The most convincing company in your Google results may be the one that does not exist.
Fraudsters. We know them as “low-cost” actors. But with generative AI, they can manufacture an entire digital identity: a professional-looking brand, fabricated news coverage, positive reviews, executive profiles, social media comments, and even deepfake endorsements from trusted public figures.
The result is a coordinated information ecosystem designed to survive the same online checks that people, investors, and compliance teams use to establish credibility.
AI Is Turning Isolated Scams Into Digital Ecosystems
In August, the Australian Securities and Investments Commission warned that scammers are using AI to create interconnected networks of deception. A victim may first encounter a deepfake video of a politician, celebrity, or financial commentator promoting an investment. The advertisement then leads to a fabricated news article, invented public comments, and a professional-looking investment platform.
If the user searches for the company, they may find additional websites, reviews, and articles that repeat the same claims. What appears to be independent confirmation is often simply another layer of the same operation.
According to ASIC’s official information on scam disruption, the regulator coordinated the removal of more than 19,400 online scams during the 2025–26 financial year. That represents a 182% increase compared with the previous year. The removed materials included fake investment platforms, phishing links, cryptocurrency scams and fraudulent advertisements.
ASIC also reported that Scamwatch complaints involving impersonated public figures accounted for A$7.4 million in losses. Scammers misused the identities of politicians, economists, business leaders, and financial commentators.
Ten Mentions Do Not Necessarily Mean Ten Sources
Traditional online verification often depends on repetition. If the same company name, executive, or investment product appears across several websites, it can seem more credible.
But repetition is not proof.
Ten articles can originate from one fabricated press release. Several review pages may belong to the same operator. A network of websites may repeat identical claims under different domain names. AI makes it possible to produce these variations quickly, cheaply, and in multiple languages.
This creates manufactured consensus:
an illusion that numerous independent sources agree when, in reality, every claim leads back to the same false origin.
Verification must therefore focus not only on how many times information appears, but on where it first appeared, who published it, and what independent evidence supports it.
Google Search Is Not Enough for Due Diligence
A search engine shows what is visible and relevant to a query. It does not guarantee that the information is authentic.
This distinction is becoming increasingly important for KYC and due diligence. A fabricated digital profile may contain all the elements typically associated with legitimacy: a corporate website, leadership biographies, media coverage, customer testimonials and registration or license numbers.
Criminals may even copy the details of a genuine regulated business. ASIC therefore advises users to verify license information through its official Professional Registers Search and to carefully compare the legal name, license number, website, and contact details.
A registration number displayed on a website is not evidence on its own. Neither is a polished brand, a high Google ranking, or an apparently positive media footprint.
How Businesses and Compliance Teams Should Respond
Digital due diligence must move from visibility checks to source verification.
Before trusting a company’s online profile, investigators should:
- identify the original source behind repeated claims;
- verify registration and licensing data through official databases;
- compare domains, contact details and legal entity names;
- examine publication dates, ownership and connections between websites;
- check whether quoted experts, employees and clients are real;
- review archived pages and changes in the company’s digital history;
- treat urgent demands, guaranteed returns and unsolicited offers as warning signs.
For legitimate businesses, this threat creates another problem. When fake companies can rapidly manufacture credibility, real companies must make their own digital identities easier to verify. Accurate corporate information, consistent leadership profiles, reliable media coverage, and clearly connected official channels are becoming part of reputation security.
A strong digital profile should not merely look credible. It should provide a traceable chain of evidence that banks, investors, partners and customers can independently confirm.
In the AI era, the challenge is proving which information deserves to be trusted.
To explore how unverified digital signals can also affect access to financial services, read our article, “When Debanking Becomes a Reputation Crisis.”
Have a questions? Let's get in touch
→ Contact us: hi@reputation.city
