This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
In February 2025, a group of fraudsters used AI voice cloning technology to impersonate Italian Defense Minister Guido Crosetto. They contacted several prominent Italian business leaders, claiming to need urgent funds for the release of kidnapped journalists. Massimo Moratti was successfully defrauded of nearly €1 million, which was later traced and frozen by Italian authorities in a Dutch bank account.
In February 2025, scammers allegedly used AI voice cloning to impersonate Italian Defense Minister Guido Crosetto, calling top business leaders and reportedly claiming to need funds to free kidnapped journalists. Massimo Moratti was allegedly the only confirmed victim to send nearly €1M, wiring it to accounts in the Netherlands and Hong Kong before realizing the fraud. The scam involved spoofed government numbers, deepfake audio, and international money laundering networks. Police reportedly froze the funds.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
The fraudsters used AI voice cloning to impersonate a government official and target specific wealthy individuals for financial gain, successfully stealing nearly 1 million euros from Massimo Moratti.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was caused by human fraudsters who intentionally used deployed AI voice cloning technology to execute a financial scam.
Fraudsters used AI voice cloning to impersonate Italian Defense Minister Guido Crosetto in a sophisticated social engineering scam, successfully defrauding a business leader of nearly 1 million euros. While the direct national security impact is minor and the funds were frozen, the incident highlights the evolving threat of high-level government impersonation using synthetic media.
The AI voice cloning software was used as a tool by human fraudsters to generate specific voice outputs based on direct inputs, without exhibiting autonomous planning or decision-making.
Risk Level 3: Limited Risk. The incident involves AI-generated content such as deepfakes and voice cloning, which are subject to transparency obligations under the EU AI Act.
The AI system was used specifically to clone and generate the voice of the Italian Defense Minister to deceive the target.
The reports provide consistent, detailed accounts of the scam, the victim, the amount of money involved, and the recovery process across multiple reputable news outlets. The role of AI voice cloning is explicitly stated by the Defense Minister and covered widely, leaving little ambiguity about the core events.
The incident could be interpreted primarily as a traditional social engineering and telecom spoofing scam where AI was merely an optional tool rather than the primary cause of the vulnerability.
Technology
AI Voice Cloning Technology
AI tools enabled highly convincing simulation of the minister's voice.
Caller ID Spoofing Tools
Software allowed scammers to mask calls as official government numbers.
Voice Cloning as a Service
VaaS platforms like PlugValley lowered barriers to deploy lifelike voices.
Data Inputs
Public Voice Data Availability
Scammers used public recordings of the minister to train the voice clone.
Target Profile Information
Detailed profiles of wealthy targets allowed precise selection of victims.
Human Factors
Authority Bias
Victims trusted the request due to the minister's high-ranking status.
Patriotic Duty and Urgency
Urgent pleas to save kidnapped journalists exploited victims' patriotism.
Cognitive Overload
High-pressure scenarios made it difficult for victims to think critically.
Process and Methods
No Multi-Factor Verification
Lack of verification protocols for high-value financial transactions.
Lack of AI Detection Tools
Absence of real-time tools to identify cloned voices on active calls.
Weak Call Screening
Some executive assistants failed to filter out suspicious foreign calls.
Management
Outdated Security Policies
Corporate security guidelines did not account for advanced AI-driven threats.
Inadequate Staff Training
Employees were not trained to recognize voice cloning and vishing tactics.
Regulatory Environment
Weak Telecom Regulations
Telecom operators were not mandated to block spoofed caller IDs.
AI system involved
Identified by automated extraction; can differ from the alleged developers above.
