Cybercriminals are now weaponizing AI and Telegram’s privacy features to create convincing deepfake video scams, targeting corporate leaders in Russia. This article reveals their tactics, real-world impacts, and critical countermeasures for businesses navigating this emerging threat.

​1. Deepfake Video Scams: The New Frontier of Telegram Fraud

Fraudsters impersonate delivery personnel to initiate video calls with victims, secretly recording their faces using Telegram’s screen-sharing feature. These recordings are processed through AI tools to generate silent “video loops” that mimic natural movements, enabling scammers to bypass basic verification checks.

​2. AI Cloning Techniques: From Video Capture to Financial Theft

Attackers use the stolen video loops to:

• ​Impersonate Executives: Send manipulated videos to subordinates demanding urgent wire transfers.
• ​Extract Credentials: Pose as IT teams to gain access to Gosuslugi (Russia’s public services portal) or corporate systems.
• ​Data Theft: Infiltrate company networks using stolen biometric data.

VTB Bank confirms a 120% surge in such cases since January 2025, with losses averaging $45,000 per incident.

​3. Corporate Vulnerabilities: Why Executives Are Prime Targets

High-profile individuals face heightened risks due to:

• ​Publicly Available Media Footage: Scraped from interviews or social media for AI training.
• ​Authority Bias: Employees rarely question urgent requests from “senior leaders.”
• ​Telegram’s Encryption: End-to-end encryption complicates digital forensics.

​4. Legislative Response: Russia’s Anti-Fraud Law

On March 25, 2025, Russia’s State Duma passed measures including:

• ​ATM Fraud Detection: Banks must screen cash withdrawals for coercion signs.
• ​Caller ID Verification: Telecoms must display organization names during calls.
• ​Foreign SMS Ban: Government agencies prohibited from using overseas messaging services.

​5. Defense Strategies: Protecting Against AI-Driven Scams

• ​Multi-Factor Authentication (MFA): Mandate biometric + OTP verification for financial transactions.
• ​Employee Training: Teach staff to spot AI artifacts (unnatural blinking, lip-sync errors).
• ​AI Detection Tools: Deploy platforms like Deepware Scanner to flag synthetic media.

Conclusion
The convergence of Telegram’s privacy features and accessible AI tools has created a perfect storm for corporate fraud. While Russia’s new laws mark progress, businesses must adopt AI-aware security frameworks to combat evolving deepfake threats.