A finance worker at engineering firm Arup logged into what looked like a normal video call. His company's CFO was there. Colleagues too. They spoke, their faces moved on screen, everything seemed legitimate. He authorized a $25.6 million wire transfer. The entire meeting was artificially generated. By the time anyone noticed, the money was gone.
That fraud case pushed Europe to act. Starting August 2, 2026, Article 50 of the EU AI Act now requires anyone deploying AI systems to EU users to follow strict transparency rules. The regulation targets exactly the kind of synthetic impersonation that cost crypto users alone some $17 billion annually in recent years.
What the Rules Actually Demand
The EU AI Act entered force in August 2024, but the transparency obligations just became enforceable. Three requirements matter most for anyone running platforms or services in Europe.
Chatbots and virtual support agents must explicitly tell users they are talking to software, not a person. No burying it in terms and conditions. The disclosure happens immediately, right there in the conversation.
Any AI-generated or manipulated image, audio, video, or text needs machine-readable watermarks. A digital signature embedded in the file itself, detectable by automated systems.
Deepfakes depicting real, identifiable people must carry visible labels stating they are artificially generated. The law applies regardless of whether the creator intended to deceive anyone.
Who Pays When Rules Break
Enforcement splits responsibility clearly. AI developers and service providers face fines up to €15 million or 3% of global annual turnover, whichever is larger. Crypto exchanges hosting user communities, third-party chatbot integrations, or community support bots now have direct legal exposure if they fail to comply.
For crypto users specifically, this creates a faster path to eliminate fake support bots that have historically posed as exchange staff to steal credentials. Scam deepfake videos impersonating project founders or celebrities promoting tokens now have legal teeth behind their removal.
Any platform serving EU users must implement these controls or face penalties. The regulation doesn't just apply to European companies. A US exchange, a Singapore wallet provider, or a decentralized protocol with EU users all fall under the scope.
This article is informational and does not constitute financial or legal advice. Regulatory compliance requirements vary by jurisdiction and individual circumstance.
