AI-Generated Deepfake Voice Calls Used in Executive Impersonation Scams

Security researchers are tracking a rise in vishing↗, voice phishing↗, attacks that use AI-generated deepfake↗ voices to impersonate company executives, almost always to pressure an employee into an urgent wire transfer or a change to banking details.

How it plays out

The pattern across reported incidents is consistent: an employee, usually in finance or accounts payable, gets a call that sounds convincingly like a senior executive. The caller references a real, time-sensitive situation and asks for something unusual but plausible, an urgent payment, a last-minute change to a vendor's bank details, a request to skip a normal approval step "just this once." The urgency and apparent authority are the whole attack.

Why this got easy

Convincing voice cloning used to need a large audio sample and real technical skill. Publicly available executive interviews, earnings calls, and conference talks now provide more than enough source material for modern cloning tools to produce a passable impersonation from a recording just a few minutes long.

What actually stops it

1. Establish a callback-verification policy for any unusual financial request, regardless of channel: hang up, and call the person back on a number you already had on file, never one given during the call.
2. Adopt a shared verbal code phrase for high-stakes requests, changed periodically. A code phrase is far harder for an attacker to reproduce than a voice.
3. Update incident-response and finance-approval training to explicitly name voice-based impersonation, not just email phishing, most training still doesn't mention it.

None of this is expensive to implement. It's also, so far, the most effective defense anyone has found against a technique that's only going to get cheaper to pull off.

Source: CFO Dive: Scammers Siphon $25M via AI Deepfake "CFO"