Deepfake CEOs Drive $129M Wire Scam

US prosecutors charged three men over a two-year fraud scheme that allegedly used AI-generated CEO deepfakes and fake lawyers to persuade employees to send company money to attacker-controlled accounts. The scheme reportedly targeted organizations in healthcare, banking, consumer products, and fintech, with stolen funds converted into cryptocurrency and moved through accounts in multiple countries.

Key findings

• Three men were charged in connection with a two-year fraud scheme.
• The alleged scheme used AI-generated deepfakes of company CEOs and impersonated lawyers at major international law firms.
• Employees were persuaded to wire more than $129 million to accounts controlled by the group.
• Named victim types included US hospital systems, a Rhode Island bank, a Florida pet food company, and a UK fintech firm.
• The stolen money was allegedly converted to cryptocurrency and laundered through accounts in nine countries.

Who’s being targeted

• Commonly targeted roles: Finance, Accounts Payable, Treasury, Wire-transfer approvers, Executive assistants, Legal, Procurement.
• Affected industries: Healthcare, Banking, Financial technology, Pet food manufacturing.

Awareness takeaways

• Treat urgent payment requests that appear to come from a senior executive as unverified until they are confirmed through a known, independent contact method.
• Do not rely on a familiar face, voice, or apparent executive identity alone when approving a wire transfer; deepfakes can be used to make an impersonation seem credible.
• Require a second, out-of-band verification step for requests involving new payment instructions, unusual transfers, or high-value wires.
• Be especially cautious when an apparent lawyer or outside adviser supports an executive payment request; independently verify both the person and the firm using trusted contact details.