<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>AI Safety Research Group — AI-enabled risk register</title>
    <link>https://aisafetyresearchgroup.com/risks</link>
    <atom:link href="https://aisafetyresearchgroup.com/feed.xml" rel="self" type="application/rss+xml" />
    <description>Documented AI-enabled fraud, deepfake impersonation and agentic exploitation. Nine ranked categories, every figure traced to its primary source. Registry 2026.1.</description>
    <language>en-us</language>
    <copyright>AI Safety Research Group. Figures remain the property of their primary sources.</copyright>
    <lastBuildDate>Tue, 27 Oct 2026 12:00:00 +0000</lastBuildDate>
    <pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate>
    <ttl>720</ttl>

    <item>
      <title>Synthesized-voice family extortion — rank 01, critical</title>
      <link>https://aisafetyresearchgroup.com/risks/synthesized-voice-family-extortion</link>
      <guid isPermaLink="true">https://aisafetyresearchgroup.com/risks/synthesized-voice-family-extortion</guid>
      <pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate>
      <category>Risk register</category>
      <description>A cloned parent or child voice stages an emergency and demands immediate payment. A voice can be cloned from under 30 seconds of audio, per the Federal Trade Commission. Record check: no verified case exists of voice synthesis used to carry out a physical abduction.</description>
    </item>

    <item>
      <title>Deepfake-authorised corporate payment fraud — rank 02, critical</title>
      <link>https://aisafetyresearchgroup.com/risks/deepfake-authorised-payment-fraud</link>
      <guid isPermaLink="true">https://aisafetyresearchgroup.com/risks/deepfake-authorised-payment-fraud</guid>
      <pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate>
      <category>Risk register</category>
      <description>Financial controls defeated by a face and a voice synthesised in real time. Arup authorised HK$200m, about US$25.6m, across 15 transfers after a video conference in which every other participant was synthetic.</description>
    </item>

    <item>
      <title>AI-automated spear phishing — rank 03, severe</title>
      <link>https://aisafetyresearchgroup.com/risks/ai-automated-spear-phishing</link>
      <guid isPermaLink="true">https://aisafetyresearchgroup.com/risks/ai-automated-spear-phishing</guid>
      <pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate>
      <category>Risk register</category>
      <description>Reconnaissance and personalisation automated to a cost that makes targeted attacks routine. In a four-arm trial of 101 participants, fully automated campaigns reached a 54% click-through rate against 12% for a control.</description>
    </item>

    <item>
      <title>Synthetic identity and verification bypass — rank 04, severe</title>
      <link>https://aisafetyresearchgroup.com/risks/synthetic-identity-kyc-bypass</link>
      <guid isPermaLink="true">https://aisafetyresearchgroup.com/risks/synthetic-identity-kyc-bypass</guid>
      <pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate>
      <category>Risk register</category>
      <description>Liveness checks defeated by injected synthetic video at the point of account opening. US identity fraud losses reached US$27.3bn across 18 million victims, with new-account fraud victims up 31%.</description>
    </item>

    <item>
      <title>Agentic vulnerability exploitation — rank 05, high</title>
      <link>https://aisafetyresearchgroup.com/risks/agentic-vulnerability-exploitation</link>
      <guid isPermaLink="true">https://aisafetyresearchgroup.com/risks/agentic-vulnerability-exploitation</guid>
      <pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate>
      <category>Risk register</category>
      <description>Agents that find and exploit software flaws autonomously. A GPT-4 agent exploited 73.3% of 15 prepared web vulnerabilities with no prior knowledge of them; the same class of agent found and helped close real flaws before use.</description>
    </item>

    <item>
      <title>Non-consensual synthetic intimate imagery — rank 06, high</title>
      <link>https://aisafetyresearchgroup.com/risks/non-consensual-synthetic-imagery</link>
      <guid isPermaLink="true">https://aisafetyresearchgroup.com/risks/non-consensual-synthetic-imagery</guid>
      <pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate>
      <category>Risk register</category>
      <description>Sexualised forgeries generated at scale, overwhelmingly depicting women and girls. A representative three-region survey of 7,231 respondents found 3.2% reporting creation, sharing or threats to share such images.</description>
    </item>

    <item>
      <title>Official impersonation and political voice spoofing — rank 07, high</title>
      <link>https://aisafetyresearchgroup.com/risks/official-impersonation-voice-spoofing</link>
      <guid isPermaLink="true">https://aisafetyresearchgroup.com/risks/official-impersonation-voice-spoofing</guid>
      <pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate>
      <category>Risk register</category>
      <description>Authority spoofed at the scale of a phone bank. A US$6m penalty was finalised against the consultant behind a forged presidential robocall, alongside a US$1m settlement from the transmitting carrier.</description>
    </item>

    <item>
      <title>Spoofing of voice authentication — rank 08, watch</title>
      <link>https://aisafetyresearchgroup.com/risks/voice-authentication-spoofing</link>
      <guid isPermaLink="true">https://aisafetyresearchgroup.com/risks/voice-authentication-spoofing</guid>
      <pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate>
      <category>Risk register</category>
      <description>Voiceprints treated as credentials against attack families that remain unsolved. ASVspoof 5 tests detectors across 32 attack algorithms, and generalisation to unseen attacks is still an open problem.</description>
    </item>

    <item>
      <title>Industrialised consumer fraud amplified by generative media — rank 09, watch</title>
      <link>https://aisafetyresearchgroup.com/risks/investment-romance-crypto-fraud</link>
      <guid isPermaLink="true">https://aisafetyresearchgroup.com/risks/investment-romance-crypto-fraud</guid>
      <pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate>
      <category>Risk register</category>
      <description>The largest reported losses belong to conventional investment, romance and cryptocurrency fraud, where synthesis is an accelerant rather than the mechanism. Reported losses are a floor, not a total.</description>
    </item>

    <item>
      <title>Newsroom resources: boilerplate, figures and citation formats</title>
      <link>https://aisafetyresearchgroup.com/press</link>
      <guid isPermaLink="true">https://aisafetyresearchgroup.com/press</guid>
      <pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate>
      <category>Newsroom</category>
      <description>Copy-ready descriptions of the group, headline figures with the agency behind each, citation formats, reuse terms, and what the evidence does not establish.</description>
    </item>
  </channel>
</rss>
