Law firms are no stranger to phishing schemes. Just ask Ostroff Injury Law in Philadelphia, which almost forked over $100,000 in settlement funds to a scammer leveraging a fake Facebook page and a non-existent dog bite.

Now, even a phone call from the boss could be a cause for suspicion. The Wall Street Journal published a report in late August about a bad actor who used AI voice technology to create a “deepfake” impersonation of a high-ranking executive at a U.K.-based energy firm directing the company’s CEO to transfer approximately $243,000 to a Hungarian bank account.