AI Deepfakes and Fake PAC Sites: FBI Warns of Election Fraud Targeting Voters

Fraudsters are preparing to exploit the upcoming US midterm elections by using AI-generated deepfakes and sophisticated phishing schemes to steal financial data and personal identities, according to the FBI. The agency warns that these campaigns are already active, targeting voters with convincing fake donation portals and investment scams that promise returns based on election outcomes.

How it unfolded

• Thousands of websites were spotted preparing for election season, including phishing sites and fake donation portals.
• Scammers launched campaign investment pool schemes asking victims to pay in for promised returns if candidates win.
• Fake political action committee sites requested donations that were kept by fraudsters rather than used for campaigns.

Who is affected

American voters and donors are at risk of losing finances and personal data to these scams. The FBI notes that fake merchandise sites also advertise clothing with political logos that never arrive after purchase. Additionally, citizens receiving mass text messages about voter registration deadlines may hand over sensitive information to fake sites, leading to identity theft.

The fix

No official patch or software update exists for this type of social engineering threat, as it relies on human deception rather than a software vulnerability. The FBI has issued warnings to help the public recognize these schemes, but no technical fix has been confirmed yet. Organizations should rely on user awareness and verification processes to mitigate these risks.

What made it possible

Teams usually see success in these attacks when urgency overrides standard verification habits. Check whether communication channels are official before sharing data or money. Scammers exploit the natural anxiety around deadlines and civic duty. Verify the source of any request for funds or personal details through independent means. Do not rely on the sender's identity alone, as deepfakes can mimic trusted voices and faces convincingly.

Background: Identity theft

Monitor for impossible travel, privilege escalation attempts, and unusual data exfiltration volumes. Correlate authentication logs with file access records to spot accounts hijacked for long-term data harvesting. Check for dormant account activation and unexpected API key usage.

Read the full guide: Detect Identity Theft: Log Signals and Hidden Blind Spots

What to do and how to stay safe: FBI

• Verify the authenticity of any website requesting donations or voter registration details by checking official government or campaign URLs.
• Be skeptical of unsolicited text messages claiming urgent voter registration deadlines or offering investment opportunities tied to election results.
• Monitor financial accounts for unauthorized transactions after interacting with any election-related communications or websites.
• Report suspicious emails, texts, or websites to the FBI or relevant cybersecurity authorities to help track these campaigns.

Step-by-step guide: DDoS Attack Mechanics: Answers to 10 Critical Questions

General security guidance from the RedTeam Tribune newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

What types of scams are targeting voters this election cycle?

Scammers are using fake donation portals, campaign investment pools, fake merchandise sites, and voter registration phishing texts.

Which countries are involved in election interference?

Iran, Russia, and China are launching disinformation and misinformation campaigns aimed at polarizing voters across the political spectrum.

How do scammers use AI in these campaigns?

AI-generated imagery and deepfakes are used to make scams more convincing, helping fraudsters create realistic fake personas and content.