Deepfake Musk, real losses: the coin-doubling livestream that keeps coming back

The scam almost never varies. A hijacked YouTube channel, rebranded to look like Tesla, SpaceX, MicroStrategy or Ripple, loops a deepfake video of a famous executive. Scan the QR code, send Bitcoin, Ether, Dogecoin or XRP, and the great man will send back double. Nothing comes back.

Most often the face belongs to a synthetic Elon Musk, though impersonators have cloned Ripple CEO Brad Garlinghouse, MicroStrategy's Michael Saylor and Binance's Changpeng Zhao. The AI voice reads a script; an on-screen countdown supplies the urgency. It is the oldest con in crypto — the 'send one, get two' loop — wearing a new face.

The trick predates the deepfakes. Non-AI 'Bitcoin giveaway' livestreams using SpaceX and Musk branding circulated in 2020, and helped prompt Steve Wozniak's lawsuit against YouTube. Popular Science documented a cloned SpaceX account that had been active since May 2022, part of a wave of AI-video versions that proliferated that year.

Timed to the launch

The streams cluster around real events, when genuine SpaceX broadcasts draw millions. During Starship's Flight 3 on March 14, 2024, multiple cloned SpaceX channels — one with roughly 2.3 million subscribers — pushed BTC, ETH and DOGE via QR codes to a fake 'official SpaceX event' site. Around the Flight 4 launch on June 6, 2024, roughly 35 accounts ran fake-Musk streams at once.

What it collects

DFRLab documented one stream on June 18, 2024, running on @ChampsNetworkHD, a hijacked, YouTube-verified channel with about 420,000 subscribers and a peak of some 81,000 concurrent viewers. Before takedown, according to DFRLab, it collected exactly $50,537.19 — $40,289.91 in Bitcoin, $3,825.22 in Ether and $6,422.06 in Dogecoin.

That is one stream. In January 2024, Bitdefender said it had monitored more than $600,000 in stolen funds across hundreds of hijacked-channel streams impersonating Musk, Ripple, MicroStrategy and Binance. The top three hijacked channels alone, the firm noted, held around 31 million combined subscribers — an audience the fraudsters inherited intact.

Enforcement has been thin. No criminal indictment is on record and the perpetrators remain at large, so the response has been platform takedowns — YouTube and Google pull the channels and videos, often only after press inquiries — and warnings from the impersonated firms. Ripple's Garlinghouse re-warned XRP holders in July 2025 as the token rallied.

The one substantive legal action is civil. In Wozniak v. YouTube, California's Sixth Appellate District partially reversed the case's dismissal on March 15, 2024, letting claims proceed past Section 230 on the theory that YouTube's own verification badges on hijacked channels helped the fraud, and remanded it to the trial court.

Protect yourself

• No legitimate person or company doubles crypto you send them. 'Send one, get two' is a theft dressed as a promotion.
• A verification badge proves nothing — the hijacked channels kept their badges while posing as Tesla and SpaceX.
• Never scan a QR code from a livestream to send funds; it routes to a fake 'official event' page.
• Treat a live countdown and manufactured urgency as red flags, not proof.
• Cross-check any 'giveaway' against the company's official verified accounts before you move a cent.

The technology improves every cycle — the face steadier, the voice cleaner, the timing tied ever more tightly to real launches. The defense does not change. Nobody doubles your coins.

— Sources: [DFRLab](https://dfrlab.org/2024/09/25/musk-deepfake-crypto-scam/) · [Bitdefender Labs](https://www.bitdefender.com/en-us/blog/labs/stream-jacking-2-0-deep-fakes-power-account-takeovers-on-youtube-to-maximize-crypto-doubling-scams) · [Popular Science](https://www.popsci.com/technology/crypto-scam-starship-launch-livestream/) · [Cotchett Pitre & McCarthy](https://www.cpmlegal.com/news-Steve-Wozniaks-Bitcoin-Giveaway-Lawsuit-to-go-Forward)