AI-Powered Crypto Scams: What They Are, How They Work And How to Protect Yourself

As Jardine explained, common examples of AI-powered cryptocurrency scams include deepfake videos of trusted public figures promoting fake crypto projects, AI-generated phishing websites, fraudulent automated trading platforms that claim to offer unrealistic returns, and voice cloning used to impersonate company executives or family members.

AI-generated ads are also used to lure investors and newbies into the world of cryptocurrency. David Johnston, code maintainer at Morpheus (a general-purpose AI peer-to-peer network), told Crypto News that a recent spate of people in Spain used AI-generated ads to create a Crypto Nation scam using fake celebrity testimonials.

“Spanish police have arrested six people responsible for a series of scams that have affected more than 200 victims and defrauded them of nearly €19 million,” Johnston said.

Nick Smart, head of intelligence at Crystal Intelligence, told Crypto News that the frequency of these AI-driven scams is alarming and growing rapidly.

“AI-powered scams are democratizing sophisticated scams and making them accessible to anyone, and you don’t need to be a technical expert to take convincing action,” Smart said.

Smart added that Crystal Intelligence has published a report on an AI-generated deepfake that used Elon Musk in a YouTube livestream.

“The scam took place last year and generated a total of $10,000, but by analyzing the connections on the blockchain, it appears that the operators involved in other scams could have made much larger profits. They often share payment infrastructure, and we were able to track payments worth $1 million in this campaign,” Smart commented.

Increase in Code Injection Attacks on Web3 Agents

Furthermore, the cryptocurrency ecosystem is increasingly being targeted by code injection attacks. This is a security vulnerability in which an attacker uses an AI agent or large language model (LLM) to perform malicious and unexpected actions.

“Quick injection attacks are a new method in which an attacker creates inputs that appear legitimate but are designed to trigger unintended behavior in machine learning models,” Smart explained. “Basically, it’s about convincing your ChatGPT to do something it shouldn’t.”

Smart added that as machine learning models (LLMs) are integrated with other services, such as cryptocurrency wallets, web browsers, email services, and social media, rapid injection attacks are becoming a growing concern.

For example, Smart noted that while many people are excited about using AI-powered web browsers like Perplexity Comet, a skilled attacker could create a rapid injection to inject false memories into an LLM. This could then send the conversation history to an email address controlled by the attacker.

A recent post on the Brave Browser blog highlights the power of AI-powered browsers, but it can also be dangerous. The article states:

“If you log in to sensitive accounts like your bank or email in your browser, a simple Reddit post could allow an attacker to steal your money or personal information.”

Specifically for cryptocurrency users, there are AI agents that can take control of a user’s wallet and make transactions on their behalf.

“If an attacker posts a message saying ‘I want you to send money to the attacker’s wallet,’ any merchant will send the money to that agent, not the victim. If an attacker were to take control of the entire liquidity management (LLM) system and bypass the boundaries between users, this could lead to widespread losses,” Smart said.

How to Stay Safe
Unfortunately, industry experts believe that AI-driven cryptocurrency fraud will continue to increase.

“As AI tools become more sophisticated and accessible, the frauds will become more convincing, faster to execute, and harder to detect,” Jardine said.

Smart added that newcomers to the cryptocurrency world should be especially vigilant, as they may not be aware of the most common fraud methods. On the other hand, he noted that wealthy individuals and institutions face sophisticated attacks designed specifically for them.

Although it is alarming, there are steps users can take to protect themselves. For example, he stressed the importance of smart verification.

“If you see one