Gujarat: हाईटेक ठगी का खतरनाक खेल, एआई से बनाया नकली चेहरा और कर दिया फ्रॉड — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 01, 2026

Severity: HIGH | View Full Scam Details

AI Face Phishing Alert: Gujarat Scam Steals Crores in 2026

A dangerous new scam is targeting Indians by using AI-generated fake faces to create fake social media profiles and trick victims into giving away their money and information.

What Is the Gujarat: हाईटेक ठगी का खतरनाक खेल, एआई से बनाया नकली चेहरा और कर दिया फ्रॉड?

The "Gujarat: हाईटेक ठगी का खतरनाक खेल, एआई से बनाया नकली चेहरा और कर दिया फ्रॉड" scam translates to "Gujarat: Dangerous game of high-tech fraud, fake face created with AI and fraud committed." This scam, which originated in Gujarat and is now spreading across India, involves fraudsters using sophisticated Artificial Intelligence (AI) technology to generate incredibly realistic fake faces. These AI-generated faces are then used to create fake profiles on social media platforms like Facebook and Instagram. The goal? To trick innocent people into parting with their money, sensitive personal information, or both.

These scammers are targeting everyday Indians, from young adults looking for romance to older citizens seeking investment opportunities. The scale of this AI phishing scam is alarming, with victims reporting losses ranging from a few thousand INR to several lakhs. While specific official advisories directly naming this scam are still emerging, both the Reserve Bank of India (RBI) and the Indian Computer Emergency Response Team (CERT-In) have repeatedly warned about the dangers of online fraud, phishing, and AI-powered scams. Initiatives like the Indian Cyber Crime Coordination Centre (I4C) are working to combat these threats, but awareness is our strongest defence.

This scam exploits a weakness: our inherent trust in human faces. When we see a friendly face, especially on a platform we trust, we are more likely to let our guard down. Scammers are banking on this.

How This Scam Works — Step by Step

Here's how these AI face phishing scammers operate:

1. Profile Creation: The scammer uses AI software to generate a realistic-looking face. This face is then used to create a fake profile on Facebook, Instagram, or even dating apps. They add details that make the profile appear legitimate, such as friends, shared interests, and photos (also often AI-generated).
2. Friend Request/Initial Contact: The scammer sends a friend request or an initial message to the potential victim. This message is often generic and friendly, designed to start a conversation.
3. Building Trust: Over time, the scammer engages with the victim, sharing stories, offering compliments, and building a seemingly genuine connection. This can take days, weeks, or even months, depending on the victim's level of suspicion.
4. The Pitch: Once trust is established, the scammer introduces the "opportunity." This could be an investment scheme with guaranteed high returns, a business proposal, a request for financial assistance due to a fabricated emergency, or even a romantic advance coupled with a request for money.
5. The Transaction: The scammer asks the victim to send money via UPI, bank transfer, or even cryptocurrency. They may pressure the victim by claiming it’s a limited-time offer or an urgent situation.
6. Disappearance: Once the money is sent, the scammer disappears, often blocking the victim and deleting the fake profile. The victim is left with no way to recover their funds.

Real Warning Signs to Watch For

• New friend requests from unknown individuals with very few mutual connections. Be cautious of someone you've never met reaching out, especially if their profile seems too good to be true.
• Profile pictures that look too perfect or professionally done. These could be AI-generated or stolen from elsewhere online.
• Inconsistent profile information. Does the person's claimed location match their spoken accent? Do their job titles align with their skills?
• Requests for money early in the relationship. No matter how convincing the sob story or investment opportunity, never send money to someone you've only met online.
• Pressure to act quickly. Scammers often create a sense of urgency to prevent you from thinking clearly or seeking advice.
• Reluctance to video chat or meet in person. This is a major red flag, as it prevents you from verifying the person's identity.
• Grammatical errors and inconsistencies in their messages. While not always the case, it can be a sign they aren't who they claim to be.

What Happens to Victims

The impact of AI face phishing scams can be devastating. Victims not only lose significant amounts of money, often their life savings, but also suffer from emotional distress, including feelings of shame, embarrassment, and betrayal. The financial loss can lead to debt, strained relationships, and even mental health issues.

In India, the misuse of stolen data is a serious concern. Scammers may use fraudulently obtained Aadhaar details or PAN information to apply for loans, open bank accounts, or even commit other crimes in the victim's name. SIM swapping, where scammers transfer your mobile number to a SIM card they control, is also a common tactic, allowing them to intercept OTPs and access your accounts. Even when a victim reports the fraud, recovering funds lost through UPI or bank transfers can be a long and difficult process.

What RBI and CERT-In Say

The RBI regularly issues warnings about online banking fraud and encourages users to be vigilant. They advise against sharing sensitive information like OTPs, PINs, and CVV numbers with anyone. CERT-In issues advisories about various cyber threats, including phishing and social engineering attacks. Although a dedicated advisory on "AI face phishing" is not yet available, their general guidelines regarding safe online practices apply directly to this threat. Both organisations emphasize the importance of reporting cybercrime incidents to the appropriate authorities. The national cybercrime reporting portal is a crucial resource (cybercrime.gov.in). In case of financial fraud, immediate reporting to the concerned bank is of utmost importance, which can help in initiating the process to potentially reverse the fraudulent transaction. You can also call the cybercrime helpline at 1930.

How to Protect Yourself

1. Be wary of unsolicited friend requests and messages from strangers. Always verify the identity of new contacts before engaging with them.
2. Reverse image search profile pictures. Use Google Images or TinEye to see if the profile picture is being used elsewhere online. This can help you identify fake or stolen images.
3. Never share personal or financial information with someone you've only met online. This includes bank account details, credit card numbers, Aadhaar details, and OTPs.
4. Be skeptical of investment opportunities or other offers that seem too good to be true. If it sounds too good to be true, it probably is.
5. Enable two-factor authentication (2FA) on all your important accounts. This adds an extra layer of security and makes it more difficult for scammers to access your accounts, even if they have your password.
6. If you suspect a scam, stop communicating with the scammer immediately. Block their profile and report them to the social media platform.
7. Trust your gut. If something feels off or suspicious, it probably is. Don't ignore your intuition.

What to Do If You've Been Targeted

1. Report the incident immediately to the National Cyber Crime Reporting Portal (cybercrime.gov.in). This is crucial for tracking and investigating cybercrimes.
2. Call the cybercrime helpline at 1930. They can provide guidance and assistance.
3. Contact your bank and report the fraudulent transaction. Ask them to freeze your account and initiate a chargeback if possible.
4. File a formal complaint with your local police station. Provide them with all the details of the scam, including screenshots of conversations and transaction records.
5. Change your passwords on all your online accounts. Use strong, unique passwords and enable two-factor authentication wherever possible.
6. Be vigilant for follow-up scams. Scammers may try to target you again, posing as recovery services or law enforcement.

Frequently Asked Questions

Q: How can I tell if a profile picture is AI-generated?

A: It can be tricky, but look for telltale signs like overly smooth skin, unnatural lighting, or inconsistencies in the background. Reverse image search can also help, as can AI image detectors (though these are not always perfect).

Q: What if I only shared my phone number with the scammer? Is that dangerous?

A: Sharing your phone number can make you vulnerable to SIM swapping and other scams. Be extra cautious about suspicious calls or messages.

Q: Can I get my money back if I've been scammed?

A: It's difficult, but not impossible. Report the fraud to your bank and the cybercrime authorities immediately. The sooner you report, the better your chances of recovering your funds.

Stay safe online! Always verify suspicious messages and profiles at BharatSecure.app.