Why does a familiar face make a crypto scam feel real?

A familiar face makes a crypto scam feel real because it borrows trust that was earned somewhere else. A celebrity, financial presenter, adviser, colleague or relative may be recognisable, but recognition does not prove that they approved the offer, control the account or sent the message.

The safest response is to separate the person from the request. Stop. Do not click the supplied link, send crypto, share a recovery phrase or give remote access. Leave the message or call, then check the claim through a contact route you found independently. A convincing video, voice note or screenshot is not independent evidence.

The FCA warns that crypto scams use celebrity images, professional-looking websites and manipulated prices or returns. Its guidance on pump-and-dump schemes also warns about AI-generated videos and deepfakes that impersonate public figures. The ICO says synthetic media is becoming harder to distinguish from genuine material and can be used to persuade people to make payments.

Why impersonation works

Impersonation is the use of another person’s identity, image, voice, name or apparent authority to influence a decision. It can be crude, such as a copied profile, or polished, such as a paid-looking advert that sends viewers to a fake investment page.

The familiar person does several jobs for the scammer at once:

Recognition: you already know the face or voice, so the message needs less introduction.
Borrowed expertise: a presenter, businessperson or finance commentator appears to know what they are talking about.
Social proof: if the person seems to endorse an offer, it can feel as though other people have already accepted it.
Reduced friction: trust in the person can make a new website, wallet connection or payment request feel less unusual.

None of those cues establishes who made the offer or where the money goes. A real photograph can appear beside a false claim. A genuine public figure can be quoted without permission. A real account can be cloned. A video can be altered. The name on a profile is not a secure identity check.

Why urgency makes the decision worse

Scammers often add a deadline, a limited allocation or a warning that an opportunity will disappear. That pressure narrows the time available for checking. It also encourages a person to treat hesitation as a mistake rather than as useful information.

The FCA lists unexpected contact, pressure to invest quickly and unrealistic returns as warning signs. In a crypto scam, urgency may be paired with a familiar face: the personality supplies reassurance while the deadline discourages questions.

A pause does not prove that an offer is fraudulent, and it cannot prevent every loss. It does create room to ask basic questions:

Who is legally offering this service?
What exactly is being requested: money, a wallet connection, identity information or access to an account?
Did the supposed sender contact me through a channel I can verify independently?
What happens if I do nothing today?

If the answer to the last question is “the opportunity disappears”, that is a reason to slow down, not a reason to pay.

Authority cues are not authorisation

A suit, studio, blue tick, company logo or technical dashboard can make a request look official. These are presentation cues. They do not show that a firm is authorised for the service it is offering, or that the person shown is involved.

For a firm offering financial services in the UK, use the FCA Firm Checker and the contact details shown on the FCA Register, rather than details supplied in an advert or message. The FCA says that a firm missing from its Warning List may still be unauthorised or a scam, because names can change and new firms may not yet be listed. A search result is therefore a starting point, not a guarantee.

There is another limit: most cryptoassets are not regulated in the same way as investments such as shares, and FCA registration or registration for a particular activity should not be treated as an endorsement or a promise that money is safe. Check what permission applies to the specific service. If you cannot establish that independently, do not proceed.

What deepfakes and synthetic media change

A deepfake is digitally manipulated media designed to make one person appear or sound like another. Synthetic media is a wider term that includes generated or altered images, audio and video.

The risk is not limited to a face looking slightly wrong. A scam can use a real clip with a changed voice, a generated presenter, a cloned profile or a mixture of genuine and altered material. The ICO notes that malicious synthetic media is designed to be convincing, and that detection is becoming more difficult as the technology develops. It also identifies payment fraud and the use of deepfaked identities as possible harms.

That is why there is no reliable consumer checklist that can detect every deepfake. Lip movement, lighting, hands, blinking, audio glitches and image quality may provide clues, but a clean-looking clip is not proof that it is genuine. Automated detectors can also be wrong, and a detector result does not establish who authorised a payment request.

Provenance tools, labels and watermarks may help in some settings. They do not answer every question about who created a piece of media, whether the underlying claim is true or whether the person shown authorised the offer. Treat media as one piece of information, not as permission to act.

The independent-verification rule

Verify the claim by starting somewhere else. Do not use the phone number, email address, QR code, website or social-media link provided by the person asking for money.

For a supposed public figure, visit an official website or verified account that you locate yourself and look for a clear statement about the offer. The absence of a denial does not prove the offer is genuine. For a supposed adviser or firm, type the regulator’s address yourself or use a saved bookmark, search the FCA Register, and use the register’s contact details. For a family member or colleague, call a number already stored in your phone or speak to them in person. For a friend’s social account, use a second channel that you already know belongs to them.

Ask a trusted person to review the request before you act, particularly if the request involves a large amount, a new wallet address, a recovery phrase, a passcode or remote access. A second opinion is a pause, not a psychological test and not proof that a person is vulnerable.

Use several independent facts where possible:

the identity of the sender;
the legal identity and relevant authorisation of the firm;
the destination of the payment or wallet;
the terms of the service;
a record that exists outside the supplied message or dashboard.

A screenshot of a balance or profit can be manufactured. A professional website can be built for a scam. A transaction hash can show activity on a blockchain, but it does not by itself prove who controls an address or who authorised a request. Evidence should be checked against the right question.

A shareable red-flag checklist

Before responding to a familiar face, voice or profile:

[ ] The contact arrived unexpectedly.
[ ] I am being pushed to act today or keep the offer secret.
[ ] The returns sound unusually high or are presented as easy.
[ ] The person wants payment, a wallet connection, a recovery phrase, a passcode or remote access.
[ ] The link, phone number or contact details came from the message itself.
[ ] A celebrity, expert or official-looking account is doing most of the reassuring.
[ ] The website or dashboard shows prices or profits that I cannot verify elsewhere.
[ ] I have not checked the firm and its relevant permission through the FCA’s own website.
[ ] I have not spoken to the supposed sender using a contact route I found independently.
[ ] I feel that asking questions will make me lose the opportunity.

If any box is checked, pause. This checklist cannot identify every scam or every deepfake. Its purpose is to interrupt the rush and point you towards independent checks.

If you have already paid or shared information

Contact your bank or payment provider immediately using the number on your card or statement. Preserve messages, profile URLs, emails, payment records and transaction details without forwarding the scam to other people. Do not pay a second firm that promises to recover the money for an upfront fee; the FCA warns that people targeted by scammers may be contacted again by recovery-room scammers.

In the UK, report the incident to Report Fraud and report relevant investment or financial-service scams to the FCA. The FCA says it cannot get money back for victims, but reports can help it act and protect others. If you shared a recovery phrase or private key, treat the related wallet as compromised and use the relevant security guidance; never send the phrase to someone offering to help.

Internal links

Sources

FCA, Crypto investment scams — celebrity images, professional-looking websites, manipulated prices and returns, pressure and follow-up targeting.
FCA, Pump and dump schemes — AI-generated videos and deepfakes impersonating public figures, urgency and independent research.
FCA, AI: Flipping the coin in financial services — FCA discussion of AI risks, consumer safety and data in financial services.
FCA, Warning List of unauthorised firms — Firm Checker, register contact details and limits of the Warning List.
FCA, Report a scam — reporting routes, bank contact advice and recovery-room scam warning.
ICO, Synthetic media and its identification and detection — deepfakes, detection limits, provenance, identity abuse and payment fraud.

Educational information for UK readers, not financial, legal or psychological advice. Cryptoassets are high risk and may not be regulated in the same way as other financial products.