Russian link in Facebook scams? Brzoska's team points to AIO Software

In October 2026, InPost chief Rafał Brzoska presented findings from the AI Forensic team, which examined the infrastructure behind scam ads shown to people in Poland on Facebook, Instagram and other Meta platforms. The team is led by Sebastian Kondracki, creator of the Polish language model Bielik.

From single ads to the infrastructure

According to Brzoska, removing individual ads is like fighting a hydra, so the researchers began looking for the infrastructure behind them. They found AIO Software, a company formally registered in Dubai.

Its offer includes so-called cloaking. This technology lets Meta's moderators and automated ad checks see a harmless website, while a user who clicks the ad lands on a page trying to extract money, for example through a fake investment. On a page reached from a Meta ad, the team found the company's tracking pixel.

Further analysis, the team says, showed operational links between AIO Software and Russia. The company reportedly recruited staff in St Petersburg. According to Rzeczpospolita, Brzoska also wrote that the firm pays in cryptocurrency.

An appeal to the state

Brzoska warns that what is a scam today could become a tool of Russian hybrid warfare tomorrow. He points out that criminals use AI-generated likenesses of the president, the prime minister, InPost's chief and others to rob people and sow confusion. The president, the prime minister and government institutions have been informed, and the team also presented its findings at a Sejm committee meeting. Brzoska expects action from the state and law enforcement.

Spider's Web reports that Meta may have earned as much as PLN 760 million in a year from showing scam ads. This is the outlet's estimate, with no methodology given. The materials we read contain no response from Meta or AIO Software.

What this means for you

Fake ads using the likenesses of well-known people and offers of "investments" also appear in social media feeds in the UK. Treat ads promising easy profits with caution, even if they appear to be promoted by famous people or institutions. The findings concern the Polish market and do not point to specific changes for users in the UK.