Case Library / Agentic AI Attacks (AI-Powered Social Engineering) / Abubakari Twins / Ohio $15M AI-Driven Romance Fraud Ring

Abubakari Twins / Ohio $15M AI-Driven Romance Fraud Ring

DOJ alleges Ghanaian twins Jamal and Kamal Abubakari and U.S.-based Amanda Opoku-Boachie ran an AI-video-enabled romance fraud ring that used fictitious female personas to defraud 130+ older Americans of $15 million+ between 2024 and 2026.

Share:

Reviewed by the Social Engineering Examples team.

What Happened

On May 14, 2026, the U.S. Attorney's Office for the Northern District of Ohio and FBI Cleveland announced the unsealing of an indictment in United States v. Jamal Abubakari, et al., charging Ghanaian twin brothers Jamal Abubakari (22) and Kamal Abubakari (22), plus U.S.-based Amanda Joy Opoku-Boachie (53), with conspiracy to commit wire fraud and money laundering. Prosecutors allege that from about July 2024 through April 2026 the defendants targeted older Americans on dating websites and social media, using fictitious female personas built with the help of AI-driven video platforms to establish romantic relationships, then induced victims to wire money to conspiracy-controlled accounts before funds were routed to co-conspirators in Ghana and elsewhere. All three were arrested in Virginia and ordered detained. On June 4, 2026, DOJ's broader Ohio fraud rollout quantified the scheme at more than $15 million in losses from more than 130 victims nationwide and disclosed that Ghanaian search-and-arrest operations had seized more than $3 million in assets (a Lamborghini, Tesla Cybertruck, Mercedes-Benz, and BMW). The rollout also announced the launch of the FBI's Most Wanted Fraudsters list and named two additional network members, Frederick Kumi ('Abu Trica') and Daniel Yussif, who were separately indicted in December 2025 for a related $8M+/80+-victim romance scheme (April 2023-November 2025) and were pending extradition; Kumi was extradited to the U.S. on July 9, 2026 and pleaded not guilty, with trial set for September 8, 2026.

How the Attack Worked

Per the unsealed indictment and DOJ's June 4, 2026 rollout, the defendants (and related co-conspirators including Frederick Kumi/"Abu Trica" and Daniel Yussif, prosecuted in linked Ohio indictments) searched dating websites and social media for older Americans, with a stated preference for widows and divorcees. They built fictitious female personas and used "advanced techniques including artificial intelligence-driven video platforms" to engage victims under these false identities, giving victims apparent visual "proof" that the romantic partner existed and was real, alongside encrypted messaging apps and phone calls to sustain the impersonation over weeks or months. Once trust and a romantic relationship were established, victims were fed fabricated stories, including tales of gold/diamond inheritances or overseas business deals, and were induced to wire money to financial accounts controlled by conspiracy members. Funds were then moved onward via money mules, shell businesses, and bank accounts in Ghana and the U.S. immigrant community, with some proceeds converted to cryptocurrency and used to purchase luxury vehicles and property.

The Lure & the Tell

The lure was a purpose-built romantic relationship: a fictitious, AI-video-enabled female persona who appeared responsive, visually real, and emotionally engaged over an extended period, then introduced a plausible financial emergency or windfall story (inheritance in gold or diamonds, an overseas business deal) requiring the victim's help via wire transfer. The scale (130+ victims, $15M+, run over nearly two years by a structured, multi-role criminal network with dedicated persona-builders and separate money-mule/laundering operators) is itself a tell that distinguishes this from a one-off catfishing scam. Prosecutors flagged AI-driven video as a materially new element that let the personas offer a form of "visual proof of existence" that older text/photo-only romance scams could not, undercutting a common piece of victim skepticism ("can I video call you?").

Outcome

All three named defendants (Jamal Abubakari, Kamal Abubakari, Amanda Joy Opoku-Boachie) were arrested in Virginia and ordered detained pending trial after the indictment was unsealed May 14, 2026. Two related co-conspirators, Frederick Kumi ("Abu Trica") and Daniel Yussif, were separately charged (December 2025) and were extradited from Ghana; Kumi was extradited to the U.S. on July 9, 2026, faces up to 20 years if convicted, and pleaded not guilty with trial set for September 8, 2026. DOJ-coordinated Ghanaian law enforcement (Attorney General's Office, EOCO, Ghana Police, Cyber Security Authority, NACOC, National Intelligence Bureau) working with the FBI, HSI, DEA, and DOJ's Office of International Affairs executed search-and-arrest operations that seized over $3 million in assets across the combined network, including a Lamborghini, a Tesla Cybertruck, a Mercedes-Benz, and a BMW, per DOJ's June 4, 2026 release; Ghanaian press separately reported a mansion in Ghana among the assets seized specifically from Kumi. All seizures are pending forfeiture proceedings. The case was folded into a broader Ohio multi-defendant judicial track (assigned to one U.S. District Judge alongside other Ghana-linked elder-fraud conspiracies), where nine other co-conspirators have already pleaded guilty and received a combined roughly 50 years of imprisonment plus millions in restitution orders.

Why It Matters

This is one of the first large, federally documented romance-fraud prosecutions in which DOJ explicitly cites 'artificial intelligence-driven video platforms' as part of the deception toolkit, not just fake photos or stolen identities. It shows AI lowering the bar for the single hardest step in classic romance scams, providing 'visual proof' that a fabricated partner is real, letting a small, young operator group (22-year-old twins plus a handful of co-conspirators) sustain 130+ simultaneous relationships and extract $15M+ over roughly two years. It is also a template case for how DOJ is now consolidating disparate Ghana-linked elder-fraud rings into coordinated multi-defendant prosecutions and pairing them with new federal-state data-sharing tools and a public 'Most Wanted Fraudsters' list, signaling AI-enabled romance fraud has become a policy-level priority rather than a series of isolated local cases.

Defenses

DOJ notes this case was folded into a coordinated multi-defendant Ohio prosecution track (multiple related indictments assigned to one U.S. District Judge; 9 co-conspirators in related cases already sentenced to ~50 years collectively), reflecting an institutional response of consolidating scattered romance-fraud rings into a single prosecutorial pipeline. The June 4, 2026 rollout paired this case with the launch of the FBI's "Most Wanted Fraudsters" list and a new Ohio federal-state data-sharing partnership aimed at faster detection of shell companies/mule accounts. For individuals, the case underscores now-standard elder-fraud prevention guidance: independently verify the identity of any online romantic partner never met in person (reverse-image/video search, third-party video verification), treat any request to wire money, especially one tied to inheritance, gold/diamond deals, or emergencies, as a red flag regardless of how convincing supporting video or photos appear, and involve a trusted family member or bank before large wire transfers. Financial institutions are urged to flag outbound wires from older customers to newly added payees following extended online relationships, and to treat "AI-generated video as proof of identity" as an emerging trust-establishment technique that no longer rules out impersonation.

Sources
Attack Chain & Defense
The sequence the attacker ran
How it could have been stopped
1
Target selection and OSINT: Per the indictment, the network searched dating websites and social media for older Americans, with a stated preference for widows and divorcees, likely relying on public profile signals (age, relationship status, references to a late or former spouse) to build a target list at scale before any contact was made.
Countering Stage 1: Dating platforms and social networks can look for accounts that mass-message profiles matching an older, recently widowed or divorced pattern, and can require stronger identity verification for new accounts; this recon signal is hard to eliminate entirely since disclosing relationship status is a normal, legitimate use of these platforms.
2
Persona construction: Operators built fictitious female personas using, per DOJ, "advanced techniques including artificial intelligence-driven video platforms," consistent with drawing on commercially available AI image and video generation tools to create a reusable, consistent fake identity, photos, video clips, a name, and a backstory, that could sustain many simultaneous victim relationships.
Countering Stage 2: There is no scalable way to prevent the underlying AI image and video tools themselves from being used this way. The realistic control sits downstream, at the point the fabricated persona is used to solicit money, rather than at persona creation.
3
Initial contact and rapport building: The persona matched with or messaged the victim on the dating site or social platform, then moved the conversation to encrypted messaging apps and phone calls to build a romantic relationship over weeks to months, consistent with standard romance-scam grooming timelines.
Countering Stage 3: Platforms can flag conversations that move rapidly off-platform to encrypted apps, a known evasion pattern, and can surface friction or education prompts when romantic escalation is combined with a short account history.
4
Synthetic proof-of-life via AI video: When victims sought reassurance the relationship was real, the operation used AI-driven video platforms to simulate live video interaction, giving the fabricated partner apparent visual reality and defeating the live-video-call check that has traditionally exposed photo-only romance scams.
Countering Stage 4: Consumer and financial-institution guidance should treat a video call alone as no longer sufficient proof of identity, given commercially available AI video tools, and should recommend independent verification (reverse-image or video search, unscripted live requests) before any money changes hands.
5
Financial pretext introduction: Once trust and a romantic bond were established, the persona introduced a fabricated financial narrative, such as a gold or diamond inheritance or an overseas business deal, framed as requiring the victim's help via wire transfer.
Countering Stage 5: Family members, financial advisors, and bank staff can be trained to treat any online-relationship-linked financial narrative, an inheritance in gold or diamonds, stranded funds, or an overseas business deal, as a near-automatic fraud indicator, regardless of how credible the supporting story or documents appear.
6
Fund extraction: Victims wired money to financial accounts controlled by conspiracy members, per the indictment often as an initial payment followed by repeated requests as the relationship and narrative continued.
Countering Stage 6: Banks and wire-transfer providers can flag and delay outbound wires from older customers to newly added payees, particularly where the pattern is consistent with a recently formed online relationship, the exact control DOJ's June 2026 rollout urged financial institutions to adopt.
7
Laundering through mules and shell entities: Funds were moved onward via money mules, shell businesses, and bank accounts tied to Ghana and the U.S. immigrant community, per the indictment, obscuring the trail from the original wire transfer to the final beneficiary.
Countering Stage 7: Anti-money-laundering monitoring, beneficial-ownership checks on shell businesses, and transaction-pattern monitoring on accounts receiving many small then consolidated wires, can flag mule-network laundering; this is also the gap the new Ohio federal-state data-sharing agreement targets.
8
Asset conversion and payout: Remaining proceeds were, per DOJ, converted in part to cryptocurrency and used to purchase luxury vehicles and property in Ghana, completing the objective of extracting and retaining stolen funds outside easy reach of U.S. asset-recovery efforts.
Countering Stage 8: International asset-forfeiture cooperation, the DOJ-Ghana law-enforcement partnership that executed the search-and-arrest operations and asset seizures in this case, is the realistic backstop once funds have left the U.S. banking system and been converted to physical or crypto assets abroad.
Quick Facts
Victim
130+ older Americans (predominantly widows/divorcees) across the United States
Location
Northern District of Ohio (Cleveland, prosecuting office); victims nationwide across the United States; defendants arrested in Virginia; co-conspirators based in Accra/Swedru, Ghana
Date
2024-07 to 2026-04 (alleged scheme period); indictment unsealed 2026-05-14; DOJ rollout/detail 2026-06-04
Impact
DOJ alleges $15 million+ in losses from 130+ victims in the Abubakari/Opoku-Boachie indictment (this is the case named in the task); a closely related, DOJ-linked case against Frederick "Abu Trica" Kumi and Daniel Yussif (part of the same network/announcement) separately alleges $8 million+ from 80+ elderly victims (April 2023-November 2025). DOJ's June 4, 2026 release attributes over $3 million in Ghana search-and-arrest asset seizures, including a Lamborghini, a Tesla Cybertruck, a Mercedes-Benz, and a BMW, to the combined operation across the three linked indictments, without breaking the total out by defendant. Separate Ghanaian press coverage (Pulse Ghana, MyJoyOnline) specifically reported the same four vehicles plus a mansion in Ghana as assets seized from Kumi, though without an independent dollar figure for that subset. All figures are prosecutorial allegations, not yet proven at trial or finalized in forfeiture judgments.
Status
Confirmed
Case Type
Real-World Incident
Sector
Consumer / General Public, Cryptocurrency & Digital Assets
Threat Actor
Organized Crime
Related

Related Cases

WPP Deepfake CEO Scam Attempt

Fraudsters built a fake WhatsApp profile of WPP CEO Mark Read and staged a Microsoft Teams call using an AI…

Incident 2024Read →

UAC-0050 ClickFix Fake-reCAPTCHA Campaign Deploys 'Lucky Volunteer' Infostealer Against Ukrainian Organizations

A Ukrainian-language "shared document" phishing wave used a fake reCAPTCHA "verify you are human" ClickFix page to trick victims into…

Incident 2024Read →

Deepfake Candidate Interview Fraud at Vidoc Security Lab (Polish-Founded/US-HQ, 2024-2025)

Vidoc Security Lab, a Polish-founded, US-headquartered cybersecurity startup, caught two separate job candidates using real-time AI deepfake video filters to…

Incident 2024Read →