Start with the offer, not the face

A famous presenter appears in a short video and says an investment platform is worth trying. The clip is tidy. The voice sounds right. Underneath it, though, is a web address you have never seen. That address matters more than the presenter’s blink rate.

Close the advert for a moment. Find the alleged endorsement somewhere the advertiser does not control, then look up the firm in your financial regulator’s own register. Use the telephone number and website printed in that register. Do not use the callback number supplied by the new ‘account manager’, however helpful they sound.

A video detector still has a place, just not at the front of the queue. Genuine footage can sit above a fraudulent link. A fake clip can advertise a real company’s name while sending money elsewhere. And no media score - high or low - can prove that the profit on a trading screen is withdrawable.

There are really three awkward questions here. Did the person make the statement? Does the named company run this exact site? May it offer this product where you live? It is tempting to collapse them into one because the face feels familiar. Resist that shortcut.

Recognise the route from advert to payment

The advert seldom opens by asking for life-changing money. It asks for a name and phone number. That small step is the hand-off. A caller then walks the new lead through a modest deposit, often while staying on the line. The copied news page has done its job and can disappear.

Next may come a WhatsApp group, a smart-looking app and a balance that rises at an almost soothing pace. None of those elements stands outside the scheme as a neutral witness. The cheerful group members, the screenshots and the support desk may all be stage scenery.

Withdrawal is where the story changes. Suddenly there is a tax, a security check or a fee to unfreeze the account. Sending that fee does not release a verified asset; it shows the caller that another request may succeed. If a ‘recovery specialist’ arrives later, start the checks again from zero. FBI/IC3 warned on 20 July 2026 about AI-made official-looking videos and spoofed complaint sites used to target people who had already lost money.

Preserve the advert without entering its funnel

Take a screenshot that includes the account name, platform, caption, date and ‘sponsored’ label, if present. Record the name of the supposed investment and the person shown. Copy the visible destination address without opening it if the platform provides a safe way to do so. Do not submit the form merely to see what happens; a working email address or telephone number is useful to a fraud operation.

If you have already opened the page, do not download its software, approve browser notifications, share your screen or sign in with an existing account. Close it and conduct the remaining checks from sites you navigate to independently. Keep the original advert details because a later report is much stronger than a cropped screenshot with no account or URL.

A Frankfurt court ruling announced in September 2026 underlines why that reporting history matters. The claimants described repeated fake adverts, almost 260 reports in one month and deletion delays of up to 62 days. Our fake-ad evidence guide explains how to record the advert, destination, platform notices and materially similar repeats before the public copy disappears.

  • Save the account name, caption, date and visible destination
  • Do not install an app or remote-access tool from the pitch
  • Do not reuse an existing password on the linked site
  • Keep messages, telephone numbers and payment instructions

Verify the endorsement and the firm separately

Search the public figure’s name together with the platform name. Check the person’s established site and accounts. For a supposed television interview, look for the complete program on the broadcaster’s own site. Search a distinctive sentence from the clip in quotation marks. If the only copies are identical adverts and thin pages that all lead to the same form, you still have no independent confirmation.

Next, find the financial regulator for your country by typing its known address yourself. Search for the legal name and confirm that it is authorized for the service being offered. In the European Union, the national competent authority is normally the useful starting point. UK users can use the FCA Firm Checker; US users can check investment professionals through Investor.gov.

A matching company name is not enough. Fraudsters clone authorized firms and reuse a name or registration number while substituting their own domain, email and telephone number. Compare all three. Call the registered firm on the number shown in the official register and ask whether the advert, adviser and web address belong to it. The absence of a warning is not approval: a new operation may not have been reported yet.

Examine the media as a separate piece of evidence

Find the earliest and highest-quality copy you can. If the clip appears to come from an interview or speech, locate the original and compare the wording. Search clear frames instead of betting the decision on an odd blink or a soft mouth. Social-media compression, dubbing and a poor connection can make authentic footage look synthetic; modern manipulation can also avoid the visual mistakes people expect.

A detector result should be read narrowly. A high synthetic-media score supports further investigation. ‘No strong synthetic signal detected’ does not mean ‘this person endorses the investment’. The fraud could use real footage with a false caption, or the edit could fall outside the model’s training. Keep the file and report details, including whether the service assessed the face, voice, whole video or only selected frames.

Content Credentials can sometimes supply a signed record of how media was created or edited. Their absence is not proof of a fake, and a valid credential does not make the financial claim true. Provenance and detection answer questions about the media; the regulator check answers a question about the business.

Read the request, not just the production quality

Guaranteed returns, ‘zero risk’, a countdown and access supposedly reserved for a handful of people are reasons to stop. So are instructions to lie to your bank, send assets to an individual or unknown crypto wallet, pay a different company, or install remote-access software so an adviser can help. An extra fee to release a withdrawal is an especially serious warning.

Imagine a familiar presenter apparently interviewing the founder of an AI trading service. The linked page looks like a newspaper story and asks only for contact details. Ten minutes later an adviser calls. You do not need to win an argument about lip-sync before declining: the interview is absent from the broadcaster’s archive, the platform is missing from the official register, and the registration number belongs to a company with a different domain and phone number. Those facts are stronger than a detector percentage.

Give the decision to someone outside the conversation. In a business, return to the normal approval path. At home, show the domain and payment instructions to a financially experienced friend or an adviser unconnected to the offer. This is not about asking permission; it breaks the urgency and artificial intimacy of a private call or group chat.

If you already shared information or sent money

Contact your bank, card issuer, exchange or payment provider immediately through its official app or telephone number. Say that the transaction may be fraudulent and follow its instructions. Do this before spending hours analyzing the video; the opportunity to stop or trace a payment is time-sensitive.

Change any password entered on the suspicious site, starting with accounts where it was reused, and enable multi-factor authentication. If you installed remote-access software or allowed screen control, disconnect the device from the network and obtain trusted security help. Tell your bank that the device may have been accessed.

Preserve adverts, messages, profile names, domains, phone numbers, wallet addresses, receipts and transaction references. Report the advert to the platform and the scheme to the financial regulator and appropriate fraud-reporting or police service in your country. Be wary of anyone who contacts you privately afterwards and guarantees recovery for an upfront fee.

  • Pause before registering, installing software or paying
  • Confirm the endorsement outside the advert’s own pages
  • Match the registered domain, email and telephone number
  • Treat a detector as one signal, never financial clearance
  • If money moved, contact the payment provider first
Automated results require source and context review.

Continue with independent verification.

Check suspicious media
Sources

Primary reading

We use original standards, regulators, public institutions and research papers wherever possible. Sources were last checked on 20 September 2026.