News & Stories

October 2025

Deepfake Scams – What You Should Know

Scammers are constantly evolving, and deepfakes—fake videos, audio clips, or images created using AI—are among the latest threats. These can mimic the voice or appearance of family, friends, or coworkers, aiming to deceive recipients. The goal is simple: to convince you to send money or share sensitive information.

Tomas Lee, Hanmi’s Head of Information Security, said “Deepfake scams are increasing, making it harder to distinguish real from fake. We are committed to helping our community stay informed and safe from emerging digital threats.”

Deepfakes are becoming more realistic, which makes it harder to spot a scam before it’s too late. That’s why it’s important to stay alert and know what to look for.

Here are some key signs of deepfake media:

• Blurry or distorted facial features;
• Unnatural blinking or facial movements;
• Audio-video mismatches;
• Flat or robotic voice tones; and
• Odd lighting or shadows.

These are a few things to look for in an email that be a deepfake:

• Unusual Urgency or Pressure – deepfake messages often try to rush you into action, claiming there is an emergency or a problem with your account.
• Requests for Personal Information – Hanmi Bank will never ask you to share your password, PIN, or verification code through email.
• Suspicious Email or Web Address – Check the sender’s full email address and any website addresses carefully. Fake emails or website domains often use small changes to look similar to the legitimate ones.
• Unverifiable Source – If the email claims to be from a company, call the number listed on its official website. Never rely on embedded links or contact information.

To protect yourself:

• Stop and think before responding to urgent or emotional requests.
• Don’t be in a rush: If something feels off or comes with a sense of urgency, take a step back and verify.
• Verify identities using trusted sources and reverse search tools.
• Create codewords with loved ones to confirm authenticity.
• Use trusted contact methods: If you get a strange request, reach out using a phone number or email you already know—not the one in the message.