Deepfake phishing: Don’t be fooled.

Recently, a fake “Veterans & Retired Seniors Grant Program” post circulated on Facebook that appeared to be sponsored by a government official. The post fooled some Veterans into handing over their direct‑deposit information, leading their VA benefits to be redirected straight into a scammer’s pockets. So far, a number of Veterans have been targeted, losing thousands of dollars in promised VA payments. VA is working quickly to make each affected Veteran whole, but the damage goes beyond dollars. For many, the experience is a traumatic and time‑consuming ordeal no Veteran should ever have to face.

This type of deepfake phishing scam is one of the latest tricks in the scammer’s playbook. Scammers use artificial intelligence (AI) to make fake voices, videos or pictures (like the flyer on Facebook) seem real. They may pretend to be from VA, a bank, a doctor, a trusted third-party, or a family member. They want you to trust them and they want you to act fast.

Now let’s consider a deepfake scenario involving a “fake call.” Imagine James is a Veteran. One day, he gets a call from someone who says they are with VA. The caller says there is a problem with his benefits, and he needs to share his personal information right away. James stays calm. He hangs up and checks that the call is real by contacting the VA office associated with the topic of the call he received (in James’ case: VA benefits hotline). He learns the original call was fake, and James stays safe.

Difficult to detect, and they want you to rush

Federal networks face constant threats. VA’s apprenticeship program turns your military discipline and mission focus into real cybersecurity skills. A scammer may say your benefits are at risk. They may claim there’s a problem with your account or appointment. They may ask for your password, bank information, Social Security number, or other private details. They want you to feel scared or rushed, because that’s when people make mistakes.

You’re in control of when, where, and how you share your information.

What to watch for

Watch for these warning signs:

• The message says: “act now.”
• The caller wants you to keep it secret.
• The voice or video seems a little strange.
• The person asks for private information.
• The request doesn’t feel normal.

What to do next

If you suspect a deepfake phishing attempt, slow down.

• Don’t click links right away.
• Don’t give out personal or account information.
• Check the message another way. Call a trusted number or log in through an official site you type in yourself.

Pause. Then act.

VA, banks and other legitimate organizations won’t mind if you pause and check first. One quick check can stop a scam.

The best rule is simple: Stop. Check. Then act. Deepfakes can look real, but you don’t have to fall for them.

To learn more about protecting your data, review VA’s cybersecurity tools and resources.

Report any scam related to your VA healthcare or benefits by calling the VSAFE Fraud Hotline at 833-38V-SAFE (8-7233).

You can also file fraud complaints with the Federal Trade Commission (FTC) by visiting reportfraud.ftc.gov.