Disinformation as a Service - A New Threat?

Online disinformation has been a problem for years. What changed by 2026 is the economics of producing it. Mis- and disinformation ranked as the WEF's number one short-term global risk in both 2024 and 2025. The World Economic Forum's Global Risks Report 2026, built from a survey of more than 1,300 global leaders and risk experts, has it sliding to the second spot this year, just behind geoeconomic confrontation and still ahead of societal polarization. That is not a marketing headline from a security vendor. It is the WEF's own annual survey, and disinformation has sat in the top three for three consecutive years now.

The reason disinformation climbed that ranking is largely cost. A documented automated disinformation campaign can now be built for under $400 a month, and a convincing 60-second deepfake video can be produced in about 25 minutes using freely available tools, at essentially zero marginal cost. When something that used to require a studio and a skilled editor now takes less time than a coffee break, the volume problem gets much worse. Welcome to disinformation as a service, where manipulating public opinion is now a line item rather than a covert operation.

Important note: throughout this article we use the acronym DaaS for Disinformation as a Service. Do not confuse it with Desktop as a Service, a completely unrelated IT term that happens to share the abbreviation.

What is Disinformation as a Service?

Disinformation as a Service describes a commercial arrangement where operators create and spread false information on behalf of paying clients. It is a service model, complete with pricing tiers in some documented cases, built around manufacturing narratives rather than reporting facts.

It takes many forms: fabricated news articles, networks of fake social accounts, and increasingly, deepfake video and audio that is now, per the WEF's 2026 reporting, nearly indistinguishable from authentic footage to an untrained eye. The end goal is usually to shift public opinion, damage a target's reputation, or influence a specific outcome, whether that is an election, a stock price, or a competitor's customer base.

It is worth being precise about terminology here, since the two get conflated constantly. Disinformation is false information spread deliberately, with intent to mislead. Misinformation is false information spread without that intent, usually because the person sharing it genuinely believes it is accurate. The legal and reputational exposure differs quite a bit depending on which one you are dealing with.

Why this counts as a business threat, not just a political one

Disinformation as a service started in politics, where state actors and campaigns used it to shape elections. It has since expanded well past that. Businesses now use the same playbook against competitors, and criminal groups use it purely for financial gain.

The financial services sector is a useful case study here. Fintech companies are experiencing a sharp rise in deepfake-driven incidents and, according to Adaptive Security's 2026 research, carry the highest per-incident losses of any subsector tracked. Insurance faces a different flavor of the same problem: fabricated injury and accident evidence generated with AI tools, which is much harder to detect than a doctored photo used to be.

More broadly, 62% of organizations have now faced at least one deepfake-related attack, with reported losses across all sectors passing $2 billion. Chainalysis's 2026 Crypto Crime Report separately found that scams using deepfaked images of government officials grew more than 1,400% during 2025, and that AI-enabled scams generated roughly 4.5 times more revenue per operation compared to traditional scams. That is not a rounding error, that is a fundamentally different return on criminal effort.

Who uses Disinformation as a Service, and why

Anyone looking to manufacture a false narrative is a potential buyer. The recurring categories:

• Political actors: parties, candidates, and governments spreading false claims about opponents or attempting to sway public opinion on a specific policy.
• Corporate actors: businesses undermining a competitor's reputation or inflating perception of their own products.
• Criminal organizations: groups running disinformation purely for direct financial return, increasingly through AI-generated scam content.
• State-sponsored actors: foreign governments running information warfare as part of broader geopolitical strategy.
• Ideological actors: individuals or groups pushing an agenda, often through emotionally charged, fabricated content designed to spread fast.

The ecosystem behind Disinformation as a Service

This is not one person in a basement. It is a small supply chain, with distinct roles.

1. Content producers ("troll farms")

These operators manufacture false or misleading content at volume, often using sensational headlines and emotionally charged framing designed to spread quickly. The most sophisticated operations historically ran from less visible corners of the internet, though plenty operate in the open on mainstream platforms now. Generative AI has lowered the skill floor here dramatically; NewsGuard's tracking found at least 3,006 AI-generated content farm sites by March 2026, up from roughly 2,089 just five months earlier in October 2025. That growth rate, nearly 45% in under half a year, tells you how quickly new operators can spin up once the tooling gets cheap enough.

2. Distributors

Once content exists, someone has to push it out. Distributors use social platforms, fringe news sites, and email lists, often supplementing organic reach with bot networks and fake accounts to force early engagement.

3. Amplifiers

Amplifiers extend reach further, sometimes through coordinated hashtag campaigns, sometimes through paid influencers with large followings who share content, knowingly or not, in exchange for compensation. A single retweet from a large account can put fabricated content in front of millions of people within minutes.

4. Clients

None of this exists without someone paying for it. Clients commission the campaign and define the target outcome, whether that is a damaged competitor, a swayed electorate, or a manipulated stock price.

Top risks this poses to your business

1. Legal exposure

Becoming a victim of disinformation can create liability that extends to partners, employees, and customers who acted on false claims. The reverse is also true, and it can be more severe: organizations that amplify or fail to verify disinformation can be sued directly. The clearest example remains Dominion Voting Systems' defamation suit against Fox News, which centered on broadcast claims about the 2020 US election and settled for $787.5 million in 2023, one of the largest defamation settlements in US media history. That case fundamentally changed how broadcasters and publishers think about on-air claims they cannot independently verify.

2. Reputational damage and business loss

False information about a company erodes the trust customers, investors, and partners place in it. That typically shows up as declining sales, canceled partnerships, and a harder time closing new business, sometimes for years after the original claim is debunked.

3. Operational disruption

Internally, disinformation creates uncertainty that bleeds into productivity. Employees spend time verifying or arguing about claims instead of working, morale drops, and in extended cases turnover rises as people who feel personally targeted by false claims decide it is not worth staying.

What makes disinformation so hard to stop

Nina Schick, author and disinformation researcher who has tracked synthetic media for years, described the core mechanism behind why this works so well in an interview with Business Insider: "Misinformation campaigns have a long history, and battling for a political narrative is not a new thing. But the boundaries have been completely upended by the new features of our information ecosystem." That observation predates the current wave of generative AI tools, and if anything it has aged into something closer to understatement given how cheap production has since become.

1. Accountability is genuinely elusive

Unless the responsible party is a large, identifiable organization, disinformation is difficult to prosecute. Tracing origin across borders is slow, and even once you identify a likely source, proving intent (rather than an innocent mistake, or a hacked account, as several high-profile influencers have claimed) is its own legal battle.

2. It is designed to look credible

Convincing disinformation borrows the visual and structural language of real news: authentic-looking images, plausible quotes, urgent headlines. Combined with deepfakes that the WEF says have now crossed the threshold of eliminating earlier detectable glitches, the average reader has fewer reliable visual cues to rely on than they did even two years ago.

3. It is cheap and fast to produce

As covered above, campaign costs have dropped to roughly $400 a month for a full automated operation, and individual deepfake assets take minutes rather than days. There is no editorial process slowing anything down, which is precisely the point.

Also Read: The Most Dangerous Cyber Threats

Mitigating the risk

None of this is unmanageable, but it does require deliberate effort rather than hoping it does not happen to you.

• Monitor your brand across platforms: social listening tools can flag a coordinated disinformation campaign while it is still small, before it gains the kind of traction that makes correction difficult.
• Build a crisis communication plan before you need one: define who responds, how fast, and through which channels, so the first hours of a real incident are not spent figuring out the basics.
• Train employees to recognize and report it: structured awareness training should now explicitly cover deepfake indicators, not just phishing emails.
• Run regular vulnerability assessments of your public-facing presence: understand which platforms carry your brand's risk exposure and where a fabricated claim would do the most damage fastest.

Also Read: How to Remediate Cyber Threats

A live example: fabricated polling in the 2026 election cycle

Abstract risk numbers are one thing. A concrete example from this year's election cycle, reported in August 2026, involved a previously unknown polling outfit publishing survey results claiming a campaign was gaining momentum. The numbers spread across social platforms before anyone checked the source. Within days, the poll was confirmed fabricated, with no verifiable respondents or methodology behind it, just a name that sounded credible enough not to get questioned in the moment.

That incident is a useful template for how disinformation as a service actually operates against organizations that are not political campaigns at all. Replace "polling outfit" with "industry analyst firm" and "campaign momentum" with "a competitor's product failure rate," and you have the exact same mechanism aimed at a business instead of a candidate. The defense is the same in both cases: verify the source before amplifying it, and build a habit internally of asking who actually produced a number before repeating it in a board deck or a press release.

Where things stand

Disinformation as a service is not a fringe problem anymore, it topped the WEF's own global risk list for a second straight year running. Governments have responded with real institutional infrastructure: the US operates the Global Engagement Center to counter foreign disinformation and propaganda, and the EU runs the EUvsDisinfo initiative, which maintains a public database of disinformation incidents.

That institutional response helps at the macro level, but it will not protect an individual company from a targeted campaign. For businesses, the practical responsibility is staying alert, having a response plan ready before an incident hits, and treating deepfake-aware training as standard rather than optional, given how cheap and convincing this content has become.