The creator economy depends on one simple assumption: the person on the other side of the screen is who they claim to be.
That assumption is increasingly under attack.
Security researchers have identified a scam in which fraudsters use AI-generated deepfakes to impersonate OnlyFans creators, according to a report from Security Affairs. The scheme uses synthetic video and cloned voices to convince fans they're interacting with genuine creators, before directing them to fraudulent payment pages or persuading them to pay for content that doesn't exist.
It's the latest evolution of AI-powered identity fraud, and unlikely to be the last.
How the Scam Works
The process is straightforward.
Scammers collect publicly available photos, videos and audio from legitimate creators before feeding that material into AI tools capable of generating realistic video and voice clones.
The synthetic content is then distributed through fake or compromised social media accounts, encouraging followers to continue conversations or make payments away from official platforms.
Because OnlyFans is built around direct creator-to-fan relationships, impersonation scams are particularly convincing. Subscribers already expect personalised interaction, making it easier for fraudsters to exploit that trust.
As security researchers note, modern deepfake tools have made impersonation "cheap, fast and increasingly convincing."
Why It's Happening Now
The technology needed to carry out these scams has become dramatically more accessible.
Voice-cloning services can now reproduce someone's speech from only a few seconds of audio, while AI video generation has advanced to the point where facial expressions and lip movements appear increasingly realistic.
That means attacks that once required specialist skills can now be carried out quickly and at scale.
The creator economy was always a likely target. Similar AI-driven fraud has already affected corporate executives, political campaigns and celebrity endorsements. As generative AI improves, criminals are expanding into any industry where personal identity has commercial value.
A Growing Platform Challenge
For platforms such as OnlyFans, these scams create problems on multiple fronts.
Creators risk losing both income and reputation when criminals misuse their likeness. Fans lose money, while confidence in the platform itself can decline.
Legal protections are also struggling to keep pace. In many jurisdictions, deepfake-specific legislation remains limited, leaving victims with few options beyond reporting fraudulent accounts and relying on platforms to respond quickly.
Security experts increasingly recommend treating unexpected payment requests—even those appearing to come from familiar creators—with caution.
The Bigger Industry Signal
This story reflects a broader shift across the AI landscape.
Deepfake fraud is no longer reserved for high-profile political figures or Fortune 500 executives. It is becoming an everyday criminal tool targeting creators, influencers, small businesses and ordinary consumers.
As synthetic media becomes more convincing, pressure will continue to grow for stronger identity verification, content authentication and provenance technologies across digital platforms.
As cybersecurity expert Bruce Schneier has often observed, "AI is a force multiplier for attackers." That principle is becoming increasingly visible as generative AI lowers both the cost and technical barriers to sophisticated online fraud.
What This Means for Miami
Miami's creator economy, spanning influencers, digital agencies, entertainment businesses and content entrepreneurs, has become an increasingly important part of the region's technology ecosystem.
This latest scam is a reminder that AI-powered identity fraud is no longer a theoretical threat. South Florida cybersecurity firms developing deepfake detection, identity verification and content authentication technologies are addressing a market with rapidly growing demand.
For local creators and businesses built on personal brands, protecting digital identity and actively monitoring for impersonation should now be considered an essential part of doing business online.
