Fake CFO Deepfake Video Transfer Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Apr 30, 2026

Severity: CRITICAL | View Full Scam Details

Beware the Fake CFO Deepfake Video Transfer Scam in India 2026: How Fraudsters Steal Money Using WhatsApp and UPI

A dangerous new scam is sweeping Indian businesses and employees in 2026, where fraudsters use deepfake videos of senior executives to trick victims into transferring lakhs via UPI or bank transfers.

What Is the Fake CFO Deepfake Video Transfer Scam?

The Fake CFO Deepfake Video Transfer Scam is a sophisticated cybercrime targeting Indian companies, especially their finance and accounts teams. Fraudsters create convincing AI-generated deepfake videos or voice calls that impersonate Chief Financial Officers (CFOs) or other senior executives. In these videos, the “executive” urgently instructs employees to make immediate payments to a specific bank account, usually to complete a secretive or time-sensitive transaction.

This scam exploits India’s widespread use of WhatsApp for internal communication and UPI for instant payments. It preys on the trust employees place in their superiors and the pressure of acting quickly on such urgent demands.

According to the Indian Computer Emergency Response Team (CERT-In) and the Ministry of Home Affairs’ Indian Cyber Crime Coordination Centre (I4C), incidents of this scam have increased sharply in 2025 and early 2026. Many mid to large-sized companies across IT, manufacturing, and finance sectors have reported losses running into crores. The Reserve Bank of India (RBI) has also issued warnings urging banks and customers to be extra vigilant about such fraudulent payment instructions.

How This Scam Works — Step by Step

1. Initial Targeting via WhatsApp or Email: Fraudsters hack or spoof official company emails or WhatsApp numbers by impersonating a CFO or top executive. Sometimes they also compromise WhatsApp accounts of real employees.

2. Delivery of Deepfake Video or Call: The victim receives a deepfake video message on WhatsApp or a call where the “CFO” appears on screen or voice urges the employee to urgently transfer funds. The video uses AI to mimic the executive’s facial features, voice tone, and mannerisms precisely.

3. Pushed for UPI or Bank Transfer: The fake CFO insists on using UPI or bank transfer (often NEFT/RTGS) to quickly send money to a new vendor or partner’s bank account. They stress confidentiality to avoid alerting others.

4. Victim Executes the Transfer: Trusting the deepfake video and under pressure to act fast, the employee transfers the requested amount, often in lakhs or crores of INR.

5. Criminals Withdraw or Launder Money: Once the funds hit the fraudsters’ accounts, they quickly withdraw or route them through multiple bank accounts, prepaid cards, or crypto wallets, making recovery difficult.

6. Discovery Happens Too Late: Suspicious colleagues or actual CFO realize the payments were fake days or weeks later, by which time the money is gone.

Real Warning Signs to Watch For

• Urgent payment requests via WhatsApp videos/calls rather than official emails or written memos.
• Unusual insistence on secrecy or avoiding senior management in approval.
• Requests to use new or unknown bank accounts/vendor details.
• Slightly unnatural video or audio quality but very convincing facial likeness.
• Last-minute changes in payment instructions or high-pressure tactics.
• Requests for payment outside normal financial processes.
• Use of personal phones or WhatsApp numbers for financial approval communications.

What Happens to Victims

Victims face severe financial and emotional consequences. Indian companies can lose large sums — sometimes crores — with little chance of recovery because UPI payments are instant and generally irreversible. The RBI allows limited reversal in cases of fraud but requires prompt reporting. Victimized employees suffer embarrassment, stress, and sometimes job-related consequences if internal controls were bypassed.

In some cases, criminals misuse Aadhaar-linked information to further impersonate victims or execute SIM swaps, compromising mobile banking OTPs and deepening the fraud’s impact. The shock, loss of trust, and disruption to business operations make this scam especially damaging in India’s fast-growing digital economy.

What RBI and CERT-In Say

The RBI has issued cautionary circulars highlighting the rise of fraudulent payment instructions emerging from deepfake and social engineering scams. It advises banks to implement multi-layered verification for high-value transfers and encourage customers to verify payment requests through multiple channels.

CERT-In regularly updates advisories warning against accepting payment requests via WhatsApp or instant messaging apps without independent verification. The ministry’s Indian Cyber Crime Coordination Centre (I4C) recommends reporting such incidents immediately via the national cybercrime portal or by calling the toll-free helpline 1930.

The RBI helpline for banking-related complaints is 1800-425-5678 (or 14440), where victims can get guidance on payment reversals or blocking accounts.

How to Protect Yourself

1. Verify payment requests directly with the executive using official phone lines or in-person before transferring.
2. Never process payments solely based on WhatsApp or social media videos, no matter how realistic.
3. Insist on multiple approvals and written authorization through official company channels.
4. Train employees regularly on emerging scam types like deepfake frauds and social engineering.
5. Use RBI-certified third-party payment verification systems integrated into ERP/banking workflows.
6. Report any suspicious messages or calls immediately to your IT/cybersecurity team.
7. Ensure WhatsApp and other communication apps have 2-step verification enabled to prevent account takeover.

What to Do If You’ve Been Targeted

• Immediately inform your company’s finance and IT security teams about the suspicious transaction.
• Contact your bank to block further transactions and request a possible payment reversal.
• File a complaint on the national cybercrime portal at cybercrime.gov.in specifying “Fake CFO Deepfake Scam”.
• Call the national cybercrime helpline at 1930 to report the incident and seek guidance.
• Reach out to the RBI banking complaints helpline at 1800-425-5678 or 14440 for banking-related advice.
• Preserve all communication evidence—WhatsApp messages, videos, call recordings—for investigation.
• Inform Aadhaar authorities if you suspect identity misuse or SIM swap attacks.

Frequently Asked Questions

Q: Can I reverse a UPI payment if it was made to a scammer in this deepfake CFO scam?
A: UPI payments are designed to be instant and generally irreversible. However, if reported immediately, banks may help freeze the amount if it is still in the recipient’s account. Prompt reporting and police complaints increase the chances of recovery.

Q: How can deepfake videos be so convincing?
A: Fraudsters use AI and machine learning to create videos or voice clips matching an individual’s facial expressions and voice tone accurately. If not carefully scrutinized, these can fool even trained eyes.

Q: What should Indian companies do to prevent falling victim to this scam?
A: Establish strict multi-factor verification policies for payments, educate employees regularly on social engineering tactics, avoid approving payments through unsecured apps like WhatsApp alone, and invest in anti-fraud payment systems.

If you receive suspicious videos, calls, or messages requesting payments — no matter how urgent or official they seem — verify them immediately through multiple channels. Stay vigilant and protect your money by checking suspicious requests with BharatSecure.app before acting.