Scammers Impersonate DeepSeek CEO, Create Accounts on X

Published
Written by:
Vishwa Pandagle
Vishwa Pandagle
Cybersecurity Staff Editor

Cybercriminals are creating fraudulent accounts in the name of the CEO of DeepSeek, Liang Wenfeng. The cloned X (formerly Twitter) accounts have thousands of followers who may get targeted by scammers with malicious websites, links, and emails among others.

Cybersecurity Analyst and Researcher Dominic Alvieri posted screenshots of the newly found duplicated accounts of the acclaimed Founder and CEO of the China-based AI model.

The following fraudulent accounts in the name of Wenfeng have been recorded:

Fraudulent Account on X in the name of Liang Wenfeng, CEO of DeepSeek.
Fraudulent Accounts in the name of Liang Wenfeng the CEO of DeepSeek | Source: Dominic Alvieri / X
  1. Liang Wenfeng 梁文锋 - https://x.com/Liang_Wenfengg who has over 25K followers.
  2. Liang Wenfeng - https://x.com/official_liangw with over 8000 followers.
  3. $FENG - https://x.com/LiangWen_Feng, over 36,000 followers.

Threat actors can use the cloned social media accounts to share phishing links to malicious websites that ask for personal information, make payment, create accounts and more. 

This could lead to credential stuffing and further exploitation like identity theft, financial fraud, and data sale on the dark web. 

Alvieri found two fraudulent DeepSeek tokens and a website with an AI agent promoting a ‘cutting edge cryptocurrency.’

Screenshot showing images of fraudulent DeepSeek Token Fraud.
Source: DeepSeek Tokens Fraud | Source: Dominic Alvieri / X

In addition to the duplicated social media accounts, DeepSeek has been targeted with over a 100 fraudulent domains used for credential phishing, launching malware attacks, and hacking social media accounts.

The official website of DeepSeek recently announced being hit by a cyber attack that disrupted registration of new users.
DeepSeek frauds are growing at an alarming rate owing to its fame, growing followers and increased market value. Cybercriminals are on the lookout for users who will fall prey to their fraud.

It is imperative that users don’t subscribe to all the accounts in the name of DeepSeek CEO, employees or tokens that might sound legitimate and look for the official website by independently searching online.



For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: