HazardPeople used AI as a toolSeverity M: moderate, 2/5Confirmed: a company, official or court statement

Facebook scam ads used AI-generated images of Singapore Police officers to promote fake scam recovery services

The Singapore Police Force warned of a scam variant in which Facebook advertisements featured AI-generated images of SPF officers promoting fake scam recovery services. The ads led users to an online form asking for contact details and then prompted them to provide a One-Time Password sent via WhatsApp or SMS, which could expose personal credentials or allow unauthorised access to their accounts. The Police said they will never advertise scam recovery services and urged the public to use ScamShield, enable WhatsApp Two-Step Verification and verify claims through official SPF channels.

What the AI did

Scammers used AI to create images of Singapore Police Force officers, which appeared in Facebook ads for fake scam recovery services. It has not been reported which AI tool was used.

First reported October 23, 2026 · Added to the register November 1, 2026 · 1 source

Affected: Singapore Police Force
Country: Singapore
When it happened: Not stated in the sources
First reported: October 23, 2026

Show the source wording

What this means for you

Could this affect you?

Yes

If you or your customers are in Singapore and use Facebook. Members of the public in Singapore who click on these Facebook ads are asked for their contact details and then a one-time password (a short code sent by text or WhatsApp to confirm a login). Police said handing over the code could expose their personal credentials or let scammers get into their accounts.

What to check

Never share one-time passwords with anyone.
Enable WhatsApp Two-Step Verification.
Review the devices linked to your WhatsApp account.
Treat any advertised scam recovery service, especially one using police imagery, as fraud and verify through official channels.

Areas of your AI programme this touches

Deepfakes and impersonation Fraud and payment controls Access control and credentials Content and platform moderation

Every fact and its source (4)

Platform carrying the adsFacebook advertisements
“promoted through advertisements on Facebook”^[1]
Scam methodVictims prompted to give OTP sent via WhatsApp or SMS
“users would be prompted to provide a One-Time Password”^[1]
Potential harmDisclosure of credentials or unauthorised account access
“This could result in the disclosure of their personal credentials, or the unauthorised access to their accounts.”^[1]
Police responsePolice will never advertise scam recovery services
“The Police will never advertise scam recovery services.”^[1]

Sources

SPF | Police Advisory On Fake Advertisements Of Ai-Generated Police Officers Promoting Scam Recovery Services
police.gov.sg · October 23, 2026

How this record is classified. Severity M (2/5): harm to individuals, or a policy breach with limited reach. OECD level: hazard, an event that could plausibly have led to harm. Evidence: Confirmed, meaning a company, official or court statement.

The facts in At a glance and in Every fact and its source are quoted from the sources listed. The summary, What the AI did and What this means for you are written from those sources and checked against them automatically before publication. Records reflect what has been disclosed, not everything that has happened. Incidents are found through news feeds and the GDELT Project.