Threat Intelligence Neutral 5

Over a Dozen Reports in Days: Deepfake Economist Fuels $M Pump-and-Dump Losses

A surge in pump-and-dump scams leveraging deepfake impersonations of economist Tom Piotrowski has hit Australian retirees, with ASIC logging more than a dozen cases and millions in losses. The campaign highlights the weaponisation of generative AI and social media for social engineering attacks against vulnerable demographics.

· 4 min read · Verified by 4 sources ·
Share

Key Takeaways

  • A surge in pump-and-dump scams leveraging deepfake impersonations of economist Tom Piotrowski has hit Australian retirees, with ASIC logging more than a dozen cases and millions in losses.
  • The campaign highlights the weaponisation of generative AI and social media for social engineering attacks against vulnerable demographics.

Mentioned

Tom Piotrowski person Scott Pape person Andrew Forrest person Alan Kirkland person Australian Securities and Investments Commission (ASIC) company National Australia Bank (NAB) company NAB.AX CommSec company Social media platforms company Messaging apps technology Older Australian investors company

Key Intelligence

Key Facts

  1. 1ASIC has received more than a dozen reports of pump-and-dump scams in the past few days, with estimated victim losses running into the millions of dollars.
  2. 2Scammers impersonated Tom Piotrowski, using his name and image in social media and messaging app ads to promote fraudulent stock investments.
  3. 3The campaign deliberately targets Australians nearing retirement, exploiting their accumulated superannuation savings and limited sharemarket experience.
  4. 4Financial author Scott Pape (the Barefoot Investor) warned six weeks earlier that hundreds of deepfake AI posts were offering fake financial advice under his name.
  5. 5Piotrowski’s recent high-profile move from CommSec to NAB’s nabtrade provided scammers with a timely hook to lend credibility to the fraud.
  6. 6Similar deepfake impersonation attacks have targeted iron ore magnate Andrew 'Twiggy' Forrest, indicating a broader pattern of celebrity endorsement investment scams.

We suspect scammers are deliberately targeting Australians nearing retirement. They know many people in this age group have accumulated retirement savings and are looking for investment opportunities.

Alan Kirkland Commissioner, Australian Securities and Investments Commission

Commenting on the recent surge in pump-and-dump scam reports

Who's Affected

Tom Piotrowski
personNegative
Older Australian investors
groupNegative
ASIC
organizationNegative
Social media platforms
organizationNegative

Analysis

For cybersecurity professionals, this is a textbook case of the convergence of deepfake technology, social engineering, and financial crime. By perfectly mimicking the face and voice of a trusted market analyst, attackers bypassed traditional email filters—operating directly on social media and encrypted chat—to manipulate stock prices and drain retirement savings. The attack surface now extends to AI-generated personas, requiring a fundamental rethinking of identity verification across public communications.

A disturbing new wave of online investment fraud is targeting older Australians through the mass impersonation of trusted financial personalities. The Australian Securities and Investments Commission (ASIC) has confirmed receiving more than a dozen reports in recent days of pump-and-dump scams using the name and likeness of high-profile economist and markets analyst Tom Piotrowski. Losses are already estimated to run into the millions of dollars. This is not an isolated incident—similar deepfake and impersonation campaigns have recently exploited the identities of financial author Scott Pape and billionaire Andrew Forrest, signaling a sophisticated escalation in the tactics of online fraudsters.

The Australian Securities and Investments Commission (ASIC) has confirmed receiving more than a dozen reports in recent days of pump-and-dump scams using the name and likeness of high-profile economist and markets analyst Tom Piotrowski.

Pump-and-dump scams are a classic market manipulation scheme where fraudsters artificially inflate the price of a low-value stock (often a penny stock or obscure cryptocurrency) through false or misleading promotional materials, then sell off their own holdings at the peak, causing the price to crash and leaving victims with worthless shares. In this latest iteration, scammers are leveraging social media platforms and encrypted messaging apps to disseminate fake advertisements and investment tips featuring doctored images and videos of trusted experts. The use of deepfake AI technology—only a few months after Scott Pape publicly warned of hundreds of deepfake posts bearing his own image—makes these endorsements appear authentic, dramatically lowering the guard of potential victims.

ASIC commissioner Alan Kirkland stated that the scammers are deliberately targeting Australians nearing retirement, a cohort known to have amassed significant superannuation savings and to be actively seeking income-generating investment opportunities. Many in this age group have only a passing familiarity with the sharemarket, relying on media figures like Piotrowski—a regular fixture on financial television and a recent addition to NAB’s nabtrade platform—for investment education. The emotional toll is severe; Piotrowski himself described the situation as heartbreaking, knowing that hard-working people are being defrauded using his stolen identity.

The modus operandi is a textbook social engineering attack. Impersonated accounts on platforms such as Facebook, Instagram, WhatsApp, or Telegram post glowing endorsements of a little-known stock, often accompanied by fake news articles or manipulated video clips. Once a critical mass of retail investors buys in, the orchestrators dump their pre-accumulated shares, crashing the price. The entire operation can unfold over a matter of hours, leaving authorities little time to intervene. This speed, combined with the use of end-to-end encrypted messaging services and the ephemeral nature of social media content, makes attribution and prosecution extremely challenging.

The scale of the current campaign is alarming. In just the past few days, more than a dozen victims have come forward, with collective losses already in the millions. Given the typical under-reporting of such crimes—often due to embarrassment or uncertainty about recourse—the real figures are likely much higher. Moreover, the fraud represents a direct threat to the financial wellbeing of retirees and to public confidence in digital financial services.

The regulatory response has been swift in rhetoric but limited in operational tools. ASIC has warned of the trend and urged consumers to verify investment advice through official channels. Yet the decentralized, cross-border nature of the threat requires cooperation from tech platforms, law enforcement, and international regulators. Social media companies have begun deploying AI-powered detection tools to identify and remove deepfake content, but scammers continuously adapt, using newly created accounts and moving conversations to private chats where monitoring is minimal.

What to Watch

The impersonation of Tom Piotrowski is particularly insidious because his recent career move from CommSec to NAB’s nabtrade had generated fresh media coverage, providing scammers with a timely hook. The fraudsters capitalized on this real-world event to craft campaigns that blended legitimate financial news with fabricated investment advice, further blurring the line between truth and deception.

Looking forward, the security community must prepare for the inevitable weaponization of even more advanced generative AI. As deepfake technology becomes more accessible and more convincing, the impersonation of public figures for financial crimes will increase in both frequency and sophistication. Financial institutions, regulators, and technology firms will need to collaborate on real-time identity verification systems, watermarking of legitimate official communications, and robust public education campaigns that inoculate consumers—especially vulnerable demographics—against these scams. The heartbreaking human cost, as Piotrowski articulated, is a stark reminder that cybersecurity failures can translate directly into shattered lives.

Sources

Sources

Based on 4 source articles

Cite This Page

"Over a Dozen Reports in Days: Deepfake Economist Fuels $M Pump-and-Dump Losses." Cyber Intelligence Brief, July 19, 2026. https://getcyberbrief.com/story/deepfake-economist-pump-dump-scams-cyber-threat

How we covered this story

Every story in our cybersecurity coverage is assembled from multiple primary sources, cross-referenced for factual consistency, and scored along three independent dimensions: sentiment, operational impact, and source-cluster confidence. Single-source rumors and unverifiable claims do not pass our editorial gate. When a story shows "Verified by N sources" with N≥2, the development is independently corroborated; when N=1, we mark it explicitly so readers can weigh the signal accordingly.

Impact scoring uses a 1-10 scale weighted toward regulatory, financial, and operational consequence rather than coverage volume. A topic that runs in every outlet but moves no real decisions ranks lower than a niche regulatory filing that reshapes how operators in the cybersecurity space have to behave. Read our full methodology for the scoring rubric, our glossary for term definitions, and our trends index for the longitudinal view across the beat.

Sources are only linked to a story once they clear our classification pipeline at a minimum 35 percent relevance threshold. According to that methodology, reviewed July 2026, this follows multi-source corroboration standards recommended by journalism research bodies such as the Reuters Institute for the Study of Journalism.

See something wrong in this story — a wrong fact, a broken source link, a misattributed entity? Report a data issue.