I Tracked Celebrity Deepfake Crypto Scams Across 6,007 Ads — Here's How They Steal Millions

By D. Ortiz · Published 2026-04-09 · 3831-word read

I investigated how scammers use AI-generated deepfakes of Elon Musk, MrBeast, and other public figures to promote fraudulent crypto giveaways and fake trading platforms. CryptoKiller's analysis of 6,007 ad creatives across 10 scam brands found celebrity impersonation in every single one, while Australian regulators documented $30 million in losses from a single reporting period. This investigation maps the full pipeline — from synthetic video production to the wallets where stolen funds disappe…

I investigated how scammers use AI-generated deepfakes of Elon Musk, MrBeast, and other public figures to promote fraudulent crypto giveaways and fake trading platforms. CryptoKiller's analysis of 6,007 ad creatives across 10 scam brands found celebrity impersonation in every single one, while Australian regulators documented $30 million in losses from a single reporting period. This investigation maps the full pipeline — from synthetic video production to the wallets where stolen funds disappear.

What Is a Celebrity Deepfake Crypto Scam?

A celebrity deepfake crypto scam uses AI-generated video or audio that impersonates a trusted public figure — Elon Musk, a famous athlete, a popular YouTuber — to promote a fake cryptocurrency giveaway or fraudulent trading platform. The celebrity never agreed to appear. The video is synthetic. The platform it directs you to is designed to steal your deposit.

I started pulling this thread after Western Australia's Department of Mines, Industry Regulation and Safety published a number that stopped me cold: $30 million lost to celebrity fake investment scams in a single reporting period. That's one state, one window of time.

CryptoKiller's own analysis of 10 scam brands across 6,007 ad creatives confirmed something I suspected: celebrity impersonation appeared in all 10 brands investigated. Every single one. Elon Musk is the most cloned figure because his association with cryptocurrency is already part of public consciousness — scammers exploit that existing trust to bypass skepticism.

How Do Scammers Build and Distribute Deepfake Ads?

I spent weeks studying the production pipeline these operations use, and the Palo Alto Unit 42 research on deepfake scam campaigns gave me the clearest technical map. The process breaks into 3 stages: sourcing, synthesis, and distribution.

Stage 1 — Sourcing. Scammers scrape publicly available video of the target celebrity. Press conferences, podcast appearances, and YouTube interviews provide hours of face and voice data. A 30-second clip requires surprisingly little source material to generate.

Stage 2 — Synthesis. Off-the-shelf AI tools generate a face-swapped or lip-synced video where the celebrity appears to speak scripted lines about a crypto opportunity. Unit 42 researchers documented how these campaigns use coordinated domain clusters — registering dozens of lookalike URLs within days — to host the resulting videos and landing pages.

Stage 3 — Distribution. The finished deepfake becomes a paid ad on Meta's network or appears in hijacked YouTube livestreams. Scammers make slight visual edits — adding borders, cropping frames, overlaying text — to evade automated content moderation.

"Deepfake scam campaigns exhibited a multi-layered infrastructure involving coordinated domains, social media ad purchases, and rapid rotation of creative assets." — Palo Alto Unit 42 research team

CryptoKiller tracked the most common velocity trend across investigated brands as "surging," meaning ad volume is accelerating, not declining. For a deeper look at how these AI-generated scam ads target victims across platforms, I've mapped the full ad ecosystem separately.

Did a celebrity really endorse that? Maybe not. Scammers use fake celebrity endorsements to build trust and get people to act quickly.

— FTC Consumer Alert, FTC Consumer Alert — 'Did a celebrity really endorse THAT? Maybe not', published April 2024

Which Celebrities Are Most Frequently Impersonated?

Three names appeared over and over in the scam creatives I reviewed and in the regulatory warnings I collected: Elon Musk, MrBeast (Jimmy Donaldson), and various professional athletes.

Musk's impersonation dominates because scammers exploit his genuine public commentary on Bitcoin and Dogecoin. The FTC's consumer alert specifically warns that deepfake Musk videos are among the most commonly reported.

MrBeast deepfakes typically direct viewers to spoofed giveaway pages that collect personal data and crypto deposits. I found variants using his voice, his set design, even his thumbnail style.

The SEC case against a former NBA star adds a different angle. The Commission charged the player not for being deepfaked, but for actually misleading crypto investors through undisclosed paid promotions. ✓ Verified That case matters here because it shows the line between synthetic fraud and real celebrity misconduct — both damage investors, but only one involves a willing participant.

Deepfake scam campaigns exhibited a multi-layered infrastructure involving coordinated domains, social media ad purchases, and rapid rotation of creative assets.

— Palo Alto Unit 42, Palo Alto Unit 42 — 'The Emerging Dynamics of Deepfake Scam Campaigns on the Web', web-scale analysis of deepfake campaign domains and hosting infrastructure, 2024

The Fake Giveaway Playbook: Step-by-Step Fraud Mechanics

I mapped the exact sequence these scams follow by cross-referencing FTC consumer alerts, Scamwatch case reports, and the scam brands CryptoKiller has investigated. Every celebrity giveaway scam I found operates on the same 5-step playbook.

1. The Hook: A deepfake video ad appears in your social media feed or a YouTube livestream. The cloned celebrity announces a limited-time crypto giveaway — "send 1 BTC, receive 2 BTC back" is the most common script.
2. The Landing Page: Clicking the ad takes you to a site designed to mimic a legitimate exchange or the celebrity's official brand. Domain names often include the celebrity's name plus words like "giveaway," "live," or "event."
3. The Trust Layer: The page displays fake transaction histories, countdown timers, and fabricated testimonials showing other users who supposedly received doubled returns. I've investigated how scam dashboards fabricate trading profits to create this illusion.
4. The Deposit: Victims send cryptocurrency to a wallet address displayed on the page. The interface may show a "pending" return to keep the victim waiting.
5. The Vanish: The wallet drains. The site goes offline or redirects. The funds move through mixers or chain-hopping services within hours.

Scamwatch's alerts confirmed what I saw in CryptoKiller's data: the average scam score across all 10 investigated brands sits at 42 out of 100, but the highest-threat brand — Quantum AI — scores 89 out of 100. That brand uses celebrity deepfakes aggressively.

Investor alert warning that Meta platforms have become a primary delivery channel for fake investment ads, specifically identifying paid ad placements targeting New York consumers.

— New York Attorney General Letitia James, NY AG Press Release — 'Attorney General James Warns New Yorkers of Investment Scams on Meta Platforms', 2026

How Can You Tell a Deepfake Celebrity Video From a Real One?

I asked myself the same question every victim asks: could I actually tell? After reviewing dozens of deepfake samples and comparing them against verified footage, I assembled a checklist that takes under 2 minutes to run.

Visual red flags:
- Unnatural blinking — either too frequent, too slow, or completely absent for several seconds
- Skin texture that looks slightly waxy or smoothed, especially around the jawline and forehead
- Warped or blurred edges where the face meets the hair or background

Audio red flags:
- Flat emotional delivery — the voice hits the right words but misses natural emphasis
- Lip movements that lag 100-200 milliseconds behind the audio track
- Sentences that sound clipped at the start and end, as if stitched together from fragments

Verification steps (do these before acting on any celebrity crypto offer):
1. Go to the celebrity's verified accounts on X, Instagram, or YouTube. Search for the specific promotion. If it doesn't appear there, it's fake.
2. Search the exact giveaway claim in quotes on Google. Scam reports will surface fast.
3. Check the URL of the landing page against the celebrity's known official domains.

"Did a celebrity really endorse that? Maybe not. Scammers use fake celebrity endorsements to build trust and get people to act quickly." — FTC Consumer Alert, April 2024

Santander issued consumer warnings about celebrity-endorsed crypto scams and implemented transaction-level intervention to flag suspected scam payments before processing.

— Santander UK, Santander UK Press Release — 'Santander warns about celebrity endorsed crypto scams'

Where Are These Scam Ads Being Served and Why Do Platforms Struggle to Stop Them?

New York Attorney General Letitia James issued an investor alert that named Meta platforms — Facebook and Instagram — as a primary delivery channel for fake investment ads targeting New Yorkers. I found the alert notable not for the warning itself, but for its specificity: the AG's office identified paid ad placements, not organic posts, as the distribution method.

The UK's Financial Conduct Authority echoed this from a different angle. The FCA's crypto scam guidance warns consumers that unregulated crypto promotions routinely appear in social media feeds alongside legitimate financial content, making them harder to distinguish.

Why can't platforms catch these? Three reasons I uncovered:

• Volume: CryptoKiller's analysis tracked 6,007 ad creatives across just 10 scam brands in 8 countries. Each creative is a slightly different variant — different crop, different text overlay, different celebrity — forcing moderation systems to evaluate thousands of near-duplicates.
• Rotation speed: Scam operators swap creatives and landing page URLs every 24-48 hours, staying ahead of takedown cycles.
• Quality escalation: Unit 42 documented that deepfake quality has improved to the point where automated detection tools trained on older synthetic media miss current-generation fakes.

Platforms aren't ignoring the problem. But the arms race favors the attackers, and it shows. For a broader view of how AI-driven scam campaigns operate across these channels, I've detailed the full pattern in our 2026 guide to AI and deepfake crypto scams.

How to Report a Celebrity Crypto Scam and Protect Others

Reporting matters even if you think your money is gone. Every report feeds the databases regulators use to identify, track, and eventually shut down scam operations. I've organized the channels by jurisdiction because I've seen too many victims report to the wrong agency and lose time.

United States:
- File a fraud report at ReportFraud.ftc.gov
- Submit a complaint to the FBI's Internet Crime Complaint Center (IC3) at ic3.gov
- Contact your state attorney general's consumer protection office

United Kingdom:
- Report to Action Fraud (the national fraud reporting centre)
- Use the FCA's ScamSmart tool to check whether a firm is authorized
- Santander's internal warning program flags suspected scam payments before they process — ask your bank if they offer similar friction

Australia:
- Lodge a report with Scamwatch at scamwatch.gov.au
- Contact your state's consumer protection body (e.g., WA's DMIRS)

Before you report, preserve this evidence:
- Screenshots of the ad and landing page (with URLs visible)
- The wallet address you sent funds to
- Transaction IDs from your exchange or wallet
- Any email or chat correspondence with the scam operators

Santander's approach — intercepting suspicious transactions at the bank level and warning customers before funds leave — is a model I'd like to see more financial institutions adopt. ✓ Verified

Back to blog