Police expose group that applied for loans using deepfakes: at least 286 victims and over 4 million UAH in losses

According to the National Police, the scheme was organized by a 33-year-old citizen who left for Poland during the full-scale war. She involved her ex-husband and an acquaintance from Mykolaiv. According to the investigation, the woman received personal data of online banking users (financial phone numbers, passwords, confirmation codes) from unidentified sources and transferred it to her accomplices. They made unauthorized logins to the applications of Ukrainian banks, then authorized themselves in «Diya» via BankID, concluded contracts and opened accounts on behalf of at least 286 citizens. Some of them were issued loans for more than 4 million UAH, and the money was transferred to controlled accounts, converted into cryptocurrency and withdrawn in cash.

The operation was carried out by investigators of the Main Investigation Department of the National Police of Ukraine with operational support from the Security Service of Ukraine and under the procedural guidance of the Prosecutor General’s Office. Specialists from the Ministry of Digital Affairs and bank representatives were involved in the operation. During the searches, computer equipment, telephones, bank cards, draft notes and other evidence were seized.

Three members of the group were charged under Part 5 of Article 190 of the Criminal Code of Ukraine (fraud committed by an organized group on a large scale during martial law) and under Part 3 of Article 28, Part 5 of Article 361 of the Criminal Code of Ukraine (unauthorized interference in the operation of information and communication systems, which led to falsification and distortion of data processing, committed by an organized group during martial law). The sanctions of the articles provide for up to 15 years of imprisonment with confiscation of property.

Police say the scammers not only used stolen credentials, but also AI tools to bypass identity checks during remote transactions. That’s why it’s dangerous to store passwords in plain text, share verification codes with strangers, or install unknown apps that request access to messages.

Such crimes are increasing along with the spread of remote financial services. The best protection is digital hygiene: a separate «financial» number, complex passwords and a password manager, two-factor authentication, prohibiting call and SMS forwarding, and careful checking of application permissions. If you suspect a hack, you should immediately contact your bank, block access, change your passwords, and notify the cyber police.

Previously, dev.ua wrote about how the Security Service of Ukraine and the Prosecutor General’s Office stopped the activities of a criminal group that was gaining access to the bank accounts of Ukrainians.

The National Police announced fictitious employment at the KAI: 89 «dead souls» and losses to the state of UAH 16.6 million

On the topic

The National Police announced fictitious employment at the KAI: 89 «dead souls» and losses to the state of UAH 16.6 million

American scientists have learned to detect deepfakes using light signals

On the topic

American scientists have learned to detect deepfakes using light signals

AI clone of Ukrainian IT professional applied for three vacancies in IT company. Deepfake pretending to be Head of Engineering applies for AI Engineer and AI Architect positions and to foreign employers

On the topic

AI clone of Ukrainian IT professional applied for three vacancies in IT company. Deepfake pretending to be Head of Engineering applies for AI Engineer and AI Architect positions and to foreign employers

Read the country’s main IT news in our Telegram

On the topic

Read the country’s main IT news in our Telegram