Insights — Scams

When scammers use your name to run an investment scam

Impersonation scams move fast and the response has to move faster — the first 24 hours determine how far it spreads.


Singapore has seen a documented rise in scams that impersonate real executives and public figures — fabricated endorsement videos, cloned company pages, WhatsApp broadcasts using a founder's name and photo to solicit deposits into a fake scheme. The Singapore Police Force, MAS and the Cyber Security Agency have issued joint advisories on scams involving this kind of digital manipulation, including cases using AI-generated impersonation.

What's actually being used against you

  • Name and photo, straightforwardly lifted. The lowest-effort version — a screenshot from a real interview or LinkedIn photo, attached to a fake trading platform.
  • Deepfake video or voice. AI-generated footage of you "endorsing" a scheme, increasingly convincing and increasingly cheap to produce.
  • Cloned company assets. A near-identical website or app using your branding, sometimes registered on a confusingly similar domain.
  • Impersonated communication. Messages sent as if from you or your company, often through WhatsApp broadcasts or fake company email addresses.

The first 24 hours

Report to the platform immediately, using the impersonation-specific channel, not general content flagging. Meta, Google and most major platforms have expedited paths for impersonation and scam-ad reports that move faster than standard removal requests.

File a police report. This matters even without a personal financial loss — the impersonation itself is being used to defraud third parties, and a formal report creates a record platforms and banks take seriously.

Publish a clear, dated statement. A short notice on your own verified channels stating plainly that the scheme is not affiliated with you gives anyone who encounters the fake material something authoritative to check against.

Notify anyone who might plausibly be targeted. Existing clients, investors and employees are the most likely audience for a scam using your name specifically — a direct heads-up closes the loop faster than waiting for search visibility to catch up.

The regulatory backdrop moving in your favour

Singapore's Online Safety (Relief and Accountability) Bill, passed in late 2025, established an Online Safety Commission with powers to direct takedowns, restrict accounts used by perpetrators, and assist victims in identifying anonymous actors for civil enforcement. Combined with enhanced banking safeguards introduced from October 2025, the reporting infrastructure for this specific problem has genuinely improved — worth citing directly when pressing a platform or bank for faster action.

The goal in the first 24 hours isn't to win the legal case. It's to create a record and a correction fast enough that the scheme runs out of runway before it scales.

After the immediate response

Search visibility takes longer to resolve than the platform-level takedown. Once the immediate spread is contained, the same displacement and correction work covered in our guide to reputation repair applies — building and holding an accurate search presence so that anyone researching you later finds the correction, not the scam.

Common questions

Straight answers

How do I know if a scam is using my name?

Usually a customer, contact or employee forwards it first — a fake WhatsApp broadcast, a cloned website, a deepfake video ad. Set a standing Google Alert on your name and company as a baseline, but assume the first report will come from a human, not a tool.

Should I report this to the police even if I haven't lost money?

Yes. Impersonation used to defraud others is a crime regardless of whether you personally lost anything, and a police report creates a formal record that platforms and banks take more seriously than a private complaint.

Can I get a fake ad or cloned site taken down quickly?

Meta, Google and most platforms have expedited reporting paths for impersonation and scam ads specifically, faster than standard content-removal requests. A clear report — your identity, the fake asset, and evidence it isn't you — usually moves quickest.

Related

Deepfake and AI impersonation scams using executive likeness

This moved from a theoretical risk to a documented, multimillion-dollar problem in Singapore inside two years.

Read more

PR agency or reputation management agency: who do you need

The two disciplines get bundled in pitch decks more than they're bundled in practice — here's how to tell what

Read more

Search engine reputation management, step by step

SERM gets sold as a black box. The actual process is a specific, describable sequence.

Read more

Private enquiry

Send us what you are dealing with.

We will tell you which route applies before you spend anything.