CEO/Executive Impersonation (Whaling)
सीईओ/कार्यकारी प्रतिरूपण (व्हेलिंग)
INDIA — By BharatSecure Threat Intelligence Team ·
Category: Wire Fraud, Global
Verdict Summary
CEO/Executive Impersonation (Whaling) is a confirmed scam. Do not engage — block the sender and report to 1930 (National Cyber Crime Helpline) immediately.
Risk score: 10/10 · Severity: Critical · Verdict: Dangerous
Scam Intelligence: CEO/Executive Impersonation (Whaling)
Proprietary signals from BharatSecure's scam-tracking database.
| Last reported | Apr 04, 2026 |
| First documented | Apr 04, 2026 |
How CEO/Executive Impersonation (Whaling) Works
- Attackers research company executives (CEO, CFO) and their communication patterns.
- They create fake email accounts or compromise real ones to impersonate an executive.
- An urgent, confidential request (e.g., wire transfer for an acquisition, sensitive data) is sent to an employee with financial authority.
- The employee, believing it's a legitimate executive request, processes the transfer or provides information.
How This Scam Works — Detailed Explanation
CEO/Executive Impersonation, also known as Whaling, is a type of wire fraud where scammers pretend to be top executives like CEOs, managing directors, or CFOs of a company. In India, these fraudsters often target employees working in finance, accounts, or administration departments, hoping they will unknowingly transfer money when asked. The scam usually starts with hackers obtaining information about the company’s executives through social media, LinkedIn, company websites, or even phishing attempts. They then send emails, WhatsApp messages, or make phone calls posing as the executive, creating a sense of urgency and secrecy to pressure the victim into acting quickly without verifying the request.
The fraudster’s message frequently instructs the employee to send money urgently to a specified bank account, sometimes outside of normal banking hours, and may ask for transactions that are unusual, like paying new vendors or changing payment details. In India, these transfers may be requested via Immediate Payment Service (IMPS), National Electronic Funds Transfer (NEFT), or even through UPI apps such as Google Pay or PhonePe. The crooks use tricks like email addresses that look almost identical to the real executive’s but with slight differences or different domains. They also try to bypass standard security checks by pressuring the victim to ignore multi-factor authentication or OTP verification.
Once the money is transferred, it is quickly moved out of the accounts through a network of fake accounts and wallets, making it hard to trace. Victims often realize the fraud only after the funds have disappeared, creating significant financial loss for companies and damaging reputations. In some cases, scammers also try to use Aadhaar-based digital identities to create fake accounts or authorize transactions. The scam can be very sophisticated and convincing, making it crucial for employees to be alert to the known red flags.
These scams are especially dangerous in India due to the widespread use of mobile banking, WhatsApp, and UPI payments, which allow rapid, irreversible money transfers. Companies of all sizes, including startups and small businesses, are targets because they may not have strong verification processes in place. Understanding how the scam works can help employees and business owners recognize suspicious activity early and avoid falling victim to CEO/Executive Impersonation (Whaling) scams.
Who Does CEO/Executive Impersonation (Whaling) Target?
Employees with financial authority (CFO, finance managers, accounts payable), administrative staff.
Red Flags — How to Identify CEO/Executive Impersonation (Whaling)
- Unusual urgency and demand for secrecy.
- Requests for off-standard financial transactions or changes.
- Email sender address slightly off or suspicious (even if display name is correct).
- Pressure to bypass standard verification protocols.
- Requests made outside of normal business hours.
What To Do If You Encounter CEO/Executive Impersonation (Whaling)
- Verify any urgent payment request by calling the executive’s official number directly, not by replying to the email or message.
- Confirm all financial transactions through multiple channels, especially if instructions involve changes to payment details.
- Report suspicious emails or messages immediately to your company’s IT or security team for investigation.
- Avoid sharing OTPs or banking credentials with anyone, even if the person claims to be an executive or bank official.
- Contact your bank or UPI app customer care instantly if you suspect fraudulent transactions to attempt freezing payments.
How to Report CEO/Executive Impersonation (Whaling) in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What is CEO/Executive Impersonation (Whaling)?
- CEO/Executive Impersonation (Whaling) is a reported wire fraud scam that BharatSecure has documented as affecting Indian users. Fraudsters use it to trick victims into sharing money, OTPs, or personal and banking details. It currently carries a risk rating of 10/10 (Critical).
- Is CEO/Executive Impersonation (Whaling) dangerous, and how common is it in India?
- Yes. This scam is rated Critical severity (10/10) because it can lead to direct financial loss or identity theft. It spreads through SMS, WhatsApp, phone calls, and fake websites, and variants are reported across India throughout the year. Treat any unexpected message or call matching this pattern as suspicious until verified.
- How can I protect myself from CEO/Executive Impersonation (Whaling)?
- Verify any urgent payment request by calling the executive’s official number directly, not by replying to the email or message. Confirm all financial transactions through multiple channels, especially if instructions involve changes to payment details. Report suspicious emails or messages immediately to your company’s IT or security team for investigation. Avoid sharing OTPs or banking credentials with anyone, even if the person claims to be an executive or bank official. Never share OTPs, UPI PINs, card numbers, or passwords; verify any request independently using official numbers from the company's real website; and avoid clicking links in unsolicited messages.
- How do I report CEO/Executive Impersonation (Whaling) in India?
- Call 1930 (the National Cyber Crime Helpline) within 24 hours for the best chance of recovering funds, and file a complaint at cybercrime.gov.in with screenshots and transaction details. Notify your bank's fraud team to freeze transactions, and report the suspect UPI ID or phone number to BharatSecure so other users can be warned.
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.