Deepfake Zoom Call Tricks CFO Into $500K Transfer

A real incident described in the article involved criminals using a deepfake Zoom call where all participants (including the CFO’s boss) were fabricated, convincing a Singaporean CFO to transfer US$500,000. The article focuses on Fraunhofer SIT’s prototype to detect deepfakes in live video calls and emphasizes pairing detection with clear procedures like out-of-band verification for any financial transfer requests.

Key findings

• A 2025 deepfake Zoom meeting in Singapore allegedly led to a CFO transferring US$500,000 after being shown fabricated participants, including his boss.
• Fraunhofer SIT built a proof-of-concept tool that analyzes audio and video during live calls and produces a probability score indicating manipulation.
• The system is designed to run locally to avoid sending sensitive video to external servers.
• The article recommends formal procedures: financial transfer requests during calls should be confirmed via a second independent channel.

Who’s being targeted

• Commonly targeted roles: Executives, Finance/Treasury, Accounts Payable, Anyone approving payments, Risk/Compliance.
• Affected industries: Corporate executive teams, Finance (accounts payable/treasury), Banking identity verification (video ID).
• Attack channels: vishing.
• Impersonated: The CFO’s boss and internal colleagues (deepfaked participants on a Zoom call).

Awareness takeaways

• Require out-of-band verification (a separate channel) for any wire/transfer request made during a call.
• Treat video presence as untrusted, deepfakes can fabricate multiple attendees, not just one person.
• Use a defined challenge/verification procedure when identities seem suspicious (questions, callbacks, or other confirmation steps).

Red flags to watch for

• Unusual urgency and pressure to move money during a call
• Instruction to complete a high-value transfer based only on the meeting attendees’ appearance
• Lack of independent verification via a known, separate channel