This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
Federal prosecutors charged three individuals with orchestrating a global fraud scheme between 2024 and 2026 that utilized AI to impersonate corporate executives and attorneys. By mimicking voices and images, the perpetrators tricked employees at various companies into authorizing large wire transfers, resulting in at least $129 million in stolen funds. The scheme targeted thousands of companies across multiple sectors, including healthcare, finance, and technology.
Federal prosecutors in New York alleged that a fraud ring used AI to mimic executives' voices and sometimes their images on calls with company employees. Accomplices posing as lawyers then directed employees to wire money for sham transactions. The indictment attributes about $129 million in losses worldwide to the scheme, including about $4.83 million from a Missouri hospital system.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
The perpetrators used AI voice and image cloning to impersonate specific CEOs and attorneys to execute targeted financial fraud against corporate employees, stealing over 129 million dollars.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was caused by human actors who intentionally deployed AI voice and image cloning tools to execute a massive financial fraud scheme.
Added categories peak at 2: Minor (Epistemic Harm, Direct)
A highly sophisticated global fraud scheme utilized AI voice and video cloning to impersonate corporate executives, stealing over $129 million from thousands of companies. While primarily a criminal financial enterprise rather than a state-sponsored threat, the scale and success of the operation demonstrate the potent economic threat posed by advanced generative AI tools in the hands of malicious actors.
The AI system was used as a tool by the human operators to generate synthetic voices and images based on direct inputs to mimic specific individuals.
Limited Risk: The report describes the use of AI to generate deepfakes (cloned voices and images), which falls under the transparency obligations of Limited Risk systems.
The AI was primarily used to mimic the voices of corporate executives and attorneys, and occasionally their images, to deceive employees.
The assessment is based on a detailed federal indictment and reputable news reports, which provide consistent and specific facts about the fraud scheme, the victims, and the role of AI.
None
Technology
AI Voice Mimicking
AI was used to mimic the voice of the Impersonated CEO on calls.
AI Image Alteration
AI was used to alter and mimic the image of the Impersonated CEO.
Data Inputs
Impersonated Identity Details
Using real names of European attorneys and CEOs to establish trust.
E-Signature Emails
Purported CEO emails sent via DocuSign to initiate contact.
Human Factors
Employee Trust in AI Media
Employees believed the realistic AI-cloned voices and images on calls.
Adherence to Secrecy Requests
Employees kept transactions secret as directed by the impersonated attorney.
Process and Methods
Inadequate Verification Process
Lack of verification allowed wires to go to external accounts.
Failure to Flag Spoofed Emails
E-signature emails from fake CEOs successfully reached target employees.
Management
Inadequate Risk Assessment
Management did not prepare for AI-driven impersonation of key executives.
Weak Back-Office Controls
Failure of back-office verification in victim companies except for one.
Regulatory Environment
Weaponization of Emerging Tech
Criminals weaponized emerging AI technologies to bypass standard security.
International Money Laundering
Conspirators used global bank accounts and crypto to launder stolen funds.
