Fake DeepSeek Developers Target Chinese Users

Chinese authorities have uncovered a sophisticated fraud scheme in which scammers posed as developers of a DeepSeek blockchain project to deceive investors.

Capitalising on the AI firm's growing reputation—particularly after its model reportedly matched OpenAI’s performance at a lower cost—these fraudsters falsely claimed to use DeepSeek technology, presenting their platform as a secure and lucrative investment.

According to officials, the hype surrounding DeepSeek attracted eager investors, making it a prime target for exploitation.

The scammers launched crowdfunding campaigns under false pretenses before disappearing with the funds.

Victims were led to believe they could earn over 10,000 yuan ($1,373) per month through DeepSeek-related opportunities.

One of the schemes involved selling a tutorial for 39.9 yuan ($5.5), supposedly teaching users how to create viral content.

However, only four of its 104 pages contained relevant material, while the rest was publicly available information.

In another ploy, fraudsters ran fake “monetisation training camps,” charging 299–399 yuan ($41–$55) for courses that proved to be worthless.

The deception extended further as scammers established fake DeepSeek communities, masquerading as official groups.

They offered “internal test qualifications” and “advanced courses” to gain credibility before launching DeepSeekCoin—a counterfeit cryptocurrency purportedly backed by DeepSeek’s technology.

Investors who bought in ultimately lost their funds.

In response to the growing fraud, DeepSeek publicly disavowed any association with crypto tokens in January, distancing itself from the schemes that falsely used its name.

Malware-Spreading Fake DeepSeek Apps

Authorities are sounding the alarm over a surge in counterfeit DeepSeek applications embedded with malware.

Cybercriminals have been distributing these fraudulent apps under various names—DeepSeek.apk, DeepSeek.exe, DeepSeek.msi, and DeepSeek.dmg—posing severe security risks.

Once installed, these deceptive applications prompt users to download an "update" laced with harmful code, granting attackers access to system functions and enabling the theft of sensitive data, including contacts and messages.

In some cases, the malware even prevents users from uninstalling the app, making removal exceedingly difficult.

With the growing popularity of AI-driven applications like DeepSeek, authorities warn that such scams will likely become more prevalent.

The Chinese authorities stated:

“It is expected that in the future, virus Trojans of various artificial intelligence applications, including impersonation of DeepSeek, will increase.”

Users are urged to verify sources before downloading AI-related software and remain vigilant against fraudulent applications that could compromise their security.

The Ministry of Public Security's Cybersecurity Bureau published a report on a Trojan virus impersonating DeepSeek.