Quick Summary
The Nomani investment scam has surged by 62%, as reported by ESET, with over 64,000 unique URLs blocked this year. The scheme, which uses AI-generated videos and social media ads, targets users in regions like Czechia, Japan, and Spain, promising high returns on non-existent investments. Victims often face further scams when attempting to retrieve their funds, highlighting significant risks in online investment platforms and the evolving tactics of fraudsters.
The Securityish Brief
The Nomani investment scam has seen a significant increase of 62% in 2025, according to ESET, a Slovak cybersecurity company. This surge is attributed to expanded campaigns on social media platforms, including YouTube and Facebook, where over 64,000 unique URLs linked to the scam were blocked this year. The majority of detections originated from countries such as Czechia, Japan, Slovakia, Spain, and Poland.
Initially documented in December 2024, the Nomani scam employs social media malvertising and AI-generated video testimonials to lure users into investing in fake products. Victims are often asked to pay additional fees or provide personal information when they seek payouts, leading to further financial loss.
Fraudsters have upgraded their tactics, utilizing deepfake technology to create more realistic videos of popular personalities, making it harder for potential victims to identify the deception. These deepfakes are designed to appear credible by referencing topical events or well-known figures.
In one instance, a fabricated news article in Czechia falsely claimed government investment in a scam cryptocurrency platform, further enhancing the scheme’s credibility. The attackers have also adapted their advertising strategies to evade detection by running campaigns for only a few hours and redirecting users to benign cloaking pages.
Despite the increase in detections, ESET noted a 37% decline in the second half of 2025 compared to the first half, suggesting that law enforcement efforts are impacting the scammers’ operations. However, a recent Reuters investigation revealed that a significant portion of Meta’s ad revenue is derived from scam-related ads, indicating a broader issue within social media advertising frameworks.
Implications for Users and Organizations
The rise of the Nomani scam underscores the growing sophistication of online fraud, particularly through the use of AI technology. Everyday users must remain vigilant against unsolicited investment opportunities, especially those that promise unrealistic returns. Organizations should educate their employees about the risks associated with online investments and the signs of potential scams.
Users should be cautious when engaging with social media ads and verify the legitimacy of any investment claims. It is essential to monitor personal financial accounts for unauthorized transactions and report suspicious activity to relevant authorities. Organizations must also review their advertising partnerships to ensure compliance with regulations and protect their users from fraudulent content.
Key Takeaways
- Be skeptical of investment opportunities that promise high returns with little risk.
- Verify the legitimacy of any social media ads before engaging or providing personal information.
- Monitor your financial accounts regularly for unauthorized transactions.
- Educate yourself and your team about the signs of online scams and fraudulent activities.
- Report any suspicious investment schemes to relevant authorities immediately.
Key Terms & Concepts
- Deepfake: In this article, deepfake refers to AI-generated videos that convincingly mimic real people to deceive viewers.
- Malvertising: Malvertising refers to the use of online advertisements to distribute malware or scams.
- Social media malvertising: Social media malvertising involves using social media platforms to promote fraudulent schemes through deceptive ads.
Read the original article here: https://thehackernews.com/2025/12/nomani-investment-scam-surges-62-using.html
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
