AI Deepfake Executive Authorization Scam

INDIA — By BharatSecure Threat Intelligence Team ·

Verdict: Suspicious | Risk Score: 10/10 | Severity: critical

Category: UPI, WhatsApp, Phishing

How AI Deepfake Executive Authorization Scam Works

Overview: This alarming scam leverages the latest AI deepfake technology to impersonate business leaders or finance heads, compelling staff to urgently process fake invoice payments. Attackers use AI-generated voice or video calls—sometimes both—to convincingly pose as the company’s CEO, CFO, or finance lead. Victims are pressured during real-time video meetings or phone conversations, backed by authentic-seeming invoices, into bypassing normal procedures and making large payments to accounts controlled by fraudsters. This scam is extremely dangerous because psychological manipulation and fake authority combine with technology to fool even experienced employees. How It Works: 1. Scammers collect samples of an executive’s voice or video from public sources or stolen company records. 2. Using AI tools, they construct a ‘deepfake’—a highly realistic digital copy of the leader’s voice or face. 3. They set up unscheduled or urgently rescheduled calls (often at odd hours or via unfamiliar platforms) with finance or accounts teams. 4. During these calls, the deepfake executive requests immediate invoice approvals or payments, often referring to genuine pending invoices, but substituting their own fraudulent banking details. 5. The pressure of authority and urgency ensures that the staffer processes the payment, bypassing the usual verification steps. India Angle: Indian corporates, especially those with distributed teams and remote work, are a growing target. Popular platforms include Zoom, Microsoft Teams, WhatsApp video, and even Google Meet. Many threats have been reported in Mumbai, Bengaluru, Hyderabad, and Delhi among large corporations and high-value SMEs. The scam is spreading to states with strong startup ecosystems, where business hierarchies are less formalized. Payments requested are often via NEFT, RTGS, or UPI for speed. Targeted language includes English and major regional languages to build trust. Real Examples: - A Mumbai-based finance manager receives a WhatsApp video call at 7:30 pm from a contact that perfectly appears as her CFO. The ‘CFO’ says: 'This is high priority—process the invoice now!'. The invoice shares correct purchase order numbers and internal lingo, but the beneficiary account is new. - An IT company’s junior accountant gets a Microsoft Teams call with the CEO’s face and voice, who ‘confidentially’ directs them to override approval protocols for a large vendor payout. Red Flags: - Calls for urgent payments outside regular business hours or platforms - Subtle artificiality in voice (robotic, mismatched intonations) or video (unnatural movement/expressions) - Use of new or previously unseen bank accounts - Requests to skip or override standard approvals, supposedly due to urgency - Documentation lacks usual internal cross-references Protective Measures: - Always insist on call-back or double-verification with the executive via a different channel/numbers listed in company directories - Never process new bank details based on video or voice alone - Stick to the company’s official approval workflows for all payments, without exception - Train staff on deepfake awareness and empower them to question unusual instructions, regardless of seniority If Victimised: - Notify IT security and company management immediately - Report the incident to the RBI, cybercrime.gov.in, and contact 1930 for urgent help - Try to halt the transaction by contacting the bank, providing all details and evidence Related Scams: - Business email compromise (BEC) attacks, where emails from executives are faked - Voice phishing (vishing), where calls claim to be from company leadership

How This Scam Works — Detailed Explanation

The AI Deepfake Executive Authorization Scam operates on a sophisticated level, leveraging advanced technology to impersonate high-ranking executives within a company. Scammers frequently begin their operation by gathering publicly available information about a target organization through platforms like LinkedIn and corporate websites. They identify key decision-makers, such as the CEO or CFO, and build realistic profiles that would lend credibility to their impersonation. The technology allows them to use applications like Zoom or Google Meet, where they can arrange video calls that appear genuine. Often, attackers will use hacked accounts or spoofed phone numbers to initiate contact, disguising their true identity.

Once the scammers have made contact with their targets, they deploy a range of psychological manipulation tactics. The urgency of their requests is coupled with an authoritative tone, making the victim feel compelled to comply without question. They may use specific jargon or references relevant to ongoing projects within the company to further establish credibility. Scammers might also employ Voice over Internet Protocol (VoIP) techniques to alter their voices, making them sound convincingly like the executive they are impersonating. This mix of authenticity and pressure encourages employees to act quickly and without following necessary protocols, often resulting in tragic financial consequences.

As victims find themselves in the midst of these high-stakes conversations, the scam unfolds step-by-step. For instance, a finance executive in Bengaluru may receive a video call from what appears to be their CFO urgently requesting payment for a "confidential project." The fake invoice, complete with professional branding, shows details that match internal company formats, making it even harder to suspect foul play. Under pressure from the call, the finance executive might be persuaded to initiate a UPI payment to an unfamiliar bank account, bypassing internal controls. Once the payment is made, it could be sent to accounts belonging to the scammers, making it near impossible to trace once it has exchanged hands.

The real-world impact of the AI Deepfake Executive Authorization Scam is staggering. Recent reports indicate that Indian companies have lost an estimated ₹200 crore in the past year alone due to executive impersonation scams. Government agencies like the Ministry of Home Affairs (MHA), the Reserve Bank of India (RBI), and Computer Emergency Response Team (CERT-In) have acknowledged these incidents and are working towards raising awareness. Victims feel not only the immediate financial loss but also the erosion of trust within their organizations and reputational damage that can follow financial mishandling. The stakes are incredibly high, especially in a landscape where online transactions like UPI are prevalent.

Identifying these scams and differentiating them from legitimate communications can be challenging but essential. Red flags to watch for include receiving video or voice calls from executives via unfamiliar channels or numbers and being pressured for urgent payments with new beneficiary details. If the communication exhibits unnatural voice modulation or facial movements, it could indicate a deepfake. Most importantly, if the payment approval process is being bypassed, that's a red flag. Always re-confirm urgent requests through trusted internal channels, especially when large sums of money are involved.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does AI Deepfake Executive Authorization Scam Target?

General public across India

Red Flags — How to Identify AI Deepfake Executive Authorization Scam

  • Video or voice calls from ‘CFO/CEO’ via unfamiliar channels
  • Urgent payment requests with new beneficiary details
  • Unnatural voice or facial movements
  • Skipping usual approval steps for large transfers

What To Do If You Encounter AI Deepfake Executive Authorization Scam

  1. Report the incident immediately to the cybercrime helpline at 1930 or file a complaint at cybercrime.gov.in.
  2. Contact your bank's helpline — for SBI, call 1800-11-1109, and for HDFC, call 1800-202-6161 — to freeze account transactions if suspicious activity occurs.
  3. Verify requests for payment internally by contacting the executive directly using previously known contact details, not those provided in the call.
  4. Educate your colleagues and staff about the AI deepfake scam to ensure everyone is vigilant and aware of red flags.
  5. Review the existing payment approval processes within your organization, ensuring that no payments can be made without multiple levels of verification.
  6. Consider implementing additional security measures such as two-factor authentication for financial transactions.

How to Report AI Deepfake Executive Authorization Scam in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a UPI scam?
Immediately contact your bank's customer support and report the incident. You can reach SBI at 1800-11-1109 or HDFC at 1800-202-6161.
How can I identify AI Deepfake Executive Authorization Scam?
Look for signs such as unusual payment requests from executives, pressure for urgent payments, and any discrepancies in voice or video quality.
How do I report this type of scam in India?
You can report a scam by calling the cybercrime helpline at 1930 or visiting cybercrime.gov.in to file an online complaint.
How do I protect my accounts after such a scam?
Change your passwords immediately and enable two-factor authentication on all accounts. Monitor your bank statements closely for unauthorized transactions.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.