A group of Chinese nationals used AI and Deepfake technology to fabricate explicit photos and videos of Vietnamese victims, sending them along with threatening messages to their phones, social media accounts, homes, and workplaces to extort money.

On the afternoon of April 25, the Ministry of Public Security reported a growing number of incidents in which businesspeople and government officials in Vietnam received messages from strange numbers containing fabricated “sensitive” images and threats demanding payment. The threats warned that the materials would be distributed at their workplaces or online if demands were not met.

One victim shared that they received a message stating: “Hello, I am a private investigator hired to investigate you. Based on the evidence provided by my client, I have been secretly monitoring your activities and discovered indecent, immoral behavior while in your position of power. I have recorded inappropriate video footage of you...

If you do not want to lose your job, reputation, or wish to resolve this discreetly within three days, transfer 80,000 USDT (a cryptocurrency) to me… Otherwise, I will post all collected images and video clips on major websites, paste them around your home and workplace, and report you to your superiors and related agencies, destroying your reputation...”

In response, senior officials from the Ministry of Public Security directed the Criminal Police Department to investigate and handle the matter according to legal procedures.

Investigations revealed that the group consisted of Chinese nationals who either entered Vietnam or collaborated with local Vietnamese involved in services such as taxis, currency exchange, or SIM card sales along the Vietnam-China border to obtain internationally roaming phone SIMs.

After acquiring the SIMs, the suspects returned to China (near Lao Cai city in Lao Cai Province and Mong Cai city in Quang Ninh Province), where they used AI and Deepfake tools to produce manipulated images and videos of victims. They then sent threats via phone or social media, or reentered Vietnam to deliver physical letters to victims’ homes and offices, demanding cryptocurrency transfers to digital wallets they controlled in order to move the extorted funds.

According to investigators, the suspects rented bank accounts from Vietnamese citizens, housed them in high-rise buildings and special zones in Cambodia, and used them to launder money. The funds were cycled through various accounts to obscure their origin before being converted into USDT via platforms such as Binance and OKX.

The Criminal Police Department has coordinated with local law enforcement across multiple provinces to summon Vietnamese nationals involved, and is working with Chinese authorities to investigate and prosecute the foreign suspects.

Nearly 1,000 victims, $8 million in damages

On February 18, 2025, the Ministry of Public Security’s Investigation Department initiated legal proceedings in a case involving extortion and money laundering across Binh Duong, Binh Phuoc, and other provinces, with foreign involvement. Several suspects were charged, and Chinese authorities have since detained nine individuals, holding seven for further investigation.

In April 2025, the Criminal Police Department worked with Bac Giang Police to arrest three individuals accused of participating in the scam.

Investigators discovered that the network had opened 71 bank accounts, rented or borrowed others, and used facial recognition to register accounts under false pretenses, facilitating the flow of illicit funds and supporting the Chinese masterminds based in Cambodia. Scams included fake explicit content, dating apps, impersonating tax or police officials, and courier fraud.

Authorities estimate the scam involved nearly 1,000 victims nationwide, with total financial losses around 200 billion VND (approximately $8 million USD).

In light of these developments, the Ministry of Public Security issued the following warnings:

Do not rent out or lend your bank accounts to others.

Do not register phone SIMs for other individuals.

Businesses providing telecom services must record customer data, especially for foreign buyers.

Cryptocurrency transactions must include identity verification to prevent their use in money laundering or other illegal activities.

Avoid posting personal photos on social media and stay alert to suspicious calls.

If you suspect fraud or are being blackmailed, remain calm and immediately report the incident to local authorities or call the Criminal Police Department’s hotline: 0692.345.860.

T. Nhung