AI in action · Investor protection
Six US Regulators: AI Makes Fake Regulators Convincing
AI is making impersonation scams more convincing, even fake messages from regulators, six US agencies warned. Fraudsters now cite real SEC filings as fake proof.
Some of the most persuasive investment scams now borrow the authority of the regulators themselves. In a joint investor bulletin issued for World Investor Week, the annual campaign led by the International Organization of Securities Commissions, the SEC, the Commodity Futures Trading Commission, FINRA, the Securities Investor Protection Corporation, the National Futures Association and the North American Securities Administrators Association warned that relationship scams and impersonation scams are rising, and that fraudsters use technology such as AI to make impersonations of people, firms and even regulators more convincing. The SEC announced it on October 5, the campaign's tenth anniversary.
The impersonations take many forms. According to the bulletin, as summarised by TheCorporateCounsel.net, calls, voicemails, texts, social-media and app messages, emails, letters and certificates may falsely appear to come from the SEC, FINRA, the CFTC, the NFA or other bodies. They often ask for shareholdings, account numbers, trading activity, PINs, passwords, digital wallet private keys or seed phrases. Some fraudsters pose as SIPC and demand a fee for protection or for recovering lost assets; the bulletin is blunt that "SIPC will never require payment to obtain protection or assist in recovery."
The newest twist uses real public filings. Fraudsters have pointed investors to exempt reporting adviser and Form D filings to claim, falsely, that they are registered with the SEC, or have shown fake SEC certificates. Others have shown victims Form 4 filings, the reports company insiders file when they trade, as supposed confirmation that the investor's share purchase went through, when no trade took place and the money was simply taken. A document that genuinely sits on the SEC's EDGAR system can look like proof while proving nothing about the person showing it.
Relationship scams follow a slower script. A stranger makes contact by text, social media or a messaging app, builds a personal connection over weeks, and only then introduces an investment, often in crypto, with a platform that shows rising balances until the victim tries to withdraw. AI tools make each step cheaper: fluent messages in any language, convincing profile photos and, increasingly, cloned voices and video of real people.
The defence the regulators recommend is procedural rather than technical. Treat any unsolicited contact claiming to be from a regulator or investor-protection body with scepticism; verify it by calling the organisation on a number listed on its own website, never one supplied by the caller; and check anyone offering investments through Investor.gov, FINRA BrokerCheck or the NFA's BASIC system before sending money or personal data. "Do not invest with anyone who misrepresents that they're registered with the SEC or mischaracterizes SEC filings," the bulletin says. Genuine regulators do not ask for passwords or seed phrases, and do not charge to recover losses.
Sources: SEC — Press release 2026-101, SEC Coordinates with Global Financial Regulators to Raise Fraud Awareness During World Investor Week (Oct 5, 2026); Investor.gov — World Investor Week 2026: Investor Bulletin; TheCorporateCounsel.net — Protecting Investors: SEC & Global Regulators Flag Impersonation Schemes, by Liz Dunshee (Oct 7, 2026)