Hong Kong Clerk Defrauded of $25 Million in Sophisticated Deepfake Scam
As artificial intelligence advances rapidly, criminals are increasingly using AI to carry out sophisticated scams. Deepfakes, which synthesize realistic fake media, are among the newest tools enabling fraud. Recently, a finance clerk at a Hong Kong branch of a multinational corporation was defrauded of over $25 million through an elaborate deepfake scam. The clerk received a phishing message from a fake chief financial officer requesting an urgent transaction. Despite initial doubts, the clerk was convinced after a video call with deepfakes impersonating senior managers. The deepfakes used publicly available company videos and audio to recreate the executives' likenesses and voices, leading to multiple fraudulent transactions before the scam was discovered.
Authorities called this a "new deception tactic," highlighting the need for improved security measures. Nick France, CTO at Sectigo, emphasized the growing threat: "With deepfake technology, we can no longer trust what we see and hear remotely. Perfectly written phishing emails, audio messages with the correct tone, and now fully fake video can be easily created and used to socially engineer companies." Security experts recommend digital authentication of meeting attendees and additional confirmations for critical transactions. The Hong Kong scam serves as a wake-up call about the potential damages from AI-enhanced fraud and the need for vigilant identity verification, even in seemingly legitimate online meetings.