Tips On Avoiding Deep Fake Scam Risks
Cyber attacks on executives have been steadily growing more sophisticated and costly, most recently imploring deep fake techniques. Here are some tips to avoid suffering losses from deep fake scams.
April 03, 2024 at 02:51 PM
7 minute read
What You Need to Know
- Cyber executive fraud scams - which trick employees into transferring large sums of money into the fraudster's bank account - have been rampant for years.
- Recently, the risk grew far greater as it was reported a deep fake videocall showing an AI-generated multi-national company's CFO and other co-workers got a Hong Kong employee to make transfers totaling $25M.
- Although the increase in use of AI to enhance cyberfraud is clearly troubling, there are effective steps you can take steps to help prevent them from impacting your company.
Cyber executive fraud scams have been rampant for years. These scams trick an employee into transferring large sums of money into the fraudster's bank account. In the past, these often involved using a high-level executives hacked email account (or an email appearing to be from them) to request the employee to quickly and secretly transfer money for a "special project" that no one else should know about. They play on an employee's desire to please the requesting executive and their unique position to quickly do so. It used to be the average value of these were around US$100,000. But they have been steadily growing more sophisticated and costly, often involving the hackers doing a detailed inspection of the executive's email to identify information to make the request sound more believable (such as to determine current projects, confirm when the executive is likely to be unavailable for a call, and even to be able to craft the email to sound more like the executive).
Recently, the risk grew far greater as it was reported a deep fake videocall showing an AI-generated multi-national company's CFO and other co-workers were used to convince a HK branch employee to make 15 transfers totaling HK$200M (approximately US$25M) into 5 local HK bank accounts. Reports indicate that the initial email request seemed suspicious to the employee, but then she was invited to a videochat, purportedly over a common personal communications app where the deep fake of the CFO, and apparently or other employees, were used to instruct her to make the transfers. The deep fakes were apparently AI-generated videos created from past videochat recordings obtained from the individuals. From the reports, the deepfakes were more like a recording and would not be able to interact and respond to questions, and may have had somewhat limited head movement. It would appear that at least one of the hackers was a live participant orchestrating things so, after allowing the HK employee to introduce herself, the deepfake images informed her to make the transfers. It was only after the 15 transfers were made that the employee contacted their UK headquarters, only to be informed there was no such instruction.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllTurning Over Legal Tedium to AI Requires Lots of Unglamorous Work on Front End
6 minute readFOMO Run Amok? Resolve of Firms Chasing AI Dreams Tested by Sky-High Costs
Anthropic Agrees to 'Guardrails' for Its AI Training to Protect Copyrighted Lyrics Pending Fight Over Fair Use
5 minute readLaw Firms Mentioned
Trending Stories
- 1Cybersecurity Breaches, Cyberbullying, and Ways to Help Protect Clients From Both
- 2AI in 2025: Five Key Predictions on How It Will Reshape International Law Firms
- 3Justice Known for Asking 'Tough Questions' Resolves to Improve Civility
- 4Robinson & Cole Elects New Partners and Counsel
- 5'If the Job Is Better, You Get Better': Chief District Judge Discusses Overcoming Negative Perceptions
Who Got The Work
J. Brugh Lower of Gibbons has entered an appearance for industrial equipment supplier Devco Corporation in a pending trademark infringement lawsuit. The suit, accusing the defendant of selling knock-off Graco products, was filed Dec. 18 in New Jersey District Court by Rivkin Radler on behalf of Graco Inc. and Graco Minnesota. The case, assigned to U.S. District Judge Zahid N. Quraishi, is 3:24-cv-11294, Graco Inc. et al v. Devco Corporation.
Who Got The Work
Rebecca Maller-Stein and Kent A. Yalowitz of Arnold & Porter Kaye Scholer have entered their appearances for Hanaco Venture Capital and its executives, Lior Prosor and David Frankel, in a pending securities lawsuit. The action, filed on Dec. 24 in New York Southern District Court by Zell, Aron & Co. on behalf of Goldeneye Advisors, accuses the defendants of negligently and fraudulently managing the plaintiff's $1 million investment. The case, assigned to U.S. District Judge Vernon S. Broderick, is 1:24-cv-09918, Goldeneye Advisors, LLC v. Hanaco Venture Capital, Ltd. et al.
Who Got The Work
Attorneys from A&O Shearman has stepped in as defense counsel for Toronto-Dominion Bank and other defendants in a pending securities class action. The suit, filed Dec. 11 in New York Southern District Court by Bleichmar Fonti & Auld, accuses the defendants of concealing the bank's 'pervasive' deficiencies in regards to its compliance with the Bank Secrecy Act and the quality of its anti-money laundering controls. The case, assigned to U.S. District Judge Arun Subramanian, is 1:24-cv-09445, Gonzalez v. The Toronto-Dominion Bank et al.
Who Got The Work
Crown Castle International, a Pennsylvania company providing shared communications infrastructure, has turned to Luke D. Wolf of Gordon Rees Scully Mansukhani to fend off a pending breach-of-contract lawsuit. The court action, filed Nov. 25 in Michigan Eastern District Court by Hooper Hathaway PC on behalf of The Town Residences LLC, accuses Crown Castle of failing to transfer approximately $30,000 in utility payments from T-Mobile in breach of a roof-top lease and assignment agreement. The case, assigned to U.S. District Judge Susan K. Declercq, is 2:24-cv-13131, The Town Residences LLC v. T-Mobile US, Inc. et al.
Who Got The Work
Wilfred P. Coronato and Daniel M. Schwartz of McCarter & English have stepped in as defense counsel to Electrolux Home Products Inc. in a pending product liability lawsuit. The court action, filed Nov. 26 in New York Eastern District Court by Poulos Lopiccolo PC and Nagel Rice LLP on behalf of David Stern, alleges that the defendant's refrigerators’ drawers and shelving repeatedly break and fall apart within months after purchase. The case, assigned to U.S. District Judge Joan M. Azrack, is 2:24-cv-08204, Stern v. Electrolux Home Products, Inc.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250