A Brighton-area kitchen fitter lost roughly £76,000, including four loans he was pressured into taking out.
Social Engineering Examples·9 sources
In August 2023, Derren "Des" Healey, a self-employed kitchen fitter from Brighton/Peacehaven, saw a Facebook video advertisement using AI-generated deepfake footage of Martin Lewis and Elon Musk appearing to personally endorse a bitcoin investment scheme. After he submitted his contact details, a scammer using the name "Carl" called within roughly ten minutes, posed as a financial adviser, and guided him into opening a Revolut account.
An initial £1,000 was taken as a first "investment," followed by what appeared to be that £1,000 being returned inside the Revolut interface; per later, more detailed reporting the amount shown was actually a slightly reduced ~£990, not a profit, and it was never confirmed as a genuine Revolut screen rather than a spoofed one. Convinced, Healey transferred his full £5,000 life savings, after which the scammer used an escalating investment-return-gating script that pressured him into taking out four loans from four lenders totaling £70,000, bringing total losses/debt to roughly £76,000. The scam was uncovered when Healey's son heard rap music in the background of one of the fraudster's calls and grew suspicious, prompting Healey to report it to police.
Two loans were later cancelled by lenders, but Healey remained roughly £20,000 in debt plus interest and was pursuing the Financial Ombudsman Service. Martin Lewis has repeatedly and publicly disclaimed any advertising appearances as automatically fraudulent, and personally discussed Healey's case in a BBC Radio 5 Live/BBC Sounds interview, calling him "brave and admirable" for speaking out.
The case became a widely cited example in UK media coverage of celebrity deepfake investment fraud, feeding into the broader narrative around ITV's "Celebrity Scams: Are You At Risk?" documentary coverage (ITV Tonight, press release dated 13 March 2025), which cited approximately £20 million in aggregate losses tied to fake Martin Lewis content.
Healey saw a Facebook video advertisement containing AI-manipulated ("deepfake") footage of UK consumer-finance broadcaster Martin Lewis and Elon Musk appearing to endorse a bitcoin investment scheme. He submitted his contact details through the ad. Within about 10 minutes a fraudster calling himself "Carl" phoned, posing as a financial adviser, and walked him through opening a Revolut account.
Carl took an initial £1,000 "investment," then showed Healey what appeared to be that £1,000 being returned into the Revolut app; per later, more detailed reporting (Mirror), the amount shown was actually a slightly reduced ~£990, not a profit as an earlier, vaguer account implied; it was never confirmed whether this was a genuine Revolut screen or a spoofed/fake interface controlled by the scammer.
Believing the scheme was legitimate, Healey transferred his full £5,000 in life savings. The scammer then used a classic escalating-investment script, telling him further withdrawals required larger reinvestment first (his own words: "To get the £5,000 back, you had to invest £10,000"), which pressured him into taking out four separate loans from four different lenders, totaling £70,000, to keep funding the "investment."
The lure was a Facebook video ad using AI-deepfaked footage of two trusted, familiar public figures, Martin Lewis (UK's most recognized consumer-finance advocate) and Elon Musk, appearing to personally endorse a bitcoin investment. This borrowed Lewis's specific reputation for trustworthy financial advice to bypass normal skepticism about "get rich" crypto ads.
The tell that ultimately exposed it was mundane and human, not technical: Healey's son heard rap music playing in the background during one of "Carl's" phone calls and immediately judged that this did not match the persona of a professional financial adviser, prompting him to tell his father to go to the police. Other latent tells included the classic advance-fee/escalating-investment structure (having to pay more to "unlock" a withdrawal) and the fact that the amount shown "returned" in the Revolut-branded interface (per later reporting, a slightly reduced ~£990, not a profit) could not later be verified as genuine bank output rather than a spoofed screen.
Derren "Des" Healey lost his £5,000 in life savings plus was left holding £70,000 in loans across four lenders after the scam's escalating-investment pressure. Two of the four loans were subsequently cancelled by their lenders following review, but he remained roughly £20,000 in debt plus nearly £6,000 in accrued interest, and pursued the UK Financial Ombudsman Service for further resolution.
He reported the fraud to police after his son grew suspicious. No source reviewed confirms recovery of the money actually paid to the scammer. Healey went public with his story in BBC News and BBC Radio 5 Live/BBC Sounds coverage, and his account fed into broader UK media and consumer-protection coverage of celebrity deepfake investment scams, including tying into press coverage around ITV's "Celebrity Scams: Are You At Risk?" documentary strand (aired in the ITV Tonight programme, press release dated 13 March 2025), which reported roughly £20 million in aggregate losses tied to fake Martin Lewis images/video across victims.
This case is one of the most extensively documented UK examples of AI-generated deepfake video being used as the front-end lure for a full investment-fraud/money-mule funnel, illustrating how synthetic celebrity endorsement content can bypass an individual's normal skepticism about "too good to be true" investment ads by borrowing the specific, hard-won trust of a real consumer-advocate figure (Martin Lewis) alongside a globally famous entrepreneur (Elon Musk).
It also shows the secondary harm pattern increasingly seen in modern investment scams: victims are not just parted from savings but actively induced to take out multiple loans to keep chasing sunk-cost "returns," multiplying losses well beyond what they could have lost from savings alone. The reliance on a mainstream fintech platform (Revolut) as the fraud's money-movement rail, and the ambiguity over whether the "proof of returns" screen was genuine or spoofed, underscores gaps in platform-level fraud detection for social-engineering-driven APP fraud.
The case has since been used as a cautionary example in national broadcast journalism and consumer-protection messaging (BBC, ITV, MoneySavingExpert).
MoneySavingExpert/Martin Lewis publicly and repeatedly states any ad featuring him is automatically a scam ("if it's an ad with me in, it's always a scam, as I don't do adverts") and urges people never to trust celebrity-endorsed investment ads seen on social media. Standard advice reiterated in coverage: verify any investment "opportunity" independently of the ad/call, never move money based on pressure from an unsolicited caller, be suspicious of any adviser who says withdrawals require further "investment," involve family/get a second opinion before large transfers, report to Action Fraud and your bank immediately, and treat deepfake video as unreliable proof of authenticity.
Revolut points to its internal transaction-monitoring/fraud-prevention systems (screening "over half a billion transactions a month") but the case shows no evidence those systems intercepted this specific fraud. Two of Des Healey's four loans were later cancelled by lenders after review, and he pursued the Financial Ombudsman as a mitigation of last resort.
Social Engineering Examples. “Deepfake Martin Lewis/Elon Musk Investment Scam Costs Brighton Man £76,000 via Fake Revolut Account "Carl"”. Accessed 19 September 2026. https://socialengineeringexamples.com/des-healey-deepfake-martin-lewis-elon-musk-revolut-scam-2023
The scam operation likely built its fake endorsement clip from existing public broadcast and interview footage of Martin Lewis and Elon Musk, both frequently filmed public figures, using AI face-swap and voice-synthesis tools to produce a convincing fabricated interview-style video, consistent with contemporaneous reporting on the wave of fake Lewis/Musk investment ads.
There is no practical way for a consumer or platform to intercept synthetic-media production happening entirely inside a fraud operation before an ad is ever published; the realistic control sits downstream, at ad-platform review (Stage 2) and at consumer skepticism toward any celebrity-endorsed investment video regardless of how convincing it looks.
The fabricated video was placed as a Facebook video advertisement, exploiting the ad platform's review and targeting systems to reach a mass, unvetted consumer audience with an unauthorized celebrity-endorsement claim, a gap Meta later addressed with facial-recognition ad screening and that Martin Lewis has separately sued Facebook over.
Ad-platform proactive scanning for unauthorized celebrity-likeness use in financial-services advertising, such as the facial-recognition screening Meta introduced after this wave of cases, plus faster takedown channels for public figures like Martin Lewis to flag fraudulent ads before they reach mass distribution.
Healey submitted his contact details through the ad; the operation used a call-centre-style rapid-response process, phoning him within roughly ten to thirty minutes (accounts vary slightly across BBC and Mirror reporting) of submission, consistent with organized lead-buying and lead-selling fraud call-centre operations rather than a single lone operator.
Treat any call received within minutes of submitting details to an unsolicited investment ad as a warning sign in itself, and independently verify the caller and firm through official contact details found separately, never a number or link the caller supplies.
A caller using the alias "Carl" posed as a financial adviser with over 20 years of experience and built personal rapport over multiple calls, sharing invented common interests and family details, a standard trust-building step ahead of any request for money.
Consumer education that reframes how quickly and personally a stranger builds rapport as a manipulation signal rather than reassurance, and encourages a mandatory outside second opinion from a family member or independent adviser before committing money to someone met only through an unsolicited call.
Carl walked Healey through opening a Revolut account and taking an initial, relatively small £1,000 "investment," a typical low-stakes deposit used to build confidence before requesting a much larger sum.
Financial platforms such as Revolut can apply extra friction, including delayed release or step-up verification, to newly opened accounts receiving first-time transfers described as investments, especially where the customer says they were referred by an unsolicited caller.
The scheme showed Healey what appeared to be his money returned inside the Revolut app interface. Later, more detailed reporting found the amount shown was actually a slightly reduced ~£990, not a profit, and it was never confirmed whether the screen reflected a genuine Revolut balance or a spoofed interface controlled by the scammer, a tactic consistent with manufacturing false confidence before extracting a larger sum.
Platform-level controls that make it impossible for a third party to spoof an in-app balance or returns screen, paired with consumer guidance to treat any on-screen "proof of returns" shown or described by an unsolicited adviser as unverifiable unless confirmed independently through the bank's own official channels.
Believing the scheme legitimate, Healey transferred his entire £5,000 in life savings into the Revolut account.
Hard transaction limits, cooling-off prompts, or real-time fraud warnings for transfers representing a large share of a customer's total balance or described as "life savings," particularly to a newly opened account or one linked to a recent unsolicited investment referral.
The scammer withheld withdrawals unless Healey "reinvested" larger sums, telling him he had to invest £10,000 to get his £5,000 back, a classic advance-fee and escalating-investment script that converts sunk-cost psychology into further payments.
Widely repeated consumer-protection messaging, including Martin Lewis's own public warnings, that a legitimate investment never requires paying more money to unlock a withdrawal, treating that specific claim as a definitive scam indicator.
Under this pressure, Healey took out four separate loans from four different lenders totaling £70,000 to keep feeding the scheme, an example of debt-fueled fraud that pushes victims beyond their savings into consumer credit.
Lender-side affordability and purpose checks that flag rapid, multiple loan applications within a short window, especially where the stated purpose is investment, are the realistic control here; in this case it took after-the-fact review, not real-time screening, for two of the four loans to be cancelled.
The scammer moved the transferred funds out of the Revolut account under the pretense of investing them, completing the theft.
Once funds leave the victim's own regulated account, recovery depends on cross-institution fraud-fund tracing and mule-account detection at the receiving end, largely outside the victim's control; the more realistic controls sit upstream, at Stages 7 and 9, preventing the transfer in the first place.
Healey's son overheard rap music playing in the background of a call with "Carl," judged it inconsistent with a professional financial adviser's call centre, and urged his father to go to the police, ending further payments and prompting the fraud report.
The single most effective control in this case was informal: a family member's outside skepticism catching a mismatched detail during a live call. Normalizing "loop in a trusted third party before sending money to anyone met through an ad" as standard advice replicates this after every earlier institutional control had already failed.
Browse by what this case has in common with others in the library.
An attacker impersonated LastPass CEO Karim Toubba with an AI voice clone over WhatsApp, but the targeted employee spotted the…
KnowBe4 unknowingly hired a North Korean operative for a software engineering role after he passed four video interviews using an…
The FBI's IC3 issued a December 2024 public advisory detailing how criminals use AI-generated text, images, voice cloning.
Scheme participants posed as veteran finance professionals inside private WhatsApp investment groups to lure at least 18 U.S. retail investors…
A fraudster spoofed Wells Fargo's real 800 number nine minutes after a legitimate advisor call, phished a 2FA code from…
Fraudsters built a fake WhatsApp profile of WPP CEO Mark Read and staged a Microsoft Teams call using an AI…
A suspected Chinese state-sponsored group jailbroke Anthropic's Claude Code by role-playing a "defensive security" pretext and used it to autonomously…
The FBI's 2025 Internet Crime Report introduced its first dedicated AI-fraud tracking category, logging $893 million in losses.
A Singaporean businessman transferred at least S$4.9 million after WhatsApp and email lures citing the Strait of Hormuz crisis drew…
The FTC's first major consumer alert on QR-code scams (Dec 6, 2023) warned of fake QR stickers on parking meters…
Posing as NatWest bank security, vishing criminals convinced Surrey solicitor Karen Mackie to wire £734,000 of client money to fraudulent…
DOJ/FTC alleged that Citizens Disability and subsidiary CD Media made 109 million-plus illegal telemarketing calls.
The CEO of a UK energy firm was tricked into wiring €220,000 (~$243,000) to a Hungarian account in March 2019…
Two Scottish small businesses lost £31,000 and over £5,000 after callers impersonating bank fraud-team staff talked owners into wiring money.
A finance employee in Arup's Hong Kong office wired HK$200M (~US$25.6M) after a video conference in which the CFO and…
Fraudsters built a fake WhatsApp profile of WPP CEO Mark Read and staged a Microsoft Teams call using an AI…
An unrelated MHRA search warrant found care-home patient prescription and NHS records rotting in unlocked crates and bin bags at…
A Pakistani national in Sydney allegedly ran a callback-vishing scheme impersonating Optus and TPG Telecom support.