Deepfake Zoom Call Tricks CFO Into $500K Transfer

Biometric Update · High sophistication
Last updated August 5, 2026

A real incident described in the article involved criminals using a deepfake Zoom call where all participants (including the CFO’s boss) were fabricated, convincing a Singaporean CFO to transfer US$500,000. The article focuses on Fraunhofer SIT’s prototype to detect deepfakes in live video calls and emphasizes pairing detection with clear procedures like out-of-band verification for any financial transfer requests.

Key findings

  • A 2025 deepfake Zoom meeting in Singapore allegedly led to a CFO transferring US$500,000 after being shown fabricated participants, including his boss.
  • Fraunhofer SIT built a proof-of-concept tool that analyzes audio and video during live calls and produces a probability score indicating manipulation.
  • The system is designed to run locally to avoid sending sensitive video to external servers.
  • The article recommends formal procedures: financial transfer requests during calls should be confirmed via a second independent channel.

Who’s being targeted

  • Commonly targeted roles: Executives, Finance/Treasury, Accounts Payable, Anyone approving payments, Risk/Compliance.
  • Affected industries: Corporate executive teams, Finance (accounts payable/treasury), Banking identity verification (video ID).
  • Attack channels: vishing.
  • Impersonated: The CFO’s boss and internal colleagues (deepfaked participants on a Zoom call).

Awareness takeaways

  • Require out-of-band verification (a separate channel) for any wire/transfer request made during a call.
  • Treat video presence as untrusted, deepfakes can fabricate multiple attendees, not just one person.
  • Use a defined challenge/verification procedure when identities seem suspicious (questions, callbacks, or other confirmation steps).

Red flags to watch for

  • Unusual urgency and pressure to move money during a call
  • Instruction to complete a high-value transfer based only on the meeting attendees’ appearance
  • Lack of independent verification via a known, separate channel
Try Mirage

Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.

Get a demo
Read the video transcript

Imagine joining a Zoom with your boss and finance team… and every single face on screen is fake. In 2025, a Singapore CFO did that. A deepfake Zoom of his ‘boss’ and colleagues pushed him to wire US$500,000, every participant on that call was fabricated. Here’s the trap: we’re wired to trust live video. But deepfakes can clone your boss’s face, voice, even a whole team, and then demand an urgent transfer on the spot. So if anyone asks for a transfer on a call, even your ‘boss’, do one thing: hang up and confirm it on a separate channel you already trust.

Similar attacks

Criminals Use AI Pretexts to Bypass Guardrails

Criminals Use AI Pretexts to Bypass Guardrails

Research from Cisco Talos and CrowdStrike says criminals are building AI into everyday operations, from writing malicious code to scaling fraud infrastructure. The reports describe real prompt logs where attackers use simple “authorized testing” claims to trick AI tools into helping them, plus…

August 6, 2026
Fake Zoom/Teams Calls Used to Steal Crypto Wallets

Fake Zoom/Teams Calls Used to Steal Crypto Wallets

North Korea-linked BlueNoroff is using fake Zoom and Microsoft Teams meeting pages shared from hijacked trusted contacts (often via Telegram) to trick victims into “updating” Zoom/Teams and running malicious commands. The phishing kit also fingerprints the victim’s browser to identify installed…

July 24, 2026
Deepfake Video Call Drove $25M Wire Transfer Scam

Deepfake Video Call Drove $25M Wire Transfer Scam

The article discusses Google’s new selfie-video account recovery, but it also highlights a real deepfake-enabled fraud case. In that incident, a finance employee joined a video call showing deepfake versions of coworkers and was persuaded to send multiple wire transfers, illustrating how realistic…

July 23, 2026
Fake FBI ‘IC3 Help’ Scams Hit Victims Twice

Fake FBI ‘IC3 Help’ Scams Hit Victims Twice

The FBI warns scammers are impersonating FBI/IC3 staff and re-targeting people who already lost money to fraud. The scammers use emails, phone calls, social media messages, and even AI-generated videos to push victims to spoofed IC3 websites or to hand over more personal and financial information,…

July 21, 2026
Deepfake ‘Kidnapping’ Calls and the Safe Word Fix

Deepfake ‘Kidnapping’ Calls and the Safe Word Fix

The article describes how scammers use AI voice cloning to impersonate a loved one during a phone call and pressure relatives into paying money (often framed as a kidnapping emergency). It recommends a practical defense: a pre-agreed family “safe word” and a simple verification process (hang up and…

September 10, 2026
Fake Bank Calls Drain £180k From Revolut Users

Fake Bank Calls Drain £180k From Revolut Users

Jersey Police report a surge of scam phone calls where criminals impersonate bank fraud/security teams or Revolut support. Victims are pressured with warnings about “suspicious transactions” and then tricked into handing over security details or moving money, leading to about £180,000 in losses in…

September 2, 2026