New OPCOPRO Scam Uses AI and Fake WhatsApp Groups to Defraud Victim

A massive fraud operation named OPCOPRO is currently trapping mobile users inside a completely fabricated digital world. According to a recent report by the research firm Check Point, this “Truman Show” scam represents a major shift in crime. Instead of using viruses, these scammers use AI to build fake communities that trick victims into a false sense of security over several weeks.

****A Fake World on WhatsApp****

The trap usually starts with a simple text. Back in October 2025, unsuspecting users began receiving SMS messages that looked like they were from Goldman Sachs, promising stock returns of 70%. However, Goldman Sachs stated it was not a legitimate message from them, Check Point researchers noted, confirming the brand was being impersonated.

If you click the link in that text, you’re dropped into a private WhatsApp group where the ‘show’ starts. The group is run by two main characters: Professor James and his assistant Lily. Though they sound like real professionals, the investigation revealed that their profile photos are AI-generated and they don’t actually exist.

The group might have 90 members, but most are just automated bots. As we know it, humans usually have different ways of talking, but these bots all sound the same, constantly cheering, posting fake profit screenshots, and making the Professor look like a genius. It is worth noting that these bots use internet-based phone numbers that can’t be reached if you try to call them.

****Using Official Apps to Gain Trust****

The most dangerous move in this scam is using the Apple App Store and Google Play Store for legitimacy. After weeks of building trust, victims are told to download the O-PCOPRO app (specifically the com.yme.opcopro version on Android). Most people lower their guard because the app is in an official store.

According to researchers, the scammers even provide a fake Cooperation Agreement and claim they are partnered with Oppenheimer Holdings to keep the lie going. Once the app is installed, the trap springs into action. Victims are asked to complete a KYC process (a key term for Know Your Customer identity checks). This involves uploading a photo of your ID and a liveness selfie.

Attack Chain (Source: Check Point)

****No Trading, Just Theft****

Once they have your ID, the scammers promise returns as high as 370% to 700% to get you to deposit money. However, the app is a total hollow shell. “The mobile apps themselves contain no trading logic,” researchers noted, and are just a WebView (a browser window) showing whatever fake numbers the scammers want you to see.

The fallout is a total nightmare for personal security. With your ID and selfie, these criminals can perform a SIM swap to steal your phone number or even trick your office IT desk into giving them access to your work accounts. Researchers concluded that this is now an industrialized system, capable of being launched in any language, at any time.

(Photo by Christian Wiediger on Unsplash)