Deepfake Director Payroll Diversion Scam
Verdict: Suspicious | Risk Score: 10/10 | Severity: critical
Category: WhatsApp, Phishing
How Deepfake Director Payroll Diversion Scam Works
Overview: The Deepfake Director Payroll Diversion Scam is a cutting-edge fraud technique where scammers impersonate high-level executives using AI-generated voice and video calls. These are deployed just before salary is disbursed to convince HR or finance staff to reroute payments. Such scams target mid-to-large Indian organizations with digital payroll systems and cause direct losses that can run into crores of rupees. How It Works: Criminals use information gathered from social media and breached company emails to craft convincing voice or video messages. They generate deepfakes mimicking the appearance and mannerisms of your CFO or finance head. The attacker then reaches out by video call or an urgent email/direct message, instructing HR to process a payroll adjustment or split salary payments among multiple new 'vendors' or 'consultants.' Typically, the narrative includes phrases like “strictly confidential” and tight deadlines. All new account details ultimately belong to money mules controlled by fraudsters. India Angle: This scam thrives in Indian cities where remote teams and work-from-home setups are widespread, such as Gurugram, Bengaluru, and Hyderabad. Fraudsters often reference Indian salary cycles, and use colloquial speech common among Indian executives to make the deepfake call appear genuine. Affected employees may be from HR departments or payroll outsourcing firms. Real Examples: - Example 1: HR Head receives a WhatsApp video call from a number shown as "CFO – Rajesh Sinha," who instructs: "There is a confidential budget split this month. Please send half of payroll to these new accounts – don't discuss, compliance is pending." - Example 2: An urgent Teams message: "As per board direction, process split salary payments to these five vendor wallets before 4 PM, single approval sufficient." Red Flags: - Unusual or urgent payroll changes ordered by a top executive via call or message - Requests for confidentiality with time pressure - Executive not available via other normal channels (e.g., does not reply to office landline) - Payment instructions to split payroll or send to new bank accounts - Instructions that bypass standard approval workflows Protective Measures: - Always verify any executive instruction with a callback to known office numbers, not numbers from an email or message - Require multi-level approvals for any change to payroll or vendor bank details - Train staff to recognize and report suspicious executive communications, especially requests for secrecy - Use AI tools that detect deepfake audio and video in the HR workflow, where feasible If Victimised: - Notify IT and HR leadership immediately - Contact your bank and request a halt or recall of diverted payments - File a complaint on cybercrime.gov.in and call the 1930 helpline - Escalate to RBI and company legal counsel to flag potential criminal breach Related Scams: - CEO fraud (Business Email Compromise) asking for urgent payments - Vendor invoice frauds via phishing - Phony 'audit team' calls for bank verification
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Deepfake Director Payroll Diversion Scam Target?
General public across India
Red Flags — How to Identify Deepfake Director Payroll Diversion Scam
- Unsolicited executive video or voice calls with payment instructions
- Demands for secrecy and quick action
- New accounts or vendors added without standard checks
- Requests to bypass approval processes
- Executive unreachable via regular channels
What To Do If You Encounter Deepfake Director Payroll Diversion Scam
- Do not click any links or share personal information
- Block and report the sender immediately
- Report at cybercrime.gov.in or call 1930
- Inform your bank if financial details were shared
How to Report Deepfake Director Payroll Diversion Scam in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What is Deepfake Director Payroll Diversion Scam?
- Overview: The Deepfake Director Payroll Diversion Scam is a cutting-edge fraud technique where scammers impersonate high-level executives using AI-generated voice and video calls. These are deployed just before salary is disbursed to convince HR or finance staff to reroute payments. Such scams target mid-to-large Indian organizations with digital payroll systems and cause direct losses that can run into crores of rupees. How It Works: Criminals use information gathered from social media and bre
- How does Deepfake Director Payroll Diversion Scam work?
- Overview: The Deepfake Director Payroll Diversion Scam is a cutting-edge fraud technique where scammers impersonate high-level executives using AI-generated voice and video calls. These are deployed just before salary is disbursed to convince HR or finance staff to reroute payments. Such scams target mid-to-large Indian organizations with digital payroll systems and cause direct losses that can ru
- How to protect yourself from Deepfake Director Payroll Diversion Scam?
- Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared
- How to report Deepfake Director Payroll Diversion Scam in India?
- Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.