AI Threat Watch

Case hk-ai-faceswap-lost-id-syndicateDeepfake fraudHong Kong

Hong Kong police arrest 22 who used AI face-swaps on lost ID cards to open bank accounts

A syndicate pasted members' faces onto photos from lost Hong Kong ID cards to pass remote onboarding at seven banks, opening 19 accounts that laundered about HK$190 million; 22 people were arrested.

HighAttack using AIStatus: Under investigationVerified case file

Open in the interactive mapCite this case

Reported
Oct 10, 2025
Location
Hong Kong
Target
Seven Hong Kong banks and stored-value facilities
Severity
High
Triggered by
Hong Kong triad-linked fraud syndicate
Actor type
Criminal
Reported loss
$216K
CVE
None

What happened

A syndicate pasted members' faces onto photos from lost Hong Kong ID cards to pass remote onboarding at seven banks, opening 19 accounts that laundered about HK$190 million; 22 people were arrested.

Impact: Accounts linked to at least 14 local scams with losses of about HK$1.68 million, roughly US$216,000, and about HK$190 million in suspected criminal proceeds moved in a year.

Who triggered it

Actor: Hong Kong triad-linked fraud syndicate

Attribution: Hong Kong Island Regional Crime Unit identified two ringleaders, five core members and 15 mule account holders, some with triad backgrounds.

Motive: Obtain loans and credit cards and launder proceeds of phone, investment and shopping scams.

How it happened

Attack vector: AI face-swapping of lost ID card images used in 23 online account applications between September 2024 and April 2025; 19 passed KYC checks.

Root cause: Remote onboarding relied on selfie-to-ID matching that could be defeated by synthetic faces built on genuine stolen documents.

Timeline

  1. Syndicate begins submitting AI-altered account applications
  2. Police make arrests across Hong Kong over two days
  3. Police announce 22 arrests and HK$190 million in laundered funds

Response

Arrests for conspiracy to defraud and money laundering; phones, laptops and printers seized; regulators and banks told to strengthen remote identity checks.

Current status: Under investigation

Sources (open in a new tab)

Cite this case

Hong Kong police arrest 22 who used AI face-swaps on lost ID cards to open bank accounts. AI Threat Watch, case hk-ai-faceswap-lost-id-syndicate, Oct 10, 2025. https://aithreat.io/cases/hk-ai-faceswap-lost-id-syndicate/

Permanent link: https://aithreat.io/cases/hk-ai-faceswap-lost-id-syndicate/

This case file in other languages: EnglishFrançaisEspañolالعربية中文