Quebec AI-Assisted "Grandparent Scam" Ring: Teodor/Condurache Sentenced After Targeting Saskatchewan Seniors

What Happened

Between late November and early December 2025, a wave of "grandparent scam" vishing calls hit seniors across Saskatoon, Regina, and the nearby White Butte area of Saskatchewan. Callers posed as a panicked grandchild who had been arrested or been in a car accident and urgently needed bail money, then transferred the call to a fake police officer and a fake lawyer who instructed the victim to withdraw cash, keep it secret, and hand it to a courier or ship it via Purolator. Saskatoon police logged five reports (Nov. 24-27) with total losses over $45,000; Regina police and White Butte RCMP logged a further six victims (Dec. 1-2) with losses exceeding $40,000, about $20,000 of which was later recovered. One Regina/White Butte couple alone lost over $25,000 across multiple payments. Acting on a tip from Saskatoon police and a suspicious victim's report, Regina police surveilled a matching vehicle, watched it collect cash from another victim, and arrested Ciprian Teodor (50) and Alexandra Condurache (40), both of Quebec, on December 2, 2025, seizing cash and evidence from their vehicle. The pair first appeared in Regina Provincial Court on December 3, 2025. Condurache, who acted as the driver, had several charges stayed and received a two-year community conditional sentence plus three years' probation. Teodor, who acted as the cash-collecting courier, pleaded guilty to a list of Saskatchewan offences and one related Quebec fraud count and, on July 9, 2026, was sentenced by Judge James Rybchuk to 18 months' jail (with six months attributed to the separate Quebec fraud role) plus three years' probation, leaving 212 days to serve after remand credit; $46,350 in restitution was ordered for the Saskatchewan victims. Rybchuk explicitly found that artificial intelligence had been used to mimic the voices of victims' grandchildren, describing Teodor as "the human face of an otherwise faceless, AI-driven fraud" and "the wolf at the grandmother's door," although police, at the time of arrest, had said they could not yet confirm whether the callers used AI voice cloning or simply harvested victims' family details and mannerisms from social media.

How the Attack Worked

Victims, mostly seniors in Saskatoon, Regina, and the White Butte area, received phone calls in which a voice they believed belonged to a grandchild, crying and in distress, claimed to be in sudden legal trouble: variations included a grandchild "arrested for drugs" or involved in a car accident with a pregnant woman and now facing a hit-and-run/impaired charge. The "grandchild" said they needed money urgently for bail and then handed the call off to a fake police officer and/or a fake lawyer (in one case using the name of a real, well-known Regina defence lawyer, "Mr. Williams") who gave detailed instructions: withdraw a specific sum in cash from the bank, tell tellers it was for a home-renovation contractor (not bail) to avoid suspicion, and do not tell anyone else because of a supposed gag order or because "the courthouse is too busy" for in-person delivery. Victims were told to leave the cash in a box on their doorstep or hand it directly to a courier who came to the house; in at least one case, follow-up payments were sent via Purolator. Two Quebec residents, Ciprian Teodor (50) and Alexandra Condurache (40), operated as the local pickup team: Condurache drove while Teodor acted as the courier who physically collected the cash from victims' homes.

The Lure & the Tell

The lure was a highly emotional, time-pressured "your grandchild is in danger" call: a crying voice victims say sounded exactly like their grandchild "to perfection," including specific mannerisms and vocal ups-and-downs, escalating through a fake police officer and then a fake lawyer to add false legitimacy, before instructing secrecy and immediate cash handover. The tell that unraveled it for at least one Regina couple (Jill and Ian Finn) was procedural: the supposed courier left no receipt for the cash, and when Jill Finn called the real phone number for the lawyer named on the call ("Mr. Williams"), the actual lawyer, John Williams, told her within moments that no legitimate lawyer would ever instruct a client to leave cash in a box on a doorstep for pickup, and that she was being scammed. That verification call, combined with a tip from Saskatoon police about a similar spree the week before, let Regina police intercept and arrest the courier team mid-pickup at another victim's house.

Outcome

Regina police, tipped off by Saskatoon police about a prior week's spree and alerted by victim Jill Finn's suspicions, put a matching vehicle under surveillance, observed the pair collecting money from a victim's house, and arrested Ciprian Teodor and Alexandra Condurache on December 2, 2025; a search of their vehicle turned up cash and further evidence. Both first appeared in Regina Provincial Court on December 3, 2025. Condurache had a number of Regina-based charges stayed and, for her role as driver, received a two-year conditional sentence (served in the community) plus three years' probation. Teodor pleaded guilty to a list of Saskatchewan offences plus one Quebec fraud-over-$5,000 count (tied to a separate 200+-victim, $1M+ Quebec bank-card-retrieval fraud ring in which he acted as a driver in five pickups) and, on July 9, 2026, received a joint-submission sentence from Judge James Rybchuk of 18 months in jail (six months of which was attributed to the Quebec count) plus three years' probation; after remand credit he had 212 days left to serve in custody. Restitution of $46,350 was ordered for the Saskatchewan victims. Teodor apologized in court and said he intended to return to work as a carpenter and to his family after release.

Why It Matters

This is one of the first Canadian criminal sentencings in which a judge, on the court record, explicitly concluded that AI voice-cloning technology was used to impersonate victims' family members in a grandparent scam, moving the "AI voice clone" narrative from anecdotal victim perception ("it sounded exactly like her voice") into a formal judicial finding, even though the underlying forensic evidence for the cloning claim was not separately detailed in public reporting. It illustrates how AI-enabled vishing is being layered onto an established, low-tech fraud logistics chain (fake-authority call escalation, secrecy/gag-order pressure, in-person cash courier and parcel-service pickup) rather than replacing it, meaning the human money-mule/courier layer remains the operation's most exploitable and prosecutable weak point, as it was here. It also shows that the same small crew can be prosecuted across multiple provinces and multiple victim classes (elderly grandparent-scam victims in Saskatchewan, elderly bank-card-fraud victims in Quebec), reflecting how these fraud rings are organized as reusable, mobile operational units rather than one-off local scams.

Defenses

Publicized defenses centered on victim/family verification habits rather than technical AI-detection: RCMP and municipal police (Saskatoon, Regina) issued public warnings urging people to independently verify a "grandchild in crisis" call by hanging up and phoning the family member back on a known number or checking with other relatives before sending any money; to be suspicious of demands for secrecy ("don't tell anyone, there's a gag order"); to distrust any request to withdraw cash and hand it to a courier or ship it via parcel service; and to treat "lawyer" or "police officer" call transfers as a red flag rather than added legitimacy. In the case, the scam was ultimately broken not by voice-detection technology but by an alert victim noticing the courier pickup had no receipt, a real defence lawyer (John Williams) confirming by phone that no lawyer would ask for cash left in a box on a doorstep, and coordinated surveillance by Regina police (working off a Saskatoon police tip) that let them catch the pair mid-pickup. No consumer-facing AI voice-authentication or caller-verification technology is described as having been used or is credited with stopping any of the frauds.