● CRITICAL THREAT

Deepfake CEO Fraud

A finance employee gets a live video call from the "CEO" authorizing an urgent wire — and the face and voice are AI fakes good enough to pass. Real money leaves on a fake instruction. Require a second, out-of-band approval for transfers, because the screen can now lie convincingly.

Losses: $2.9 billion in BEC losses (FBI 2024) — deepfake cases growing rapidly

Targets: Finance departments, CFOs, accountants, employees with wire transfer authority

Updated: 2026-01-07

Also known as: Business Email Compromise 2.0 · Executive Impersonation · CFO Fraud · Deepfake Wire Fraud

How It Works

This is one of the most sophisticated corporate scams, using AI to impersonate executives in real-time. **How it works:** 1. Criminals research a company — learn names, roles, communication styles 2. They gather video/audio of executives from earnings calls, YouTube, interviews 3. Using AI, they create real-time deepfakes or convincing audio clones 4. Finance employee receives urgent request from "CEO" or "CFO" 5. May include a video call where the executive appears live (but is AI-generated) 6. Employee is instructed to wire funds urgently for acquisition, deal, or emergency 7. Money goes to criminal-controlled accounts **Real case (2024):** A Hong Kong finance worker joined a video call with the company's CFO and other executives discussing a secret acquisition. He transferred $25 million. Every person on the call was a deepfake — he was the only real human. **Why it's devastating:** - Employees trust video more than email - Urgency and secrecy prevent verification - AI quality is now nearly indistinguishable from real video - Large wire transfers happen before anyone realizes

How Scammers Make Contact

Video calls (Zoom, Teams)Phone callsVoice messagesEmail with video attachments

Warning Signs & Red Flags

Urgent, secret request for large wire transfer
Request to bypass normal approval procedures
Video quality slightly off — lighting, lip sync, unnatural movements
Executive behaves slightly differently than normal
Request comes at unusual time (late Friday, before holiday)
Pressure not to discuss with others or verify through normal channels
New or unusual bank account for transfer
Audio or video has subtle glitches or artifacts

Real-World Example

"The CFO called me on Zoom and explained we were acquiring a company confidentially. He looked and sounded exactly like himself. Three other executives joined the call. They instructed me to wire $25.6 million immediately. I did. Later, I called the real CFO on his mobile. He had no idea what I was talking about. Every person on that Zoom call had been an AI deepfake."
— Hong Kong Police, CNN Report February 2024

How to Protect Yourself

Implement multi-person authorization for large transfers
Create verification code words with executives for emergencies
Always verify through a second channel (call their known number)
Be suspicious of any request to bypass normal procedures
Train finance teams specifically on deepfake threats
Establish clear wire transfer protocols that can't be overridden by urgency
If a video call seems off, ask the person to turn their head or make unusual movements
Consider AI detection tools for critical communications

What To Do If You're a Victim

1Contact your bank immediately — wire recalls are sometimes possible within hours
2Notify law enforcement immediately — FBI handles BEC cases
3Preserve all evidence — emails, call recordings, transaction records
4Report to FBI IC3 at ic3.gov
5Engage incident response and legal teams
6Determine if other employees were targeted
7Consider engaging forensic investigators

Report This Scam

FTC Report Fraud FBI IC3 Identity Theft

Frequently Asked Questions

What is Deepfake CEO Fraud?

What are the warning signs of Deepfake CEO Fraud?

Urgent, secret request for large wire transfer. Request to bypass normal approval procedures. Video quality slightly off — lighting, lip sync, unnatural movements. Executive behaves slightly differently than normal. Request comes at unusual time (late Friday, before holiday).

How do I protect myself from Deepfake CEO Fraud?

Implement multi-person authorization for large transfers. Create verification code words with executives for emergencies. Always verify through a second channel (call their known number). Be suspicious of any request to bypass normal procedures.

What should I do if I'm a victim of Deepfake CEO Fraud?

Contact your bank immediately — wire recalls are sometimes possible within hours. Notify law enforcement immediately — FBI handles BEC cases. Preserve all evidence — emails, call recordings, transaction records. Report to FBI IC3 at ic3.gov.

How serious is this threat?

We rate this critical — among the most damaging schemes we track. Reported losses: $2.9 billion in BEC losses (FBI 2024) — deepfake cases growing rapidly. Most exposed: Finance departments, CFOs, accountants, employees with wire transfer authority.

Can I get my money back?

Recovery depends on how you paid. Credit card payments may be reversed through chargebacks, while wire transfers and cryptocurrency are rarely recoverable. Report immediately to your bank and file complaints with the FTC at reportfraud.ftc.gov and the FBI IC3 at ic3.gov.

How do I report Deepfake CEO Fraud?

Report to the FTC at reportfraud.ftc.gov. For internet crimes, file with the FBI IC3 at ic3.gov. For identity theft, visit identitytheft.gov. You should also contact your local police and your bank.

Sources & References

Related Scams

AI Voice Cloning Scam

With a few seconds of audio — often lifted from social media — a scammer can clone a loved one's voice and call you mid-"emergency," needing money immediately. Your ear believes it. Agree on a family code word now, and when the panic call comes, slow down and verify on a number you already trust.

Deepfake Video Scam

AI-generated video puts a familiar face — a celebrity, a CEO, a public figure — behind a fake investment, crypto giveaway, or endorsement. The face is real; the words were never said. If a video is rushing you toward a wallet or a website, assume it is manufactured until proven otherwise.

AI-Enhanced Phishing

Phishing used to give itself away with broken grammar. AI fixed that. The emails are now clean, personalized, and plausible, which means the old "look for typos" advice is dead. Verify any request through a channel you control, not the one that contacted you.

Think you've encountered this scam?

Use the free AI scanner to analyze suspicious messages, websites, or phone numbers.

Scan Now — It's Free