WPP CEO Mark Read Was the Face of a Deepfake Scam

The setup was methodical. Scammers built a fake WhatsApp account using Mark Read's photo, used it to arrange a Microsoft Teams call with a WPP agency leader, then ran the deception on two tracks at once: an AI-generated voice clone of Read spoke during the meeting while a separate chat window impersonated him in text. The goal was to extract money and personal details under the cover of launching a new business venture.

The attack failed. But what was deployed here was not a phishing email or a spoofed sender address. It was a real-time, multi-channel impersonation of a sitting CEO, complete with his voice, his face, and a plausible business pretext, conducted inside a tool that most organizations treat as inherently trustworthy.

Voice cloning requires as little as 20 to 30 seconds of audio. Mark Read, as CEO of the world's largest advertising firm, has given countless interviews and recorded presentations over the years. That audio is public. Anyone with a laptop and the right tools can use it. The fake WhatsApp account, the Teams invitation, the YouTube footage used as visual cover: none of it required insider access or technical expertise beyond what is now widely available.

WPP is not the only name on this list. In February 2024, engineering firm Arup lost $25 million when an employee authorized a wire transfer after joining a video call where every visible participant was a deepfake. In 2023, a finance worker at a multinational firm in Hong Kong transferred $200 million Hong Kong dollars after a video call featuring what appeared to be the company's CFO. The CFO was not on that call.

According to the FBI's Internet Crime Complaint Center, business email compromise and related executive impersonation fraud cost U.S. organizations $2.9 billion in 2023 alone. Voice and video-based variants are pushing that number higher.

The pattern in each case is the same. The executive is the weapon, not the target. The actual damage happens downstream, when a finance team member or senior operations lead receives the request and acts on it. In the WPP incident, the agency leader on that Teams call had no way to verify that the voice and face on screen were real. The deception held long enough to make a pitch. It failed because the agency leader was skeptical and did not act. Skepticism is not a system. It is not repeatable or scalable across an organization.

What Stops a Deepfake in Real Time

What organizations need is a verification layer that does not depend on whether a voice sounds right or a face looks real. Trust Onion gives finance teams and senior leaders exactly that. Before any wire approval, vendor change, or urgent payment request moves forward, the receiving team member asks one question: "What are the words?" Three rotating codewords are distributed across the organization's verification chain, calculated locally on each authorized device every 60 seconds with no server required. The real executive knows the current words. A cloned voice does not.

The barrier to constructing a fake video meeting participant is lower today than it was twelve months ago. Organizations that build a simple, consistent verification step into their authorization workflows stop waiting for the next attack to find out whether their people will catch it in time.

If the WPP agency leader had been using a codeword protocol, the scam would have ended in the first thirty seconds. The AI voice, however convincing, could not have answered.

A controlled voice-cloning safety demonstration

Try our tool to see just how easy voice cloning is. This controlled safety demonstration exists only to show how easy voice cloning is and to make the risk tangible. It is not a real incident or proof of anyone's identity. Your submitted sample is handled transiently to generate the fixed demonstration audio. Trust Onion does not identify you or the person from the sample. Trust Onion does not store the submitted recording, clone, or generated audio.