AI Face Models Target European Victims in Southeast Asian Scam Operations

An investigation by Wired into dozens of Telegram recruitment channels reveals a growing market for "AI face models" who make up to 100 deepfake video calls per day to manipulate potential scam victims. These operations primarily target Europeans and Americans through sophisticated romance and investment fraud schemes.

Deepfake Technology Enables Industrial-Scale Fraud

The recruitment model represents an evolution in how criminal enterprises leverage AI technology for financial fraud. Scam operations based in Cambodia, Myanmar, and other Southeast Asian locations now maintain dedicated "AI rooms" where models conduct face-swapped video calls with potential victims.

According to cybercrime investigator Hieu Minh Ngo from Vietnamese nonprofit ChongLuaDao, these operations provide specialized software that swaps faces in real-time during video calls. The technology allows scammers to maintain fake personas throughout extended relationship-building phases before attempting to extract money from victims.

Most applicants are women in their early twenties from Turkey, Russia, Ukraine, Belarus, and various Asian countries. Job postings demand multilingual capabilities, with preferences for Western accents and Chinese language skills to target specific victim demographics.

Recruitment Terms Reveal Exploitative Working Conditions

Analysis of job advertisements reveals concerning working conditions that blur the line between employment and exploitation. Standard requirements include:

• 100-150 video calls per daily quotas
• Working hours from 10 PM to 10 AM Cambodia time
• One full day and four half-days off monthly
• Mandatory passport retention by employers
• Salary offers up to $7,000 monthly

Many advertisements specify that "filters may be used, but ensure the image is realistic" and prohibit wigs during calls. Some postings explicitly state that companies will retain workers' passports for "visa and work permit management," a common human trafficking control mechanism.

EOS Collective, which supports scam industry victims, reports that even willing participants face physical abuse and sexual harassment. European victims have witnessed Italian models being beaten within compound facilities, highlighting the dangerous conditions regardless of initial consent.

Platform Oversight and Detection Challenges

Telegram's role in facilitating these recruitment operations raises questions about platform accountability for criminal activity. When presented with two dozen recruitment channels by Wired, Telegram did not remove the identified channels.

A Telegram spokesperson stated that "content that encourages or enables scams is explicitly forbidden" but noted that legitimate uses of likeness require "case-by-case" examination. This approach creates enforcement gaps that criminal organizations exploit.

Cybersecurity experts identify several warning indicators in these recruitment channels:

• High salary offers for the Southeast Asian job market
• Locations in known scamming hubs like Sihanoukville
• Requirements for Chinese language skills
• Vague job descriptions avoiding explicit scam terminology

Implications for European Fraud Prevention

For European financial institutions and regulatory bodies, these developments highlight the need for enhanced deepfake detection capabilities in customer verification processes. The industrial scale of these operations, combined with improving AI technology, poses significant challenges for traditional fraud prevention methods.

The multilingual targeting strategy, particularly the preference for Western accents and European languages, suggests these operations specifically design campaigns for European markets. This targeting pattern aligns with broader trends in international cybercrime focusing on jurisdictions with higher disposable incomes and less awareness of pig-butchering scam techniques.

The emergence of AI face model recruitment represents a concerning evolution in how criminal enterprises industrialize fraud operations, combining human trafficking, advanced AI technology, and social engineering to target victims across international borders.