Home » Current Focus » Online Safety Series » The Deepfake Dilemma: I Spy an AI Scam
“I spy with my little eye… something that looks and sounds real… but isn’t quite right.” A voice message from your boss. A video of a celebrity. A FaceTime call from your “child” begging for help.
Though these might not be real, the threat of deepfake scams is very real.
AI is making it easier than ever for criminals to create convincing fake videos, fake voices, and fake identities, and Australians are being targeted every day. Some people lose money. Others lose trust, confidence, and peace of mind.
So, let’s play a quick round of I Spy, but with a twist… you’re not looking for a hidden object, you are looking for the signs that something is wrong.
I spy a face that doesn’t match the voice
Deepfake videos can look extremely convincing at first glance, but they often fall apart when you look closely.
Look out for these red flags:
- Lips slightly out of sync with the words
- Strange blinking (too much, too little, or oddly timed)
- Unnatural facial movement (stiff cheeks, weird smiles, “rubbery” skin)
- Odd lighting or shadows that don’t match the room
- Blurry edges around hair, glasses, earrings, or the jawline
- Teeth and tongue glitches (AI often struggles here)
Quick check: Pause the video and look at the eyes, mouth, and jawline. Deepfakes often struggle with detail.
I spy a voice that sounds familiar but feels off
Criminals don’t need a studio recording to clone a voice. A few seconds from a TikTok, Instagram story, voicemail greeting, or podcast can sometimes be enough.
Watch for these warning signs:
- The voice sounds right, but the emotion feels wrong
- Odd pacing, robotic pauses, or strange pronunciation
- A flat tone where there should be urgency or warmth
- The caller avoids engaging in conversation and repeats the same phrase
- The message is short, rushed, and demands immediate action
Big red flag: “Don’t tell anyone.”
That line is designed to stop you from checking the story.
I spy an urgent call for help
This is one of the most common deepfake scam tactics: create panic so you don’t think.
You might receive:
- A call from “your child” saying they’ve been in an accident
- A voice message from a “friend” saying they need money now
- A video call from a “manager” requesting an urgent transfer
- A message from “police” warning you about suspicious activity
- A call from “immigration”, saying your visa or residency is at risk unless you act immediately
Pressure tactics to watch for:
- “You have to do this right now.”
- “If you hang up, it will get worse.”
- “I’m embarrassed, don’t tell Mum or Dad.”
- “This is confidential.”
Criminals rely on stress and speed, because the faster you act, the less you verify.
I spy a message that looks official but feels too scripted
AI scams aren’t just about video and voice. Criminals use AI to write messages that look polished, professional, and totally believable.
Look for these scam clues:
- A request to pay via gift cards, crypto, or bank transfer
- A “new bank account” sent by email with little explanation
- A strange email address (one letter off, extra numbers)
- A link that doesn’t match the organisation’s real website
- “Your account is locked” messages with threats or deadlines
Pro tip: Don’t trust the formatting. AI can write like a lawyer, a bank, or a CEO. Professional doesn’t mean legitimate.
I spy a video call that doesn’t feel right
Some scammers now use deepfakes in live calls. It can feel confronting, especially if the face looks like someone you know.
Warning signs include:
- The person won’t turn their head fully
- They avoid good lighting or stay in a shadowy room
- They keep the camera shaky or zoomed in too close
- Their face freezes or glitches when they speak
- They resist simple requests like “wave to me” or “show me the room”
Try this safe test:
Ask them to do something random and specific.
“Touch your ear and say today’s date.”
Deepfakes often struggle when the script changes.
I spy a scam that knows too much
This part is scary: scammers may know your name, workplace, family details, even your voice.
That information often comes from:
- Social media posts
- Public profiles
- Data leaks
- Previous scam attempts
- Shared photos, voice notes, or videos
The trap is simple: the scam feels believable because they already have enough details to make it personal.
What to do if you suspect a deepfake scam (your 30-second checklist)
1) Stop
Don’t send money. Don’t click the link. Don’t keep talking.
2) Verify
Call the person back using a number you already trust (not one they give you).
Or message them through a different platform.
3) Ask a “proof question”
Something only the real person would know, like:
- “What was the name of our old dog?”
- “Where did we have lunch last week?”
- “What did you buy at Bunnings yesterday?”
4) Screenshot and save
Keep the message, email, number, and any links.
5) Report it
If you see suspicious activity or believe a scam is targeting Victorians, report it to Crime Stoppers Victoria.
How to make yourself harder to target (without going offline forever)
- Tighten your privacy settings. Limit who can see your videos, voice notes, and family details.
- Be careful what you post publicly. Even a “harmless” birthday video can be used for voice cloning.
- Use multi-factor authentication (MFA), especially for email, banking, and social accounts.
- Create a family password. A simple code word only your family knows. If someone calls with an “emergency,” you ask for it.
- Slow down. Deepfake scams thrive on panic. Your best defence is taking all the time you need to verify authenticity.
Final round: I spy your gut feeling
If something feels off, it probably is.
Deepfakes are designed to trick your eyes and ears, but they can’t always trick your instincts. If you’re feeling pressured, confused, rushed, or uneasy, take a step back and verify the source.
Because when it comes to AI scams, the best time to spot the warning signs is before you hit send.
I spy with my little eye a smarter and harder target.
We’ve partnered with BankVic to help keep our community safe from scams and criminal activity while online! Stay up to date with the latest tips and information in one convenient place, empowering you to prevent online crime and outsmart scammers. Together, we can create a safer internet for everyone!
Read articles here.
Been scammed?
Step 1
If you have given any financial details or have already lost money, contact your bank immediately.
It’s also important to change your passwords, monitor your accounts closely, and consider placing a fraud alert on your credit file.
Step 2
Report the scam to police at cyber.gov.au or at your nearest police station.
Additionally, report the scam to Scamwatch and your local authorities to help prevent others from falling victim.
If you think you have been scammed online, IDCARE can help for free! Call 1800 595 160 or visit their website www.idcare.org
Step 3
Getting scammed online does not mean you are not smart. Cybercrime keeps changing, so anyone can be a target. Do not be embarrassed or hard on yourself! Learn about new scams and take steps to stay safe instead.
If you need support after falling victim to a scam talk to friends and family or contact:
Lifeline: 13 11 14
Beyond Blue: 1300 22 4636
Step 4
If you have given any financial details or have already lost money, contact your bank immediately.aFinally, talk about different types of emerging scams and if you have been scammed share your experience with family and friends so they can better recognise the signs of scams.
Smart Scam Guide
Download a comprehensive guide to spotting scams. Download to learn about the most common scams and what to do if you have fallen victim to one.