AI Deepfake CEO Fraud (BEC Scam) — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Jul 18, 2026

Severity: Critical | View Full Scam Details

AI Deepfake CEO Fraud (BEC Scam) in India 2026: A Critical WhatsApp Threat

In 2026, Indian companies face a critical cybersecurity risk as fraudsters use AI-powered deepfake technology to impersonate CEOs over WhatsApp, tricking employees into transferring large sums of money.

What Is the AI Deepfake CEO Fraud (BEC Scam)?

AI Deepfake CEO Fraud, a form of Business Email Compromise (BEC), is an emerging scam where fraudsters use artificial intelligence to mimic the voice and appearance of senior company executives. Unlike traditional BEC scams that rely on forged emails, this scam exploits platforms like WhatsApp, favoured widely in Indian business communication, to contact employees directly.

The scam primarily targets employees in finance, human resources, and administration who have access to company funds or confidential data. Fraudsters gather information from LinkedIn, company websites, and social media to build highly convincing profiles of executives. Their aim is to create a sense of urgency and authority, leading the targeted employee to bypass verification protocols and transfer money or disclose sensitive information.

While still evolving in India, cases reported to police and I4C (Indian Cyber Crime Coordination Centre) show a sharp increase in incidents involving this scam since late 2025. The Reserve Bank of India (RBI) and CERT-In have issued warnings about the rising threats associated with AI-enabled frauds. This scam’s severity is rated critical (10/10 risk score) because of its technological sophistication and potential damage to Indian businesses.

How This Scam Works — Step by Step

1. Gathering Intelligence: Fraudsters collect data on a company’s hierarchy, project deadlines, vendor details, and communication style from public sources like LinkedIn and corporate websites.

2. Initiating Contact on WhatsApp: The scammer sends a message from a WhatsApp number that appears new but uses the name and photo of the CEO or a senior executive. Sometimes, synthetic video or audio files using deepfake AI are sent to establish authenticity.

3. Creating a Sense of Urgency: The fraudster claims there is an “urgent confidential transaction” or a “time-sensitive payment” that requires immediate processing. They often instruct the employee to keep the matter secret, citing sensitivity.

4. Emotional Manipulation and Pressure: Using a realistic AI voice call, the scammer pressures the employee to act quickly, warning of severe consequences if the deal doesn’t proceed immediately.

5. Requesting Fund Transfer via UPI or Bank Account: The scammer provides bank account or UPI details (often new or disguised) and insists on instant payment, sometimes requesting multiple transactions to avoid triggering alerts.

6. Disappearing After Transaction: Once the money is transferred, the fraudster cuts off communication and the WhatsApp account is often deleted or blocked to avoid tracing.

7. Victim Realizes the Fraud: Employees discover the scam only after attempting to confirm the transaction with the real executive or when reconciliation flags discrepancies.

Real Warning Signs to Watch For

• Unexpected WhatsApp messages or calls from the CEO or senior exec, especially from a new or unknown number.
• Requests for urgent payments without usual internal approval processes.
• Unusual insistence on secrecy or bypassing company protocols.
• AI-generated voice that sounds odd, robotic, or slightly distorted if you listen carefully.
• Payment requests via new bank accounts or UPI IDs unfamiliar in previous dealings.
• Pressure tactics discouraging time for verification or consultation.
• Lack of formal email confirmation or digital signatures that are usually part of such communications.

What Happens to Victims

Victims typically face substantial financial losses running into lakhs or even crores of rupees in some corporate cases. Since UPI and bank payments in India are mostly irreversible, recovering funds is very difficult once transferred to fraudulent accounts. Employees often suffer emotional distress from guilt and fear of job repercussions.

In some reported cases, fraudsters have used stolen Aadhaar-linked details and SIM swap tactics to further impersonate employees for facilitating quick payments. This complicates containment and delays reporting. The reputational damage and operational disruption for businesses caught in such scams can be significant.

What RBI and CERT-In Say

The RBI has warned Indian companies about increasing risks related to frauds using synthetic identities and social engineering. Its cybersecurity framework advises strict multi-factor authentication and verification for fund transfers. CERT-In highlights AI-powered frauds as a growing challenge and advises constant employee training and awareness programs.

Victims can contact the 1930 cybercrime helpline run by the government to report such incidents. The RBI Helpline also assists with reporting transaction-related complaints in suspicious payments. I4C continues to coordinate between law enforcement agencies for faster detection and prosecution of such cybercrimes.

How to Protect Yourself

1. Verify Each Request Independently: Always confirm fund transfer requests directly with your executive using known official phone numbers or in-person verification.

2. Do Not Rely Solely on WhatsApp Messages: Treat WhatsApp communication for payments as informal unless backed by formal written approval.

3. Be Alert for AI Voice Anomalies: If you receive calls that sound robotic or unnatural, pause and verify thoroughly before acting.

4. Use Multi-level Authorization: Ensure payments above a threshold are approved by multiple officials following company policies.

5. Maintain Updated Whitelists: Use software to allow payments only to recognized bank accounts or UPI IDs tied to your company’s vendors.

6. Report Suspicious Contacts Immediately: Inform your IT and fraud prevention teams if you get unusual requests from any executives.

7. Educate Employees Regularly: Conduct periodic training on deepfake scams, social engineering, and WhatsApp fraud.

What to Do If You've Been Targeted

• Do not attempt further communication with the suspicious WhatsApp number.
• Immediately notify your company’s cybersecurity or fraud department.
• Contact your bank to report the fraudulent transaction and request a freeze on fund transfers if possible.
• File a complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in.
• Call the government’s cybercrime helpline at 1930 for immediate assistance.
• Inform RBI if the fraud involved UPI or other payment systems, using their dedicated grievance channels.
• Preserve all evidence—WhatsApp chats, call recordings, transaction receipts—for filing police complaints.

Frequently Asked Questions

Q: Can AI deepfake voice calls be blocked on WhatsApp?
A: WhatsApp does not currently offer AI-specific call filtering. Users must remain vigilant and verify unusual calls manually. Official company communication channels should be preferred for sensitive requests.

Q: What recovery options exist if money was sent to a fraudster’s account?
A: Due to UPI’s immediate finality, reversal is difficult but not impossible if reported early. Banks and police may trace and freeze accounts linked to the fraud if prompt action is taken.

Q: How common is this scam in India compared to traditional BEC scams?
A: This scam is less common but rapidly growing. The use of AI deepfakes adds complexity, making it one of the riskiest forms of BEC scams reported to Indian cybercrime authorities.

Stay alert to any suspicious WhatsApp messages or calls. Verify all payment requests with your known official contacts. To check if a message is genuine, visit BharatSecure.app and if you suspect fraud, report immediately to the 1930 cybercrime helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.