YouTube Warns of AI-Generated Phishing Scam Featuring CEO's Deepfake

YouTube warns of AI-generated video of its CEO used in phishing attacks

YouTube warns that scammers are using an AI-generated video featuring the company's CEO in phishing attacks to steal creators' credentials. The attackers are sharing it as a private video with targeted users via emails claiming YouTube is changing its monetization policy. "We're aware that phishers have been sharing private videos to send false videos, including an AI generated video of YouTube's CEO Neal Mohan announcing changes in monetization," the online video sharing platform warned in a pinned post on its official community website. "YouTube and its employees will never attempt to contact you or share information through a private video. If a video is shared privately with you claiming to be from YouTube, the video is a phishing scam." Ironically, the phishing emails also warn that YouTube will never share information or contact users via private videos, prompting the recipients to report the channel sending the emails if they look suspicious. The description of the video linked in the phishing emails asked those who open it to click a link that brings them to a page (studio.youtube-plus[.]com) where they're asked to "confirm the updated YouTube Partner Program (YPP) terms to continue monetizing your content and accessing all features" by signing into their account. However, this page is designed to steal their credentials instead. The scammers also create a sense of urgency by threatening that their accounts will be restricted for seven days if they fail to confirm compliance with the new rules (these restrictions would allegedly include uploading new videos, editing old videos, receiving monetization, and receiving earned monetization funds). After entering their credentials, creators are told their "channel is now pending" and to "open the document in the video description for all the necessary information" (even when entering a random email and password). YouTube users have been receiving such emails since late January while the YouTube team says it began investigating this campaign in mid-February. YouTube warns not to click links embedded in these emails, as they will likely redirect them to phishing sites that attempt to steal their credentials or infect them with malware. "Many phishers actively target Creators by trying to find ways to impersonate YouTube by exploiting in-platform features to link to malicious content," the company added. "Please always be aware and make sure not to open untrusted links or files!" However, many creators have already fallen victim to these attacks, reporting that the scammers hijacked their channels and used them to broadcast live cryptocurrency scam streams. YouTube provides tips on avoiding and reporting phishing emails in its help center and more details on similar phishing campaigns. Since August 2024, YouTube has also provided a new support assistant to help users recover and secure hacked YouTube accounts after getting hacked.

YouTube warns of phishing video using its CEO as bait

Hackers are using stolen accounts to broadcast crypto scams YouTube is warning its users of a new phishing campaign using an AI-generated video of its CEO Neal Mohan as bait. In a post on its official community website, the company said it is "aware that phishers have been sharing private videos to send false videos, including an AI generated video of YouTube's CEO Neal Mohan announcing changes in monetization." "YouTube and its employees will never attempt to contact you or share information through a private video. If a video is shared privately with you claiming to be from YouTube, the video is a phishing scam," YouTube said in the pinned post. "Do not click these links as the videos will likely lead to phishing sites that can install malware or steal your credentials." The attack goes like this: scammers used AI to create a deepfake video of the YouTube CEO discussing changes in monetization on the platform. They then shared it as a private video with their targets. In the description of the video is a link that leads the victims to the phishing landing page - studio.youtube-plus[dot]com. There, they're prompted to "confirm the updated YouTube Partner Program (YPP) terms", to continue monetizing their content and accessing YouTube's features - but obviously, by "confirming" the terms, the victims would just be sharing their credentials with the attackers. Furthermore, in true phishing fashion, crooks added a false sense of urgency, threatening the victims that their accounts will be restricted for a week if they do not comply with the new rules. That includes the inability to add videos, receive monetization, and more. Once the victims enter their credentials, the page says the account is under review. The campaign appears to have been active since late January 2025, and "many creators" have already fallen victim, reporting that their channels had been hijacked and used to broadcast live cryptocurrency scam streams.

Scammers use deepfake of YouTube's CEO in new phishing attack

YouTube Premium is getting a big price hike internationally Summary Scammers created an AI deepfake video of YouTube CEO Neal Mohan making an important announcement about monetization changes. The video is being shared to creators as a private video, and includes a link. YouTube says they never communicate via private videos and that this is a phishing scam, and warns users to not click on the link. Scammers can be just as creative as the creators they attempt to scam. Case in point: the latest phishing attack that uses AI-generated deepfake videos of YouTube CEO Neal Mohan announcing monetization changes. Related Google Veo: The ultrarealistic AI video generation tool explained Close-ups, panning, and all the film-school tricks at your fingertips Posts YouTube released an official warning today about a fraudulent video shared privately with creators in an attempt to install malware and steal credentials. YouTube wants to remind everyone it will never send private videos to communicate platform changes. If you receive a video claiming to be from YouTube, it is a phishing attempt. Here's how the scam works Source: Reddit This latest phishing attack follows a similar pattern to other attacks we've reported on in recent months. It works like this: Creators receive an email or private message with a private YouTube video. The video features a deepfake AI-generated version of YouTube's CEO, Neal Mohan, making an official statement about changes to the platform's monetization policies. The message instructs users to click a link or download a file in order to ensure they continue to get paid. Once the creator clicks the link, it's game over. Malware is installed, credentials are stolen, and financial data is hacked. YouTube creators are frequent targets for scammers looking to exploit their accounts. They have large followings and are heavily dependent on that one single platform for their living, making it harder to immediately recognize the deception. YouTube's official warning to creators YouTube wants to reinforce its policy against private video communications. The company issued a warning to all creators to watch out for this latest phishing attempt. YouTube and its employees will never attempt to contact you or share information through a private video. If a video is shared privately with you claiming to be from YouTube, the video is a phishing scam. Do not click these links as the videos will likely lead to phishing sites that can install malware or steal your credentials. YouTube said not to click on these links and to report such videos here. You can avoid falling for this scam, and many others, by ignoring private videos that claim to be from YouTube, and to never click on links in unsolicited messages or emails. You should also report suspicious content through YouTube's built-in tools.

YouTube Warns of Phishing Attempts Via Fake AI Video of Its CEO

Disclaimer: This content generated by AI & may have errors or hallucinations. Edit before use. Read our Terms of use Video sharing platform YouTube has alerted users about an artificial intelligence (AI)-generated video of the company's CEO, Neal Mohan, in which he is purportedly seen announcing changes in monetisation policy. YouTube stated that this was likely a phishing attempt, and that following instructions shared in the video could lead to phishing sites, which could install malware into users' devices or steal their credentials, as per a blog post. "YouTube and its employees will never attempt to contact you or share information through a private video. If a video is shared privately with you claiming to be from YouTube, the video is a phishing scam", the company said. Further explaining, the platform said that many phishers actively target creators by using in-platform features to link to malicious content. The company suggested users to avoid opening files or links they do not trust. AI-generated deepfakes are plaguing personal reputation, leading to financial misinformation, harming electoral discourse, and even spreading sexually explicit imagery across social media platforms. It is something that has been reported previously, with the Indian Government even mulling a separate legislation to tackle the dissemination of such questionable use of AI. Although there has since been no movement from the Indian government with regard to the same, what several public figures like actor Jackie Shroff have done in recent years is access the benefits of securing their personality rights, thereby disallowing any unpermitted use of their name, voice, image, likeness of other unique aspects of their identities. MediaNama has discussed earlier if the eventual rise in AI use as well as personality rights protection, during the years to come, could result in legal battles in India. While definitive answers are scarce in terms of which way disruptions in the field of AI are headed, regulating AI development could be an effective way to regulate AI responses when it comes to frontier AI development. Herein, however, instances such as the United States and European Union refusing to sign the recent Paris AI Action Summit joint statement on "Safe" AI brings in questions of unilateral efforts as opposed to a globally agreed-upon standpoint on the issue.