Point of Focus
- IOG warned users to avoid its YouTube channel after an apparent hijacking was used to promote a fake crypto giveaway.
- The livestream featured a suspected AI-manipulated Charles Hoskinson video.
- The scam used Project Catalyst branding to appear legitimate.
Input Output Group (IOG), the company behind much of Cardano’s development, has warned users to stay away from its official YouTube channel after an apparent hijacking was used to promote a cryptocurrency giveaway scam.
The compromised channel on Friday livestreamed what appeared to be an AI-manipulated video of Cardano founder Charles Hoskinson. The broadcast, presented as a Project Catalyst town hall, displayed a QR code and promised viewers they could “double your wealth” by participating in a crypto giveaway.
“Please avoid interacting with the IO Group YouTube channel until further notice,” IOG said, urging users not to click links, send funds, or provide personal information.
Fake Hoskinson video uses Project Catalyst branding
The fraudulent broadcast sought to appear legitimate by using branding associated with Project Catalyst, Cardano’s decentralized community funding program.
Project Catalyst allows members of the Cardano ecosystem to submit, assess, and vote on proposals seeking funding from the network’s treasury.
The official @IOGroup YT channel is currently compromised and live-streaming a QR code scam. It will take you to another site and try to steal your funds by tricking you into completing a transaction.
I do hope they get the channel back. @YouTubeCreators @YouTube pic.twitter.com/wJ4oiOKES0
— Pete (@astroboysoup) September 18, 2026
However, there is no indication that Hoskinson, IOG, or Project Catalyst authorized the giveaway promoted during Friday’s stream.
The apparent use of AI-generated or manipulated footage added another layer of credibility to the attack. However, no independent forensic analysis has yet established exactly how the video was created.
Scammers can use edited footage, synthetic voices, or fully generated videos to impersonate prominent crypto executives, making fraudulent livestreams increasingly difficult for viewers to identify at first glance.
Cardano has been warning about YouTube giveaway scams for years
The attack follows a well-established crypto scam model.
Cardano’s own security guidance warns specifically about fraudulent ADA giveaways that promise to return twice the amount of cryptocurrency sent by a victim.
The scams often feature fake videos or livestreams involving Hoskinson and other recognizable figures to create the appearance of an official promotion.
CARDANO’S YOUTUBE CHANNEL HAS APPARENTLY BEEN HIJACKED
IOG has warned users to stay away from its YouTube channel after it started livestreaming a fake-looking Charles Hoskinson video promoting a “double your wealth” crypto scam.
AI-generated videos are getting seriously… pic.twitter.com/PCzMdQzql6
— That Martini Guy ₿ (@MartiniGuyYT) September 18, 2026
The Cardano Foundation documented similar attacks as early as 2020, warning that fraudsters were taking over established YouTube accounts and using their existing audiences to promote fake giveaways.
The organization has repeatedly stressed that legitimate Cardano entities, including IOG, the Cardano Foundation, and EMURGO, do not run promotions requiring users to send ADA first in exchange for a larger payment.
Once cryptocurrency is transferred to a scammer-controlled address, the transaction generally cannot be reversed.
AI deepfakes raise new crypto impersonation risks
The latest incident also highlights how advances in generative AI could make a familiar type of crypto fraud more convincing.
Rather than relying solely on old footage and fake graphics, attackers can potentially reproduce a recognizable executive’s voice and appearance while generating new statements tailored to a scam.
Cardano’s security guidance has already warned that AI improvements are increasing the sophistication of impersonation schemes.
IOG has not identified a wallet associated with Friday’s fraudulent stream, meaning it remains unclear whether viewers transferred ADA or other cryptocurrencies to the attackers.
No verified blockchain analysis has established losses connected specifically to the incident.
IOG has yet to explain how the channel was compromised
IOG’s immediate response has focused on keeping users away from the affected channel while the incident is investigated.
The company has yet to disclose whether the attacker bypassed multi-factor authentication, obtained employee credentials, or exploited another vulnerability to gain control of the YouTube account.
The IOG YouTube apparently has been compromised. Do not trust any videos or click on any links on it. Working with YouTube to take it down and reset credentials
— Charles Hoskinson (@IOHK_Charles) September 18, 2026
There is also no indication that the incident affected IOG systems beyond YouTube.
The breach nevertheless shows the risks created when scammers gain control of verified or established communication channels.
Instead of building an audience from scratch, attackers can exploit the reputation and reach of an existing account to put fraudulent content directly in front of users who already trust the source.
Unlock premium content
Create a free account to continue reading AlphaClub articles and access exclusive features.
Share


