Taking romance scams to a whole new level
Yahoo boys
Up until recently, catfish perpetrators have had to work around phone and video calls so they don’t reveal their true identity. It’s easy enough to set up social media accounts using fake images to lure their victims, and relationships are then built using text applications like emails, Whatsapp, snapchat and others. Technology however has thrown a spanner in the works for scammers as it’s becoming common practice to communicate using video chat applications.
In the past, some scammers have downloaded visuals of a person talking to camera, and have used that as their video, with their own voice. To cover the issue of syncing (where the mouth and actions in the video don’t match with the voice), they’d use a video filter to make the video look like it was breaking up due to a bad internet connection. This would work until the victim became suspicious and asked them to do something that would verify it was indeed a proper video chat – like holding up their hand, or touching their face – which obviously they couldn’t do.
As technology becomes more advanced and sophisticated, the use of Deep Fakes has drawn the attention of scammers as it provides a solution to the video chat problem.
Deepfake software uses AI to create realistic fake videos or images by swapping faces, altering voices, or mimicking appearances. It can be used for entertainment, education, or malicious purposes like spreading misinformation or fraud. It’s the perfect solution for cybercriminals who can use any picture or voice they choose to generate a fake person.
Sophisticated cybercriminals can now use this software to enhance their scams. Based in Nigeria, a group known as the “Yahoo Boys” are using the technology to carry out romance scams. Similar to catfishing, they lure their victims through social media platforms like Facebook, Instagram, Tiktok, and X. Initial contact is usually made by direct messaging and using their manipulation tactics, they start to build trust. The conversation is then often taken onto other messaging applications like WhatsApp, where the interactions become more frequent and personal.
The next step is video calling and that’s where the “Yahoo Boys” use deep fake technology to change their appearance, and voice in real time. Victims are none-the-wiser and believe they are really talking to the person they have seen in pictures in the initial stages of the con. Trust continues to grow and that’s when the scammers put their real plan into action: conning their victims out of money.
Using deep fake technology however, is not a simple process. The “Yahoo Boys” utilise their IT experience and expertise to carry out the scam. This is how it’s done:
1. The scammer uses two devices, typically smartphones or a smartphone and a laptop. . One device is used for the video call with the victim, while the other operates face-swapping software. This setup enables the scammer to manipulate their appearance during the call.
2. Using the other device, the scammer activates face-swapping software that overlays a realistic digital mask onto their face. The software captures the scammer’s facial movements and expressions in real-time, transforming their appearance to match the identity they aim to impersonate. Everything from facial structure and skin tone to hair and gender can be altered, creating a highly convincing disguise.
3. During the video call, the primary device’s rear camera is positioned to capture the screen of the secondary device, which displays the deepfake. The victim sees this altered face as though it were the scammer’s actual appearance. To enhance the illusion, the devices are secured on stands, and ring lights are used for clear, stable, and well-lit visuals, making the deepfake appear authentic.
4. Throughout the interaction, the scammer speaks using their natural voice, though some setups may include voice-altering technology to match the fake identity.
Tactics used by scammers:
1. Unsolicited contact: Scammers often reach out unexpectedly via email, social media, or messaging platforms, claiming to have a business opportunity, romantic interest, or an urgent need.
2. Too-good-to-be-true offers: Be cautious of promises of large sums of money, lucrative investment opportunities, or extravagant gifts in exchange for small upfront payments or personal information.
3. Emotional manipulation: In romance scams, they may quickly express deep feelings, create emotional bonds, or fabricate sob stories (e.g., medical emergencies or family crises) to request financial help.
4. Poor grammar and spelling: Many scam messages contain errors in grammar, spelling, or punctuation, though some may appear more polished.
5. Requests for personal or financial information: Scammers may ask for sensitive details like bank account numbers, passwords, or Social Security numbers under the guise of verifying identity or completing transactions.
6. Urgency and pressure: They often use urgency to push you into making quick decisions, such as “limited time offers” or emergencies requiring immediate action.
7. Untraceable payment methods: Be wary of requests for payment through gift cards, cryptocurrency, wire transfers, or other untraceable methods.
8. Unverifiable stories or identities: Scammers may claim to be professionals, government officials, or wealthy individuals, but their stories often lack verifiable details.
9. Deepfake or altered media: Advanced scammers may use fake photos, videos, or even real-time face-swapping technology to impersonate others during video calls.
To protect yourself from scams, always verify identities by cross-checking profiles, photos, and shared details. Avoid sharing sensitive financial or personal information online unless you are absolutely sure of the recipient’s authenticity. If you encounter suspicious messages, block and report the sender immediately. Use reverse image search tools to check whether any provided photos have been stolen or misused from other sources. Lastly, trust your instincts—if something feels off, it probably is!
