Deepfake CEOs Stole $129M From Businesses

US prosecutors allege that three men used AI-generated CEO voices or images to persuade employees that high-value financial transactions were legitimate. The scammers then impersonated lawyers from major international law firms and directed employees to wire money to accounts they controlled. The alleged scheme targeted organizations in healthcare, banking, financial technology, and consumer goods.

Key findings

• Three defendants were accused of using deepfake CEO voices or images and impersonated law-firm attorneys to steal more than $129 million.
• The fraud typically began with a call in which an attacker posed as the victim organization’s CEO and described a sham financial transaction.
• Victims were told to contact supposed attorneys at large international law firms; the conspirators then impersonated those attorneys and instructed employees to send large wire transfers.
• One alleged participant kept a handwritten "Lawyer Call" script, including language intended to discourage victims from discussing the calls with colleagues.
• Named victims included US hospital systems, a Rhode Island bank, a UK financial technology company, and a Florida pet-food company.
• The alleged group converted received funds into cryptocurrency and distributed them among conspirators.

Who’s being targeted

• Commonly targeted roles: Finance, Treasury, Accounts Payable, Financial Controllers, CFO organization, Executive Assistants, Legal, Procurement, Senior Executives.
• Affected industries: Healthcare, Banking, Financial technology, Pet food manufacturing.
• Attack channels: vishing.
• Impersonated: The victim company's chief executive, followed by attorneys at a large international law firm., A UK attorney at a large international law firm..

Awareness takeaways

• Treat an unexpected executive request for a high-value payment as unverified, even if the caller looks or sounds exactly like a senior leader. Confirm the request through a known, independently sourced contact method and follow established approval procedures.
• Independently verify outside lawyers and bank details using trusted contact information, not phone numbers, email addresses, or accounts provided during an unexpected request.
• Never let secrecy or urgency bypass payment controls. Escalate requests that tell you not to consult colleagues, managers, finance leadership, or legal teams.
• Require out-of-band confirmation and multiple authorized approvals before releasing large or unusual wire transfers, especially those involving new beneficiaries or international accounts.

Red flags to watch for

• An urgent, high-value transaction is introduced by a voice or image that may appear to be the CEO.
• The CEO directs the employee to unfamiliar outside counsel rather than established internal approval channels.
• The requested payment account is supplied by the purported lawyers and is not independently verified.
• The caller pressures the employee to keep a financial request secret from colleagues.
• A supposed attorney relies on an unexpected call rather than known legal contacts or documented engagement details.
• The caller requests a large wire transfer without normal internal review and verification.