A Hong Kong employee at engineering firm Arup transferred about $25.6 million after joining a video conference where every other participant was a deepfake. The incident shows how convincing fake video identities can be used to pressure employees into approving high-value payments, and why independent verification is essential for sensitive transactions.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
At Arup, a video call led to a $25.6 million transfer. The employee thought the other faces were colleagues. Every other participant was a deepfake. The instruction? 'We need you to approve this transfer during this meeting.' That's the trap: seeing familiar faces isn't verification. A video-only meeting, urgent payment, and no separate confirmation? Even a convincing face can't authorize a wire. Before releasing a large payment, call the approver using a number you already trust.
An Arup employee transferred $25 million to fraudulent accounts after joining a video call featuring deepfake impersonations of company executives. The case shows how realistic-looking executive impersonation can pressure employees into approving high-value payments, even when the request appears…
The article describes how real-world phishing and social engineering are evolving to bypass the checks employees are trained to use (bad grammar, suspicious URLs, obvious fake login pages). It highlights specific, observed attack workflows including QR-code “device hop” phishing, OAuth token theft…
The article warns that AI is making impersonation and social engineering more convincing, citing a real 2024 case where Arup was reportedly tricked during a video conference featuring a digitally cloned senior manager. The core lesson is to validate requests through policy and independent…
The article describes real-world deepfake and identity-fraud incidents where attackers used believable human impersonation to manipulate employees. In one case, a staff member at Arup joined a video call with what appeared to be the CFO and was tricked into sending about $25M across multiple wire…
The article describes how modern phishing can start with an email impersonation and then move into live deepfake video calls to pressure employees into sending money. It cites a widely reported case at engineering firm Arup where an employee, convinced by a deepfake video call featuring synthetic…
The article discusses Google’s new selfie-video account recovery, but it also highlights a real deepfake-enabled fraud case. In that incident, a finance employee joined a video call showing deepfake versions of coworkers and was persuaded to send multiple wire transfers, illustrating how realistic…
