What to do if I shared sensitive information during a deepfake scam call?

Immediately contact your bank's customer service, such as SBI at 1800-11-1109, to secure your accounts and report the incident to the local police.

How can I identify if a call is a deepfake scam?

Be wary of calls requesting immediate action without prior notification; note any robotic intonations. Use other reliable communication channels to verify the request.

How do I report a deepfake call scam?

You can report this type of scam through the cybercrime helpline at 1930 or visit cybercrime.gov.in for assistance.

What steps should I take to recover money lost in a transaction initiated by a deepfake call?

Contact your bank immediately to report the transaction. Initiate a fraud report and follow through with law enforcement while documenting all interactions.

Deepfake Call Scam Targeting CEOs

INDIA — By BharatSecure Threat Intelligence Team · Updated May 26, 2026

Verdict: Suspicious | Risk Score: 10/10 | Severity: critical

Category: WhatsApp, Phishing, Government Impersonation

How Deepfake Call Scam Targeting CEOs Works

Overview: With advances in AI, scammers are now creating deepfake voice or video calls that convincingly impersonate CEOs or top executives. In India, this fraud is increasingly used to order unauthorized fund transfers or sensitive data sharing, primarily targeting finance departments of enterprises and startups. The risk is exceptionally high for businesses due to potential for massive financial loss and reputational damage. How It Works: Fraudsters gather audio/video of company executives from social media or public events. Using deepfake tools, they simulate the executive’s voice and dialect convincingly. Finance staff receive a call, video conference, or urgent WhatsApp audio from this 'executive' requesting rapid action: transferring funds, sharing payroll information, or sending login credentials. The scam is often timed during late evenings or weekends, making verification harder. India Angle: Large companies and funded startups in Bengaluru, Hyderabad, or Gurugram are common targets. Fraudsters may use Hindi, English, or regional languages spoken by senior management, making the fake even more believable. Such scams often coincide with company reporting deadlines or deal closures. Real Examples: - WhatsApp Voice: 'This is Sandeep, your CEO. Please process the attached payment now, it’s urgent.' - Video call: Company CFO receives a video call that appears visually identical to the boss, asking for a confidential document. Red Flags: - Unusual or out-of-hours requests by senior executives - Pressure to avoid standard approval or checks - Insistence on keeping the conversation confidential - Voice/video quality seems slightly off or out of sync Protective Measures: - Implement strict multi-level approval for all major transactions - Always call back via known company line before acting - Educate staff about deepfake audio/video risks - Do not act on financial requests received only over WhatsApp/unknown calls If Victimised: - Immediately inform your company’s InfoSec or management team - Prevent funds from being processed or recall if possible - Report to cybercrime.gov.in, local police, and helpline 1930 - Preserve all call recordings and communication as evidence Related Scams: - WhatsApp impersonation scams - Fake email requests from spoofed executive IDs - Phishing attacks targeting company payroll/account staff

How This Scam Works — Detailed Explanation

In the world of corporate espionage and fraud, deepfake technology has become a game changer. Scammers leverage advancements in artificial intelligence to create highly convincing deepfake voice and video calls, targeting CEOs and top executives of businesses. They gather audio and visual material from various public sources, such as social media platforms, webinars, or past interviews, to create these deepfakes. In India, with significant corporate reliance on digital communication platforms like WhatsApp for official correspondence, cybercriminals exploit this by masquerading as trusted figures. Scammers might also use unregulated VoIP services to conduct the calls, making it difficult to track the original source and lending a false sense of security to their ruse.

The tactics employed by these fraudsters are particularly deceptive. They often craft messages that cite urgent issues needing immediate attention, leveraging psychological pressure to prompt swift compliance. For example, a scammer may impersonate a CEO calling a finance department employee, requesting a “secret” fund transfer under the guise of a critical corporate opportunity. The lack of usual formalities in the conversation, infusing a sense of urgency with phrases like “this is confidential” or “you need to act fast,” ensnares the targets. The deepfake technology helps here; victims might notice a slightly robotic tone or delayed lip-syncing, but the urgency can cloud their judgment.

Victims of deepfake call scams face a harrowing reality once they respond. The process starts with a call convincing them to make unauthorized fund transfers, often using platforms like UPI. Victims may be instructed to transfer funds to seemingly legitimate bank accounts provided during the call. In May 2023, a Bengaluru-based tech startup lost ₹7 crore after its finance team fell for such a deepfake impersonation of their CEO, leading to a significant financial setback. Similarly, in Pune, a manufacturing firm reported ₹12 crore lost due to fraudulent requests masquerading as legitimate executive instructions.

The scale of this scam is growing alarmingly in India. According to a report by the Ministry of Home Affairs (MHA), instances of financial fraud surged, with a staggering ₹27,000 crore lost to cyber frauds in 2022 alone. CERT-In has also issued advisories urging businesses, especially in finance, to remain vigilant for such deepfake threats. The RBI has heightened its alertness towards digital fraud, imposing stricter guidelines for financial transactions. In light of these incidents, it’s clear that the risk to both financial and reputational aspects of companies is substantial.

To differentiate between a legitimate communication and a deepfake scam, organizations should implement robust verification processes for urgent requests. Key red flags include messages being conveyed through unverified channels, requests that lack formalities, and encouragement to bypass standard approval systems. Carefully scrutinizing the tone, intonation, and behavior of the caller can help in identifying inconsistencies. Legitimate requests from executives will always come through verified channels, and any deviation should warrant immediate verification through official communication methods, such as a known internal contact number. This vigilance could save companies from incurring severe financial losses and reputational damage.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Deepfake Call Scam Targeting CEOs Target?

General public across India

Red Flags — How to Identify Deepfake Call Scam Targeting CEOs

Unusual payment or data request from boss via call/video
Pressure to act urgently and avoid normal approval
Instructions to keep request confidential
Slightly robotic or poorly synced voice/video

What To Do If You Encounter Deepfake Call Scam Targeting CEOs

Report any suspicious calls at the cybercrime helpline 1930 or through cybercrime.gov.in.
Verify any unusual payment requests by directly contacting the executive through known contact methods.
Document all details of the call, including the time, date, and content to help authorities with investigations.
Alert your IT department to monitor for any further suspicious activities or communications.
Educate your team on the signs of deepfake scams to foster a culture of cyber awareness.
Consider enrolling in cybersecurity training programs tailored for businesses to enhance your organization's defenses.

How to Report Deepfake Call Scam Targeting CEOs in India

Call 1930 — National Cyber Crime Helpline (24x7)
File a complaint at cybercrime.gov.in
Contact your bank immediately if money was lost
Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared sensitive information during a deepfake scam call?: Immediately contact your bank's customer service, such as SBI at 1800-11-1109, to secure your accounts and report the incident to the local police.
How can I identify if a call is a deepfake scam?: Be wary of calls requesting immediate action without prior notification; note any robotic intonations. Use other reliable communication channels to verify the request.
How do I report a deepfake call scam?: You can report this type of scam through the cybercrime helpline at 1930 or visit cybercrime.gov.in for assistance.
What steps should I take to recover money lost in a transaction initiated by a deepfake call?: Contact your bank immediately to report the transaction. Initiate a fraud report and follow through with law enforcement while documenting all interactions.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.