The Deepfake CEO Scam: How AI-Generated Videos Are Manipulating Stock Markets

BSE's response left no room for interpretation. On January 12, 2026, the exchange issued its first formal advisory:^[17][4]

"It has come to the notice of BSE Limited that a fraudulent deepfake video is being circulated on social media and messaging platforms, falsely featuring Sundararaman Ramamurthy, Managing Director & CEO, BSE, and claiming to provide stock recommendations and investment advice... The video is completely fabricated and created using deepfake technology to mislead investors... BSE is taking necessary steps to have the fake content removed from social media platforms and to initiate appropriate legal action against those responsible."

Despite removal efforts and coordination with law enforcement, the same video resurfaced. BSE was forced to issue a second advisory on March 8, 2026, explicitly acknowledging that "such fraudulent videos have resurfaced multiple times" despite working with platforms for removal.^[5][16] The March 8 advisory used identical language to the January warning, confirming the same video was recirculating rather than a new production.

The verdict is corroborated by independent reporting. Sumsub's fraud-intelligence coverage of the incident noted the deepfake video "could have tricked many people into buying and selling stocks" had BSE not intervened.^[14] Deccan Herald's write-up on the advisory reported that BSE itself described the footage as "fake, unauthorised, doctored, and fabricated using deepfake technology," and that the exchange does not endorse any stock tips or investment schemes.^[15]

This is the third instance of a major Indian stock exchange CEO being impersonated via deepfake: NSE CEO (April 2024), NSE CEO again (June 2024), and now BSE CEO (January 2026, resurfaced March 2026). The recurring pattern suggests an organized, ongoing fraud operation rather than one-off incidents.^[6][27] The NSE CEO deepfake incidents produced the first significant Indian court ruling on deepfake financial fraud when the Bombay High Court granted NSE interim relief on July 16, 2024, ordering Meta and other intermediaries to remove infringing content within 10 hours — a precedent directly applicable to the BSE case.^[20]

Research into the Valueleaf case confirms an operational playbook consistent with BSE CEO-style scams. The pipeline operates in five stages designed to build trust incrementally before extracting funds:^[7][21]

Stage 1 — Bait (Deepfake Ad): A fabricated video of a credible authority figure is pushed as a paid social media advertisement. In the Valueleaf case, the fraud operators paid Valueleaf ₹3 crore for access to certified Indian ad-tech accounts, letting them run WhatsApp-linked ads that were harder for Meta to flag because they routed through a legitimate Indian intermediary.^[7][19]

Stage 2 — Funnel (Messaging App Groups): Victims who click are directed to invite-only WhatsApp or Telegram groups, where most "members" are sockpuppet accounts controlled by the fraud ring, posting fabricated profit screenshots and celebrating fake returns to manufacture social proof.^[7]

Stage 3 — Trust-Building (False Dashboards): Victims are given login access to professional-looking fake trading portals showing inflated paper profits. Small early "test withdrawals" are permitted to establish trust before the real extraction begins.^[7]

Stage 4 — Investment Extraction: Victims are pressured to invest larger sums into mule bank accounts framed as "brokerage deposits." Funds are immediately dispersed to multiple downstream accounts. Mumbai Cyber Police documented 640 complaints in 2025 with ₹400 crore in total losses — a scale that shows this pipeline operating at industrial capacity.^[19]

Stage 5 — Block and Exit: Withdrawal requests are blocked with reasons including "tax compliance holds," "penalty fees," or "account verification." All contact then ceases. Victims who deposited funds are blocked on all platforms.

SEBI noted in a May 2025 warning that fraudsters routinely "pose as SEBI-registered intermediaries, prominent public figures, celebrities, or chief executives or managing directors of reputed organisations to build credibility" — a direct description of the BSE CEO deepfake methodology.^[11]

No confirmed arrest has been made specifically in connection with the BSE CEO deepfake as of March 2026. However, the operational structure mirrors the Valueleaf case — the first major criminal precedent in India for AI-facilitated stock investment fraud — which was attributed to a China-backed cybercrime syndicate operating through Southeast Asian infrastructure.

In October 2025, Mumbai Cyber Police arrested four senior employees of ad-tech firm Valueleaf Services, marking the first major criminal enforcement action in India against an ad-tech intermediary for knowingly enabling a deepfake financial fraud operation:^[7][19]

Police found Valueleaf employees continued enabling fraudulent Meta ads "even after being aware that these advertisements were being used to deceive people," and that Meta flagged the campaign as suspicious within a week of its July 1 launch — before Valueleaf expanded from 18 to 38 ad accounts and continued regardless. Operations were routed through a Dubai-based entity to obscure the chain.^[19]

The "First Bridge" front company: The Valueleaf operators worked under contract to a Hong Kong-registered entity called "First Bridge," which functioned as the legitimate-appearing intermediary between the fraud operators and Indian ad-tech firms. Despite the Hong Kong front company, police investigation revealed the actual backend infrastructure "was operated from Vietnam" — consistent with the documented pattern of Chinese organized crime operating scam compounds in Southeast Asia (Myanmar, Cambodia, Laos, Vietnam) that target victims globally.^[19][22]

UN-linked research puts the Southeast Asian scam-compound economy at $43.8 billion a year in the Mekong region alone, with Chinese-organized syndicates running industrial-scale operations across Myanmar, Cambodia, Laos, and Vietnam.^[22] The U.S.-China Economic and Security Review Commission documented the same pattern in a July 2025 report, concluding that "Chinese criminal networks operate industrial-scale scam centers across Southeast Asia that steal tens of billions of dollars annually."^[28] The BSE CEO scam's Hong Kong-fronted, Vietnam-based backend fits squarely within this documented criminal infrastructure.

Understanding why deepfake CEO fraud is proliferating requires confronting a stark economic reality: the production cost of a convincing executive impersonation video has fallen to a small fraction of what it was just a few years ago.^[23]

The key inflection: tools capable of producing convincing executive impersonation videos are now priced below a Netflix subscription. A synthetic identity kit — AI-generated face, cloned voice, and fabricated supporting documents — sells for approximately $5 on dark web markets, according to Group-IB research published in January 2026.^[23]

This cost collapse directly explains the detection crisis. Studies confirm humans correctly identify high-quality deepfakes only 24.5% of the time, while 60% of people overestimate their ability to detect them.^[10] The Bombay High Court order of July 16, 2024, which granted NSE interim relief and ordered 10-hour platform removal timelines, established the legal template that BSE can now use to pursue the platforms hosting the resurfaced video.^[20]

Only 32% of corporate executives believe their organizations are prepared to handle a deepfake incident targeting their leadership, according to a March 2026 Fortune report.^[13] For India's 210+ million retail demat account holders — many of them new investors — this institutional unpreparedness cascades directly into victim vulnerability.^[32]

India's deepfake vulnerability is structural, not incidental. Several converging forces make it one of the world's most targeted deepfake financial fraud markets:

Deepfake cases in India have surged 550% since 2019, with projected losses reaching ₹70,000 crore (approximately $8.4 billion) in 2024 alone, according to a Pi-Labs report.^[24] Of Indian adults victimized by AI voice scams, 83% suffered monetary loss, and almost half lost over ₹50,000.^[8] Globally, more than 80% of deepfake scam losses in 2025 originated on social media, with Facebook, WhatsApp, and Telegram together accounting for 93% of that total — the exact platforms used in the BSE CEO fraud.^[29]

India's digital financial sector has seen a tenfold surge in fraud over three years, fueled by deepfakes and voice cloning, while financial literacy has failed to keep pace with digital adoption.^[33] India is WhatsApp's largest market, with more users than the next nine largest markets combined.^[34] The country's 210+ million demat account holders include millions of new, inexperienced investors actively seeking stock tips — making them prime targets for a scam whose entire architecture is designed to appear as a legitimate insider tip from a recognizable authority figure.^[32]

Globally, deepfake-related cases nearly quadrupled in the first half of 2025 compared to all of 2024, with cumulative losses approaching $900 million by mid-2025.^[12] The United States was the single most-targeted country, recording $712 million in deepfake-enabled losses in 2025 — the largest national share of the global total.^[9] The BSE CEO video arrives in this context as a higher-credibility vector: impersonating the chief executive of a 150-year-old stock exchange carries more institutional weight than impersonating an individual analyst or celebrity.

April 2024: NSE issues first warning about deepfake video of NSE CEO Ashishkumar Chauhan falsely offering stock recommendations.^[6]

June 2024: NSE forced to issue second advisory as videos resurface — first evidence of the recurring pattern.^[27]

May 2025: SEBI issues formal investor warning about surge in social media scams using executive impersonation, explicitly calling out deepfake tactics.^[11]

July 2025: China-linked syndicate runs large-scale WhatsApp pump-and-dump operation via Valueleaf's Meta advertising access.^[7][19]

October 2025: Mumbai Police arrests four Valueleaf employees — first major enforcement action in India against AI-facilitated stock investment fraud.^[19]

January 12, 2026: BSE issues first advisory. Ramamurthy deepfake video confirmed fabricated.^[17]

March 8, 2026: BSE forced to issue second advisory after the same video resurfaces despite prior removal efforts.^[5][16]

India has moved more aggressively than most major economies to regulate deepfakes. On February 10, 2026, India's Ministry of Electronics and Information Technology notified the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026, effective February 20, 2026.^[18][30]

The key provisions directly applicable to the BSE CEO case: a three-hour takedown window for unlawful synthetic content flagged under a court or government order, down from the previous 36-hour standard, and mandatory provenance metadata and disclaimers on all synthetically generated information, including deepfakes and AI-cloned audio.^[18][30]

A critical gap remains: the amendment does not specify penalties for non-compliance beyond loss of safe-harbor protection, creating enforcement ambiguity. Prosecutions continue to rely on existing fraud, impersonation, and IT Act provisions — created before AI-generated synthetic media existed.^[18]

In the United States, FinCEN issued an alert on November 13, 2024 warning financial institutions about deepfake schemes powered by generative AI.^[35] FINRA's 2026 Regulatory Oversight Report explicitly flagged "AI-generated voices, AI-augmented IDs," and deepfake methods, and called on firms to build risk-based compliance programs addressing them.^[25] Internationally, IOSCO published a consultation report in March 2025 on AI in capital markets, but no binding international instrument exists as of March 2026.^[36]

Traditional stock manipulation — pump-and-dump schemes, boiler room cold calls, paid newsletter recommendations, forum coordination, SMS blasts, fake analyst reports — relied on persuading victims to trust an anonymous stranger. The victim had to override their distrust of an unknown party making extraordinary claims.

Deepfake stock manipulation replaces the core trust mechanism entirely. Instead of trusting a stranger, the victim believes they are receiving advice from a specific, recognizable, high-credibility authority — whose face, voice, mannerisms, and institutional identity are all verified by their own visual cortex. This is not an incremental improvement in fraud technique; it is a categorical shift.

The detection gap is not trainable away: Traditional stock manipulation relied on social engineering that humans can be trained to recognize (unsolicited calls, too-good-to-be-true promises). Deepfake manipulation exploits the fundamental human assumption that video evidence is real. Studies confirm humans correctly identify high-quality deepfakes only 24.5% of the time, while 60% overestimate their detection ability.^[10] Awareness campaigns warning people that deepfakes exist do not improve detection rates for high-quality examples.

The scale gap is not closeable with traditional enforcement: Traditional pump-and-dump required geographic reach (call centers, newsletters) and left physical infrastructure that could be raided. The Valueleaf operation ran 38 concurrent ad accounts during peak operations, each pointing to separate WhatsApp funnels — a parallelized fraud infrastructure impossible to replicate with traditional methods.^[19] The backend, operated from Vietnam through a Hong Kong front company, can be rebuilt and redeployed at low cost if disrupted.^[22]

The cost asymmetry makes deterrence difficult: A synthetic identity kit sufficient to produce a convincing executive-impersonation deepfake sells for as little as $5 on dark web markets.^[23] Dark-web "scamming software" more broadly ranges from roughly $20 to several thousand dollars depending on sophistication.^[26] The Valueleaf operation alone generated ₹400 crore in victim losses. Even if enforcement disrupts a specific operation, the economics make reconstruction cheap compared to the potential return.^[19]

The BSE CEO deepfake is confirmed fabricated by the exchange itself, backed by two official advisories, independent reporting, and a pattern of repeated resurfacing that demonstrates the limits of platform takedown mechanisms. No investment advice attributed to Sundararaman Ramamurthy on social media or messaging platforms is authentic. No WhatsApp or Telegram group offering investment advice has any connection to BSE.

The broader significance is the pattern. This is the third time in two years that a major Indian stock exchange CEO has been impersonated via deepfake. The first two targeted NSE. The current targets BSE. Both exchanges have followed identical playbooks: issue advisories, coordinate with platforms for removal, coordinate with law enforcement. Both have watched the videos resurface despite those efforts.

The Valueleaf arrests demonstrate that enforcement is possible — but they came after ₹400 crore in losses across 640 documented complaints, with victims who may never recover their funds. The arrests targeted the Indian ad-tech intermediary, not the China-based operators who designed the scam infrastructure, generated the deepfake videos, and pocketed the extracted funds. The Vietnam-based backend can be rebuilt and repointed at a new victim population faster than any arrest warrant can travel.

India's IT Rules Amendment 2026, effective February 20, 2026, is among the world's most aggressive statutory frameworks for deepfake regulation. The 3-hour takedown mandate, mandatory provenance metadata, and loss of platform safe harbor for non-compliance represent meaningful structural tools. Whether those tools can outpace a fraud syndicate that can produce a new BSE CEO deepfake for $5 and push it into dozens of simultaneous WhatsApp funnels remains the open question.^[18][30]

BSE has issued two official advisories confirming this video is fabricated. If you have received a WhatsApp, Telegram, or social media message claiming to contain investment advice from a BSE official or from Sundararaman Ramamurthy personally, do not act on it and do not transfer any funds. Report suspected fraud to the Cyber Crime Portal at cybercrime.gov.in or call the National Cyber Crime Helpline at 1930. SEBI's SCORES portal for investor complaints is available at scores.sebi.gov.in.^[11]