Deepfake CEO Voice/Video Transfer Fraud — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Jun 09, 2026

Severity: Critical | View Full Scam Details

Deepfake CEO Voice and Video Transfer Fraud in India 2026: A Rising Cyber Threat on WhatsApp

In 2026, Indian employees are increasingly targeted by an alarming deepfake scam where fraudsters use AI-generated CEO voices and videos on WhatsApp to trick staff into transferring company funds.

What Is the Deepfake CEO Voice/Video Transfer Fraud?

Deepfake fraud involves scammers using artificial intelligence (AI) to produce fake but highly realistic voice and video recordings that imitate company executives. In India, these scams mainly target employees in finance, operations, and accounts departments who have the authority to initiate financial transactions. Fraudsters exploit social media data and sometimes phishing attacks to build detailed profiles of the executives they intend to impersonate, making their deepfakes sound and look genuine.

This scam has become a critical issue in Indian workplaces, with reports rising in large cities and increasingly in Tier-2 and Tier-3 towns. Targets receive WhatsApp calls or messages where the deepfake “CEO” urgently requests immediate fund transfers, often citing fake emergency business deals or crisis situations. According to CERT-In and RBI advisories on cyber fraud, such social engineering attacks with deepfake elements are a growing concern that can lead to severe financial losses.

How This Scam Works — Step by Step

1. Initial Targeting and Intelligence Gathering: Fraudsters research the company’s management team using LinkedIn, Twitter, and company websites. They also try phishing attacks against staff to gather more info.

2. Creating Deepfake Content: Using AI tools, the scammer generates a convincing voice or video message that mimics the CEO’s tone, speech patterns, and facial movements.

3. Contact Via WhatsApp: The fraudster contacts an employee on WhatsApp, often someone in finance, posing as the CEO. Because WhatsApp is widely used in India for work communication, it adds to the scam’s credibility.

4. Instilling Urgency: The fake CEO claims an urgent crisis (e.g., a last-minute business deal or confidential payment) that requires immediate fund transfers. Psychological pressure is applied to prevent the victim from verifying the request.

5. Requesting Fund Transfer: The victim is asked to transfer money immediately to a bank account or UPI ID, sometimes via third-party payment platforms. The scammer may also demand that the employee delete the proof of the transaction or communicate secretly.

6. Loss Realized: Once the transfer is done, funds are quickly moved out or withdrawn. Victims often realize too late the voice/video was fake, and tracing the money is difficult.

Real Warning Signs to Watch For

• The request comes unusually early or late in the day and demands urgent action.
• The “CEO” asks for secrecy, forbidding communication with colleagues or family.
• WhatsApp calls with poor video or audio quality that still mimic the CEO’s voice but seem off.
• Transfer requests to unknown bank accounts or UPI IDs, especially personal accounts rather than corporate accounts.
• Pressure to bypass normal company financial approval procedures.
• The message does not come from the official company communication channel or email.
• Unusual instructions such as deleting transaction proofs or ignoring normal protocols.

What Happens to Victims

Victims suffer serious financial damage, especially when crores of rupees are transferred to fraudulent accounts. India’s UPI system allows instant payments, and scammers exploit this to steal money before victims can cancel transactions or report the fraud. The difficulty in tracing or reversing such transfers adds to the loss. Some victims face emotional distress, guilt, and trauma, fearing disciplinary action at work or job loss.

In some cases, scammers have used stolen Aadhaar details or SIM swaps to deepen the fraud, intercept OTPs, or impersonate victims later. The financial and reputational impact on victims is significant, with many left unsure how to recover lost funds or protect themselves from repeated attacks.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) and CERT-In (Indian Computer Emergency Response Team) have issued general warnings on the risks of “synthetic identity fraud” and social engineering scams leveraging digital platforms like WhatsApp and UPI. RBI advises that financial requests must always be verified through independent company channels, never via informal or out-of-band communication without cross-checking.

CERT-In highlights the rise of AI-based scams in its cybersecurity advisories and recommends heightened awareness and multi-factor verification within organisations. The national cybercrime helpline (number 1930) is available for victims to report incidents and seek guidance on containment.

How to Protect Yourself

1. Always verify transfer requests through official channels like company email or calls to known phone numbers.
2. Do not rely solely on WhatsApp audio or video messages for urgent instructions involving money.
3. Use multi-step approval processes for financial transactions within your organisation.
4. Be cautious of any request that pressures secrecy or rapid action.
5. Report suspicious messages or calls immediately to your cyber or IT security team.
6. Never share OTPs or passwords over calls or messages, even if claimed to be from senior management.
7. Educate all staff about deepfake fraud and keep updated on new scam trends.

What to Do If You’ve Been Targeted

• Immediately freeze your bank accounts linked to the transaction and block the UPI ID if possible.
• Report the fraud to your company’s cybersecurity or compliance team.
• File a complaint at the national cybercrime portal (cybercrime.gov.in).
• Call the 1930 cybercrime helpline for assistance and advice.
• Inform your bank and apply for reversal requests or blocking suspicious payments.
• Lodge a police report with all communication evidence including WhatsApp chats and call logs.
• Change all online banking and company platform passwords immediately.

Frequently Asked Questions

Q: Can deepfake videos perfectly mimic my CEO’s voice and face?
A: Deepfake technology has advanced to create very realistic voices and videos that can mimic speech patterns and facial expressions, making it hard to distinguish without expert analysis.

Q: If I get a WhatsApp request from my CEO, isn’t it safe to trust?
A: No, scammers misuse WhatsApp because it is widely trusted. Always verify any unusual financial request independently through official company channels.

Q: Are there any legal protections if I lose money to this deepfake scam?
A: While laws exist against fraud, recovery can be difficult due to the scam’s sophistication. Report immediately to police, cybercrime authorities, and your bank to improve chances of containment.

For all suspicious messages or calls related to financial requests, always verify on BharatSecure.app and report fraud promptly via the 1930 helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.