A video ad showing a famous actor, singer, or public official promising quick profits from an investment platform should be treated as fraud until proven otherwise. Spain’s CNMV is blunt: using well-known figures with easy-money promises is an “unequivocal sign” of financial fraud. TechNews DevTop breaks down how the scheme works, how to verify a firm’s authorization in minutes, and what to do if you have already handed over data or cash.
- Deepfake bait: Ads use actors, singers, and even public officials without consent to drive victims to fake news or investment sites.
- Data first, money later: Forms and “investor profile” tests feed data brokers; victims later receive persistent calls and WhatsApp or Telegram pitches.
- Check the registry: The CNMV’s entity search, warnings list, crypto provider list, and Banco de España registry are the fastest verification tools.
How the Deepfake Investment Scam Operates
The ad is not trying to sell you an investment on the spot. It is trying to capture your phone number. The celebrity video is merely the hook that leads to a website mimicking a newspaper or an investment platform. In a December 2023 alert, the CNMV described social media ads that use the image of actors, singers, and even public officials while attributing statements they never made. The formats include videos that simulate a person’s voice, known as deepfakes, and pages that copy the design of online media outlets to appear credible. At the end of the funnel is always the same thing: the website of an unauthorized entity trying to collect data and funds.
In a July 2026 notice, the supervisor added a piece that explains why the phone rings days later. Forms, “investor profile” tests, and profitability simulators feed data brokers who sell that information to third parties, including unauthorized financial outfits. After filling one in, the CNMV warns, it is common to receive insistent calls from unknown or international numbers.
The second phase moves to phone calls and messaging. The CNMV describes a repeated pattern: first a probing contact presenting the caller as an authorized entity, then a concrete investment proposal using aggressive techniques. Increasingly, according to the same 2026 notice, victims are invited to WhatsApp or Telegram groups where supposed experts share screenshots of profits to create a sense of community and urgency. In an April 2025 alert, the CNMV detailed the script: the first investments go well, the victim gains confidence and encourages friends or family, and then the “star investment” arrives. After the money goes in, the price collapses and the organizers disappear from the group.
There is also a dangerous variant. INCIBE documented a 2024 case in which supposed managers of a cryptocurrency platform asked a user to install a remote-control application to “configure several services” on their computer. Days later, the user found suspicious files. If anyone from an “investment platform” asks for remote access to your device, the conversation is over.
How to Verify an Investment Firm in Minutes
Search the company’s name in the CNMV’s registers and warnings list. If it does not appear as authorized, do not invest. Only entities registered with the CNMV can legally solicit investments in financial instruments, the supervisor reminds consumers. There are three checks, in this order:
- CNMV entity search. Typing one word of the company name shows what appears in the official registers of firms authorized to provide investment services. For cryptoassets, the CNMV also publishes a list of cryptoasset service providers.
- Warnings. The CNMV’s warnings page separates unauthorized financial outfits from a list of “other entities” with no registration at all, often detected by monitoring the internet and social media. It also includes warnings from foreign supervisors. For checks outside Spain, the CNMV points to I-SCAN from IOSCO, which aggregates alerts from more than 150 regulators.
- Banco de España, if you are offered a deposit or a loan. Banks, savings banks, and credit cooperatives can be checked in the Banco de España’s online entity registry.
Watch for two traps. Not appearing in the warnings list does not mean a firm is authorized, because the CNMV says its “other entities” list is not exhaustive. And clones impersonate real authorized entities, so confirm that the website and phone number match the registry. If in doubt, the CNMV investor helpline is 900 535 015.
Why the Ads Persist and What to Do After Exposure
Platforms have filters, but they are not enough. Since January 24, 2023, when the rule began to be applied gradually, Google has required financial services advertisers in Spain to complete a verification process. They must demonstrate approval from the competent supervisor, which in Spain includes the CNMV and Banco de España, among others. Even so, the CNMV warned in 2023 that it will use its powers against websites, media, and networks that run advertising “without checking that the advertiser has a license.”
The problem is less technical than it is about incentives. Verifying an advertiser before charging is possible, as Google’s process shows, but each platform decides how much friction to add to its cash register. Meanwhile, the best filter remains a very boring one: the CNMV search tool.
If you have already shared data or money, cut contact and do not make another payment. The CNMV’s decalogue is explicit: if you cannot get your money back, do not keep contributing. Be wary of anyone offering to recover it in exchange for an upfront fee; the CNMV flags that as another sign of fraud. Then act in this order:
- Notify your bank so it can consider blocking the card or pending transactions.
- Save evidence: screenshots of the ad, the website, the chats, and payment receipts.
- Report it to the Police, the Guardia Civil, or the court, and inform the CNMV.
- If you installed remote-control software, uninstall it and scan the device. INCIBE recommends considering a system reinstall and reviewing signs of compromise.
- If you sent a copy of your DNI or passport, INCIBE advises monitoring possible identity use, for example by checking the Banco de España’s CIRBE file for loans taken in your name.
- Get free help at 017, INCIBE’s helpline, available from 8 a.m. to 11 p.m. 365 days a year.
The uncomfortable truth is that this fraud exploits trust in familiar faces, not naivety. It is the same trick as AI-cloned voices asking relatives for money, scaled up to an advertising campaign. That is why the safest rule does not depend on technology: no celebrity will recommend an investment in an ad. If the platform is not in the CNMV registry, it does not exist for you.