AI isn't just making old financial crimes faster. It's blurring lines that laws and banks relied on for decades: what counts as impersonation, who's responsible for a fraudulent approval, and whether an "AI-powered" sales pitch can itself be fraud. Here's how the definition of financial crime is shifting, and what it means for you.
What's Changing
Traditionally, financial crime covered well-defined categories – fraud, money laundering, identity theft, market manipulation, and embezzlement. Each had recognizable patterns. A forged signature, a stolen Social Security number, a suspicious cash deposit just under reporting limits.
AI stretches those categories in three directions. It creates new methods for old crimes, like voice cloning to impersonate a bank customer. It creates new kinds of misconduct, like misrepresenting AI capabilities to investors. And it raises new questions about accountability when automated systems make or enable decisions that cause harm.
Key Developments
Synthetic Identity and Deepfake Fraud
Synthetic identity fraud combines real and fabricated information to create a person who doesn't exist, then builds credit history for that identity before "busting out" with maxed-out loans. Generative AI makes fabricated documents, selfies, and even live video far more convincing.
In late 2024, FinCEN – the U.S. Treasury's financial crimes unit – issued an alert warning financial institutions about deepfake media being used to bypass identity verification. That alert matters because it effectively told banks that deepfake-driven identity fraud belongs in their suspicious activity reporting, placing it squarely inside established financial crime frameworks.
In everyday terms: the selfie-and-ID check you do when opening a bank account online is now a target, and banks are adapting how they verify you.
AI Voice Cloning and Impersonation
Scammers can clone a voice from a short audio sample and use it to impersonate a family member in distress or an executive requesting a wire transfer. In 2024, the Federal Communications Commission ruled that AI-generated voices in robocalls fall under existing restrictions on artificial voices, making those calls illegal without consent. That's a clear example of regulators extending existing rules to cover AI-driven tactics.
"AI Washing" as Securities Fraud
A newer category is misleading investors about AI itself. In 2024, the SEC charged two investment advisers with making false and misleading statements about their use of artificial intelligence – a practice often called "AI washing." The message was clear: overstating AI capabilities to attract money can count as securities fraud, even if no AI system did anything wrong.
Automated Market Manipulation
Algorithmic trading isn't new, but AI systems that learn and adapt raise tricky questions. If a trading algorithm independently develops a strategy that manipulates prices, who had the intent? Market manipulation laws traditionally hinge on intent, so regulators and courts are working through how those rules apply to autonomous systems.
Why It Matters
For consumers, the biggest shift is that evidence you used to trust – a familiar voice, a face on video, an official-looking document – is no longer reliable proof of identity. Scams can feel personal and urgent in ways that are hard to spot.
For banks and businesses, definitions matter because they determine reporting duties, liability, and enforcement. If deepfake fraud is treated as a reportable suspicious activity, banks need systems to detect it. If AI washing is securities fraud, companies need to back up their AI claims.
There's also an unresolved debate about responsibility. When a fraudster tricks a bank's AI verification system, questions arise about how much responsibility falls on the institution that deployed it versus the customer whose identity was used.
Real-World Examples
Imagine you get a call from your "daughter," who says she's been in an accident and needs money immediately. The voice sounds exactly right. This type of AI-enhanced family emergency scam has been flagged by the FTC, and the defense is surprisingly low-tech: agree on a family code word and hang up to call back on a known number.
In business settings, companies are adopting verification rules like requiring a second approval channel for any large transfer, no matter how convincing the request appears.
Risks and Limitations
AI-driven fraud detection is improving, but it's not perfect. Detection models can flag legitimate transactions, leaving customers with frozen accounts, and they can miss novel attacks. Rules also lag behind technology, so some harmful practices may sit in legal gray areas for a while.
There's also a risk of overcorrection. Stricter identity checks can make it harder for people without traditional documentation or credit history to access financial services.
What to Watch Next
Expect more regulatory guidance on AI in identity verification, clearer expectations for how firms describe their AI use, and continued international coordination through bodies like the Financial Action Task Force. Laws specifically addressing deepfakes and synthetic media are also evolving at state and national levels, and the EU's AI Act introduces transparency obligations for certain AI-generated content.
FAQ
Is using AI to commit fraud a separate crime?
In most places, using AI doesn't create a new crime by itself. Instead, existing laws on fraud, impersonation, and identity theft are applied to AI-driven tactics, with some new rules emerging.
What is AI washing?
AI washing is overstating or misrepresenting how a company uses artificial intelligence, often to attract investors or customers. Regulators have treated it as potential fraud.
How can I protect myself from deepfake scams?
Use family code words, verify requests through a separate known contact method, and be wary of urgent requests for money, even from familiar voices.
Are banks responsible if AI verification fails?
It depends on the situation, the account agreement, and applicable consumer protection laws. Reporting fraud to your bank quickly improves your chances of recovery.
Final Thoughts
AI is expanding financial crime from forged paperwork to fabricated people, cloned voices, and misleading claims about technology itself. Regulators are responding by stretching existing rules and writing new ones, while banks rebuild how they verify identity.
For you, the practical takeaway is simple: trust verification, not appearances. A second check through a channel you control is one of the most effective protections available.
This article is for educational purposes only and does not constitute legal or financial advice.
📚 Sources
FinCEN – Alert on Fraud Schemes Involving Deepfake Media Targeting Financial Institutions (FIN-2024-Alert004): https://www.fincen.gov/sites/default/files/shared/FinCEN-Alert-DeepFake-Alert508FINAL.pdf
U.S. Securities and Exchange Commission – SEC Charges Two Investment Advisers with Making False and Misleading Statements About Their Use of Artificial Intelligence: https://www.sec.gov/newsroom/press-releases/2024-36
Federal Communications Commission – FCC Makes AI-Generated Voices in Robocalls Illegal: https://www.fcc.gov/document/fcc-makes-ai-generated-voices-robocalls-illegal
Federal Trade Commission – Scammers use AI to enhance their family emergency schemes: https://consumer.ftc.gov/consumer-alerts/2023/03/scammers-use-ai-enhance-their-family-emergency-schemes
FATF – Opportunities and Challenges of New Technologies for AML/CFT: https://www.fatf-gafi.org/en/publications/Digitaltransformation/Opportunities-challenges-new-technologies-for-aml-cft.html
