crypto accounts. Experts warn that coordinated efforts among banks, regulators, and tech platforms are needed to combat this growing threat.
Bay Area retiree loses $500,000 life savings to pig butchering scammer posing as romantic interest
A Bay Area retiree lost $500,000 — his life savings — after being romanced online by a scammer posing as a woman. Despite warnings from family and friends, he continued wiring money to fake cryptocurrency investment platforms. The FBI and Secret Service were unable to recover the funds.
unauthorized_surveillance: David Yambio targeted in spyware attack — WhatsApp
David Yambio, an Italy‑based human rights activist and co‑founder of Refugees in Libya, revealed that Apple informed him his iPhone was targeted in a spyware attack on 13 November 2024. Yambio, a former detainee in a Libyan prison and critic of Italy’s migrant policy, was not among the 90 people notified by WhatsApp in late January about similar spyware attacks. The spyware is believed to be produced by Paragon Solutions, an Israeli cyber‑weapons company, which terminated its contract with Italy over alleged violations. Yambio sought help from CyberHub‑AM and the Citizen Lab at the University of Toronto, which is investigating the incident. The Italian government denied involvement in the alleged breaches, and Yambio has criticized the Italy‑Libya migrant pact for enabling abuses against migrants. The incident raises concerns about witness protection and digital surveillance in the context of international criminal court cases.
Meta removes 2 million accounts linked to pig butchering scam networks across its platforms
Meta removed over 2 million accounts linked to "pig-butchering" scams in 2024, which involve scammers building fake online relationships to defraud victims of cryptocurrency investments. The scams often begin on dating apps or social media platforms like Facebook, Instagram, and WhatsApp, before moving to Telegram, which is known for limited moderation. In September 2024, the FBI reported that victims lost nearly $4 billion to crypto investment scams, primarily pig-butchering. Meta announced new measures, including automatically flagging potential scam messages and collaborating with other tech companies through the Tech Against Scams coalition. The company also took down accounts linked to a scam operation in Cambodia, which had used AI tools like ChatGPT to communicate with victims. Critics, however, argue that these efforts are insufficient and too slow to address the growing scale of the problem.
NSO Group Found Liable for WhatsApp Pegasus Spyware Hacking in U.S. Court
NSO Group, a commercial spyware company, was found liable in a U.S. court for hacking WhatsApp users through its Pegasus software. The ruling marks the first time a spyware company has been held legally accountable in the U.S. for such actions. New evidence revealed that NSO used U.S.-based servers to deploy the spyware, leading to a $167 million damages verdict. The case involves Meta, Apple, and the Knight First Amendment Institute.
WPP CEO Mark Read targeted by deepfake video call scam impersonating his identity
The CEO of WPP, the world’s largest advertising company, Mark Read, was targeted by a deepfake scam involving an AI voice clone and a fake Microsoft Teams meeting. The fraudsters created a WhatsApp account using a publicly available image of Read and impersonated him during a virtual meeting with another senior executive. The scam aimed to solicit money and personal information from an agency leader but was unsuccessful. WPP confirmed the phishing attempt was prevented due to the vigilance of employees. The incident highlights the growing use of AI and deepfake technology in corporate fraud, with similar attacks targeting financial institutions and other organizations in recent years. WPP has also reported being targeted by fake websites using its brand name and is working with authorities to address the issue.
Pig butchering victim recovers $1 million after ChatGPT helps identify scam operation
A San Jose widow, Margaret Loke, lost nearly $1 million in a crypto "pig-butchering" scam after a scammer posing as a romantic partner, "Ed," convinced her to invest in fake cryptocurrency platforms. The scam, which began in May 2024 via Facebook and WhatsApp, involved fabricated investment returns and emotional manipulation. Loke sent escalating amounts, including $490,000 from her IRA and $300,000 from a second mortgage, before realizing the scam when her account "froze." After consulting ChatGPT, she was alerted to the scam and reported it to the police. The funds were traced to a bank in Malaysia, where scammers withdrew them. Federal regulators warn that such relationship-based crypto scams are a growing threat, with limited chances of recovering funds once they leave U.S. banking systems.
Pro-Modi social media network spreads AI-generated disinformation during 2024 Indian election campaign
In early May 2024, Indian Prime Minister Narendra Modi and his ruling Bharatiya Janata Party (BJP) used the term "Vote Jihad" during election campaigning, which was later adopted by affiliated groups like the Vishwa Hindu Parishad (VHP) on social media platforms such as Facebook. A report by The London Story (TLS) found at least 21 instances in March and 33 in April where the BJP’s Facebook page and affiliated accounts spread Islamophobic narratives. The disinformation campaign targeted India’s 200 million Muslim voters and was part of a broader effort to amplify divisive rhetoric between Hindus and Muslims. A study by Oxford University noted that the BJP dominated digital campaigning on platforms like YouTube and WhatsApp, while other parties struggled to respond effectively. Meta, which owns Facebook and Instagram, approved ads containing hate speech and AI-manipulated content, despite pledging to prevent such material during the election. India’s press freedom has declined significantly, ranking 161 out of 180 countries in the 2023 World Press Freedom Index.
Mohammad Muzahir and other forced labourers enslaved in Laos pig butchering scam compound
In April, a leaked WhatsApp chat revealed the working conditions of enslaved laborers in a scam compound in the Golden Triangle special economic zone in Northern Laos. The compound, known as Boshang, operated a "pig butchering" scam, defrauding victims through fake romance and crypto investment schemes. Workers, including an Indian man named Mohammad Muzahir who leaked the documents to WIRED, were trapped in debt bondage with no passports and subjected to fines, beatings, and torture. Over 11 weeks, workers defrauded victims of at least $2.2 million, but were fined heavily for minor infractions, leaving them in financial debt and unable to leave. The leaked chats showed a mix of corporate-style motivational messages and strict, punitive rules, highlighting the coercive and abusive nature of the operation.
US Treasury sanctions North Korean crypto fraud network funneling $800M to weapons programs
On March 12, 2024 the U.S. Treasury Department, via OFAC, sanctioned six individuals and two companies linked to a North Korean cryptocurrency fraud operation that moved roughly $800 million to support Pyongyang's weapons programs. The network placed North Korean nationals as remote IT workers in Western firms, used stolen credentials to siphon salaries, and converted the funds into crypto through firms such as Amnokgang Technology Development Company and Quangvietdnbg International Services Company Limited. Key perpetrators including Yun Song Guk, Hoang Minh Quang, and others were identified for managing the scheme and processing illicit transactions. The sanctions aim to disrupt the flow of illicit cryptocurrency to the North Korean regime.
Ahmet Tozal defrauded of 400,000 Turkish lira via UAI Coin pig-butchering scam
Ahmet Tozal, a 44-year-old Turkish garment worker, was scammed out of 400,000 Turkish lira (about a year's salary) in 2023 by a pig-butchering scam involving a fake cryptocurrency called UAI Coin. The scam began with a random WhatsApp message from a woman who claimed to be a wealthy businesswoman and eventually convinced him to invest. The scam, which originated in China, involves building a relationship with the victim before persuading them to invest in a fake asset. Tozal lost everything and moved to Uzbekistan to find work and pay off debts. He is one of many victims globally; others, including a Kazakhstani restaurant manager and an Indian pharmaceutical worker, also lost significant sums. Scam gangs, often based in Southeast Asia, are known to use trafficked individuals to pose as attractive women in these schemes.
75-year-old Singaporean woman loses $600,000 to AI deepfake scam impersonating Elon Musk over three years
A 75-year-old Singaporean woman lost $600,000 over three years to an AI-driven scam in which fraudsters impersonated high-profile figures like Elon Musk. The scammers used AI-generated content on platforms such as TikTok and WhatsApp to manipulate her into making repeated financial transfers. The scam was discovered in April 2025 when her daughters were alerted by police about a suspicious $67,000 transfer attempt. The victim was later diagnosed with psychosis due to the psychological impact of the scam. In response, Singapore introduced the Protection from Scams Act 2025, including Restriction Orders to block suspicious transactions and protect potential victims.
Human trafficking victims forced to operate pig butchering investment scams from Southeast Asian compounds
Pig butchering investment scams, which cost victims globally an estimated $75 billion in four years, involve human trafficking victims forced to operate the schemes in Asia. The scams typically begin with a fake message or text, followed by a romance and investment pitch. Victims are lured with promises of wealth through cryptocurrency investments, only to lose large sums of money. These scams are primarily run by organized crime groups in Southeast Asia, including Chinese and Korean syndicates. The victims on the receiving end often suffer severe financial and psychological harm, with some cases resulting in suicide. Meanwhile, the scam operators themselves are frequently victims of human trafficking, lured with job offers but then held against their will in controlled environments.
Northern Ireland MLA Cara Hunter targeted by deepfake pornography weeks before 2022 Assembly election
In April 2022, three weeks before the Northern Ireland Assembly election, SDLP MLA Cara Hunter discovered that a fabricated pornographic video depicting her likeness had been shared tens of thousands of times via WhatsApp. Hunter was defending her East Londonderry seat when the video circulated. She received vulgar messages and was harassed on the street by a man who referenced the video. Police were unable to trace the origins due to WhatsApp's encryption. Approximately six months later she was targeted by at least 15 additional AI-generated deepfake images. Hunter has since campaigned internationally for legislation criminalising deepfake sexual abuse material, given the incident's likely effect on her election results and the profound personal harm caused.