BANGKOK – Advanced AI is changing online fraud in Thailand by making old scams faster, cheaper, and harder to recognize. Criminals still use familiar tactics such as phishing, fake shopping offers, and social engineering, but they can now clone voices, create convincing videos, impersonate officials, and tailor messages in natural Thai.
The scale is serious: Thailand’s Anti-Online Scam Center reported 121,921 online crime cases and 7.48 billion baht in losses between January 1 and April 30, 2026. Fake accounts, investment pitches, and purchase scams can reach victims through Facebook, SMS, LINE, and video calls, while AI-generated content makes it harder to trust what you see or hear. Thailand’s cyber police fight AI deepfakes, and other authorities are responding, but consumers still need to recognize warning signs, verify urgent requests, and act quickly after a suspected loss.
The sections ahead examine deepfake voices and videos, the risks to Thai consumers, relevant laws, official reporting channels, and simple steps that can help you avoid becoming the next target.
Key Takeaways
- AI deepfakes let criminals imitate relatives, police officers, and government officials through convincing voices and videos.
- Never transfer money because of an urgent call. Verify the person through a trusted number or private family passcode.
- Watch for unnatural facial edges, poor audio-video timing, odd eye reflections, and pressure to act immediately.
- Thailand recorded 121,921 online crime cases and 7.48 billion baht in losses during the first four months of 2026.
- If money is sent, call your bank, contact Thailand’s AOC 1441 scam hotline, and file a Thai Police Online report quickly.
Digital Vulnerabilities in Thailand: Why Advanced AI Raises the Stakes
Generative AI gives scammers tools to produce convincing messages, cloned voices, synthetic images, fake videos, and personalized scripts in minutes. The technology itself is useful, but criminals can use the same capabilities to copy the details people rely on when deciding whether a request is genuine.
That creates a practical problem for Thai consumers. A fraud attempt may arrive through mobile banking, LINE, Facebook, an online marketplace, or a digital government service. A familiar name and polished message can make a fake request feel safe before the victim checks where it came from.
Why Voice and Video No Longer Prove Someone Is Real
Voice cloning uses a short recording to reproduce someone’s speech patterns, tone, and accent. Deepfake video can place a person’s face on moving footage or generate a convincing talking image. Thai police have warned that scammers may imitate relatives, acquaintances, and police officers using these methods.
Criminals may need only a brief public audio or video clip, such as a social media post, interview, or livestream. A few seconds can help create an impersonation that sounds familiar enough to trigger panic or sympathy.
A caller may claim that a relative needs emergency money, or that a police officer is investigating your account. However, the Royal Thai Police has said it doesn’t make video calls for criminal cases or ask suspects to transfer money for inspection. Thai PBS’s warning about AI clone scams also advises calling the person back through a known number.
A familiar voice or moving face is now a clue, not proof of identity.
The Trust Signals Scammers Are Learning to Copy
AI can reproduce official wording, logos, accents, writing styles, customer-service scripts, and urgent emotional language. A criminal might combine a fake profile, realistic chat messages, a spoofed caller ID, and a fraudulent website to create a complete story.
For example, a fake police call may accuse you of money laundering. A fake bank warning may demand immediate account verification. A parcel notice may send you to a payment page, while a fake seller may use polished product photos and patient replies to secure a transfer.
Thailand’s scam problem also involves organized and sometimes cross-border networks, mule accounts, fake websites, and blocked phone numbers. As a result, consumers should verify unexpected requests through a separate channel, even when the message looks official and the voice sounds familiar.
How AI-Powered Scams Reach Thai Consumers
AI-powered scams usually follow a familiar path: build trust, create urgency, then direct the victim to a payment channel controlled by criminals. The first contact may come through Facebook, LINE, SMS, a phone call, or an online marketplace. Once the victim responds, scammers use polished language, cloned voices, fake websites, and mule accounts to complete the theft.
Deepfake Calls From Family Members, Police, and Officials
A deepfake call often starts with panic. The caller may sound like your child, sibling, or partner and claim to be in trouble. They might say they caused an accident, lost their phone, or need money immediately. Another version uses a cloned voice to impersonate a police officer, bank employee, or government official investigating money laundering.
The caller then gives a reason for a fast transfer. They may claim that sending money will protect your bank account, release a relative, or clear your name from a legal case. The scammer could move the conversation to LINE, send a fake case document, or connect you with another impersonator who confirms the story.
Thai police and other officials do not ask suspects to make secret transfers to personal accounts or mule accounts. Legitimate officials also don’t demand that you hide the matter from your family or transfer money to “secure” an investigation.
Do not believe, do not rush, and do not transfer. End the call, then contact the relative, bank, or agency through a trusted number.
AI-Enhanced Phishing and Fake Customer Support
AI helps criminals write phishing messages that sound natural in Thai and match the recipient’s situation. A fake bank alert may mention a recent transaction, while a delivery message may use the name of a familiar courier. Other messages imitate tax notices, investment offers, account suspension warnings, or customer-support replies.
The link often leads to a convincing copy of a bank, government, or marketplace website. It may ask for a username and password, install malware, request remote access, or demand a one-time password (OTP). Once the victim enters those details, criminals can access accounts or approve transfers.
A polished message still may be fraudulent. Check the sender’s address, avoid links in unexpected messages, and open the official app yourself. If a caller asks for an OTP or tells you to install remote-control software, stop the conversation.
Online Shopping and Investment Scams That Look Professional
Goods and services scams reach more Thai consumers than any other reported category. The Anti Cyber Scam Center recorded 4,400 goods and services complaints out of 5,588 reports during the week of June 28 to July 4, 2026, according to Thailand’s weekly scam figures.
Fake stores copy real product pages, display AI-generated images, publish invented reviews, and offer discounts that appear too good to be true. After payment, the seller may disappear, send a worthless item, or request another fee for delivery or customs clearance. A marketplace profile with many followers is not proof that the seller is genuine.
Investment scams use the same trust-building process. AI can create convincing advisers, social media personalities, trading screenshots, and customer testimonials. The victim may receive small early returns, then face pressure to deposit more money through a fake platform. The funds usually move to mule bank accounts before criminals transfer or convert them, making recovery harder. Readers comparing warning signs can also review these tips for avoiding investment fraud.
Complaint numbers show how common shopping fraud is, but impersonation scams can cause greater losses in a short time. During that same ACSC reporting week, impersonation fraud caused 71.75 million baht in losses. A trusted voice, official-looking profile, or professional website should never replace independent verification.
Why the Damage Goes Beyond a Lost Bank Transfer
AI-enabled fraud can leave victims with problems that continue long after the money disappears. Criminals may steal personal data, take over accounts, damage reputations, or use victims to move funds without their knowledge.
Thailand’s Anti-Online Scam Center recorded 121,921 online crime cases and 7.48 billion baht in losses between January 1 and April 30, 2026. These figures show that fraud affects large numbers of people, not just careless users. AI lets criminals personalize messages and test many versions quickly, so anyone can become a target.
Personal Data Gives Scammers Better Scripts
Public posts can reveal your relatives, workplace, travel plans, shopping habits, and daily routines. Leaked records may add your phone number, address, national ID details, or account information. Even shopping records can help a scammer mention a recent order and sound like a real customer-service agent.
That information gives criminals a script that feels personal. A fake friend may refer to your workplace, while an impersonated bank employee may mention a transaction you actually made. Criminals can also combine details from different breaches to support identity theft, account takeovers, or AI-generated impersonations. Thailand’s major data breach problem shows why separate pieces of information can become more dangerous when combined.
Thailand’s Personal Data Protection Act gives people rights over how organizations collect and use personal information. However, the law doesn’t prevent every leak, impersonation attempt, or criminal use of stolen data.
You can reduce your exposure by limiting public profile details, reviewing privacy settings, avoiding unnecessary data sharing, and questioning unexpected messages that include accurate personal facts. Familiar information should prompt verification, not automatic trust.
The Human Cost of Pressure and Fear
Urgency narrows attention. Fear can make a person focus on stopping an immediate threat instead of checking whether the caller is genuine. A fake official might threaten arrest, a frozen bank account, or legal action unless the victim transfers money at once.
A caller who knows private facts can make the threat feel credible. Embarrassment adds another barrier because victims may hesitate to ask family members for help or admit they feel uncertain. Some people also become unwitting money mules after scammers persuade them to receive and forward funds.
Victims respond because criminals use sophisticated manipulation, not because they lack intelligence. Afterward, people may face anxiety, shame, damaged relationships, account recovery problems, and reputational harm. Pause, verify the request privately, and ask someone you trust to review the situation before sending money or sharing access details.
Thailand’s Laws and Agencies Are Catching Up With AI Fraud
Thailand is responding to AI scams with coordinated action across police, banks, telecom companies, and digital regulators. The approach targets the entire scam chain, not just the person who makes the final phone call.
What Authorities Are Doing to Disrupt Scam Networks
Government and police reporting shows the scale of the response. Between October 2025 and June 2026, authorities reportedly:
- Froze more than 3.6 billion baht in illicit funds and suspicious assets.
- Closed over 351,000 mule accounts.
- Arrested more than 29,000 suspects.
- Blocked around 300,000 suspicious phone numbers.
- Shut down more than 122,000 fraudulent websites.
- Helped 862 victims avoid more than 82 million baht in reported losses.
These figures come from Thai government, police, and anti-scam agency reporting. They cover different enforcement activities and reporting periods, so they should not be read as one single case total. Still, they show how authorities are attacking multiple points at once.
The Anti-Online Scam Center, or AOC 1441, coordinates reports with banks, police, and other agencies. The Ministry of Digital Economy and Society supports the wider national response, while the Electronic Transactions Development Agency (ETDA) works on trusted digital transactions and online-service standards. The National Cyber Security Agency (NCSA) focuses on national cyber defense and coordination.
Authorities also target network leaders, cross-border operations, telecom infrastructure, websites, and financial accounts. Readers can learn more about Thailand’s new cybercrime laws and the rules aimed at call-center scams and mule accounts.
Why Fast Reporting Matters After a Scam
Thailand’s response model depends on speed. If you sent money or exposed banking credentials, contact your bank immediately, call AOC 1441, and file a report through ThaiPoliceOnline. Quick reporting gives authorities a better chance to trace transfers, freeze funds, and identify connected accounts. Recovery is possible in some cases, but no agency can guarantee that you will get the money back.
Save evidence before deleting messages or blocking the scammer. Keep screenshots, chat records, caller details, account numbers, transaction slips, website addresses, profile names, and exact timestamps. If the scam involved a deepfake call or video, record what the person claimed and how the contact began.
Thailand’s main legal tools include the Personal Data Protection Act, the amended Computer Crime Act B.E. 2550 (2007), the Cybersecurity Act B.E. 2562, and the Royal Decree on Measures for Prevention and Suppression of Technology Crimes B.E. 2566. Each covers a different area, including personal data, online offenses, national cyber risks, and technology-crime investigations.
As of 2026, Thailand’s broader AI law was still described as a draft. Proposals included risk-based rules, deepfake disclosure, and impact assessments, but existing police and technology-crime laws remain the main tools for current cases.
How Thai Consumers Can Defend Themselves Against AI Scams
No app can reliably confirm that every voice, video, message, or profile is genuine. A safer approach combines independent verification, strong account settings, cautious payments, and fast reporting. These habits still work when a deepfake looks and sounds real.
Use a Separate Verification Step for Every Urgent Request
Pause the conversation before you send money or share information. Call the person back using a number saved in your phone, not a number supplied in the suspicious message. If the request appears to come from your bank, open the official banking app or website and use its published support channel.
You can also ask a trusted family member to review the request. Families may agree on a private code word for emergency calls, but never post it online or share it in public chats. A scammer who studies social media could use a public code word in a convincing deepfake call.
Treat urgency as a reason to verify, not a reason to act faster.
Protect Accounts Before a Scam Happens
Account security can limit the damage if a scammer steals one password or tricks you into opening a malicious link. Use a different, strong password for every important account, then turn on multi-factor authentication wherever it is available.
Keep your phone, computer, banking apps, and messaging apps updated. Set banking alerts for logins, transfers, and card payments, and ask your bank whether you can set daily transaction limits. Never share a PIN, password, OTP, or one-time approval code, even when the caller claims to be a bank employee.
Unknown callers should never persuade you to install remote-control apps. Those tools can let criminals view your screen, operate your device, or approve a transaction while you watch. If you already installed one, disconnect from the internet, remove it, contact your bank through its official channel, and change exposed passwords from a separate device.
Review your social media privacy settings as well. Limit public access to your phone number, family details, travel plans, and workplace. Remove voice recordings and videos that you don’t need to keep public, since criminals can reuse them for impersonation. For more practical advice, see these Thailand scam prevention tips.
Check Sellers, Links, and Payment Requests
Before buying or investing, take a few minutes to check the offer outside the seller’s page. Use this short checklist:
- Review the seller’s history, account age, and previous customer activity.
- Compare the price with established retailers and competing offers.
- Search for independent reviews, not testimonials posted only on the seller’s website.
- Inspect the domain carefully for extra words, misspellings, or unusual extensions.
- Avoid requests for cryptocurrency, gift cards, personal accounts, or other unusual payments.
- Treat guaranteed returns and pressure to deposit more money as serious warning signs.
AI-generated reviews, product images, videos, and chat replies can make a fake business look polished. None of them proves that the seller owns the goods or operates a legitimate company. Guidance on reporting online scams also recommends preserving transaction records and account details.
What to Do in the First Few Minutes After Losing Money
Act in this order, while keeping records of every call and message:
- Contact your bank or payment provider through its official fraud line or app. Ask whether the transfer can be stopped or the recipient account temporarily frozen.
- Call AOC 1441 immediately. The center can coordinate with banks and help suspend suspicious accounts. AOC says its official service channel is 1441, not social media accounts.
- Submit the complaint through Thai Police Online, then follow any instructions about the police case number and investigator.
- Preserve transfer slips, chats, phone numbers, account numbers, profile links, website addresses, screenshots, and timestamps. Don’t delete the conversation.
- Change passwords that may have been exposed and revoke unfamiliar sessions or connected devices.
- Warn your contacts if criminals took over your LINE, Facebook, email, or other account.
Speed matters because money may pass through several mule accounts within minutes. A prompt bank and AOC report gives authorities a better chance to freeze funds before criminals move them again. The process may require further police action, so keep the case details and attend any requested appointment.
Frequently Asked Questions
Deepfake scams are difficult because they imitate the signals people usually trust. These answers address common concerns about voice cloning, fake videos, reporting, recovery, Thai law, and who scammers target.
Can AI really clone a person’s voice from a short recording?
Yes, modern AI tools can create convincing voice imitations from limited public audio, although the quality varies with the recording and the software. A familiar voice is not enough to confirm identity, especially when the caller demands money during an emergency.
Call the person back using a trusted number, or ask a private question that a scammer could not easily discover online. Never let an urgent voice request replace independent verification.
How can I tell if a video from a police officer or bank is fake?
Visual clues are not always reliable because high-quality deepfakes can look realistic, particularly on a small phone screen. Unnatural blinking, strange lighting, lip-sync problems, or distorted backgrounds may help, but their absence doesn’t prove the video is genuine.
End the conversation and contact the bank, police agency, or government office through a verified phone number, official app, or official website. Legitimate staff won’t require you to transfer money to prove your identity or protect an investigation.
What is the first number to call after an online scam in Thailand?
Call AOC 1441, Thailand’s 24-hour Anti-Online Scam Operation Center, as soon as a transfer occurs. The center can guide you through urgent reporting and coordination with your bank, as explained in this AOC 1441 reporting guide.
You should also file a complaint through ThaiPoliceOnline so the incident receives an official police record and case ID. Keep your transaction details, scammer’s account information, screenshots, and phone numbers ready.
Can a bank reverse money sent to a scammer?
Recovery is possible in some cases, but no bank can guarantee a refund. The outcome depends on how quickly you report the transfer, whether the funds can be frozen, and whether criminals have already moved the money through mule accounts.
Contact your bank before calling the scammer again or attempting another payment. Further transfers usually increase the loss and give criminals more time to move the original funds.
Does Thailand have a law that specifically bans every AI deepfake?
No single Thai law currently bans every type of AI deepfake. Depending on how someone uses it, existing laws may apply to fraud, unauthorized access, harmful content, privacy violations, defamation, or other technology crimes.
Thailand’s broader AI governance framework was still being developed in 2026. Therefore, don’t assume that one AI law covers every deepfake case, since the facts and damage determine which legal provisions may apply.
Are older adults the only people at risk from AI scams?
No. Scammers target students, workers, business owners, online shoppers, investors, and high-income users with different stories and payment demands. Recent reporting also describes deepfake fraud targeting Thai adults in working-age groups.
Age and technical skill don’t provide complete protection. The strongest defense is a repeatable process: pause, verify through a separate channel, refuse unexpected access requests, and report suspicious transfers quickly.
