Case Studyvoice cloning
Alleged AI Fake-CEO Ring Charged in More Than $129 Million Wire Fraud
An accountant at a Missouri hospital system took a call from what sounded like the organization's chief executive, then a follow-up from a lawyer, and $4.8 million vanished. Both voices were generated by AI, federal prosecutors say. The same script played out several times over about 18 months beginning in July 2024, costing companies in the United States and Europe more than $129 million, according to the U.S. Attorney's Office for the Southern District of New York.
Filed to the News Deskvoice cloning Originally reported by The New York Times
- When
- Beginning July 2024
- Who
- Organization
- Loss
- more than $129 million
- Outcome
- Ongoing
I.How it happened
An accountant at a Missouri hospital system got a call from a voice that sounded like the organization's chief executive, asking for an urgent, confidential wire transfer. A lawyer called next to finish the deal. By the time the real executives found out, $4.8 million was gone. Both voices were made with AI, according to the U.S. Attorney's Office for the Southern District of New York, as The New York Times reported.
Prosecutors said the same script ran several times over about 18 months beginning in July 2024. It usually opened with an email to an accountant or finance manager and borrowed the names of real people at large law firms. A handwritten "Lawyer Call" script leaned on regulatory jargon and insider trading risks to demand secrecy, so staff would not talk to colleagues. There were also attempts to pull employees into video calls with deepfakes of the chief executive. Other victims, which were not named, included a British financial technology company ($11.6 million), a Florida pet food company ($5 million), a California hospital system ($3 million), a Massachusetts mutual fund company ($4.7 million) and a Rhode Island bank ($2.7 million). The money went to accounts in many countries and was turned into cryptocurrency, prosecutors said.
Sources: The New York Times (Adeel Hassan, Nov. 8, 2026); U.S. Attorney's Office, Southern District of New York; PBS News; NBC News.
Timeline
-
The SetupJuly 2024
Prosecutors say the scheme began with emails to accountants and finance managers, using the names of real people at large law firms and a scripted pretext of regulatory jargon and insider trading risks to demand secrecy.
-
The Attack
Finance employees received calls from AI-generated voices of their own chief executive and of a lawyer. Attempts were also made to engage employees in video calls using deepfakes of the chief executive.
-
The Impact
Victims wired money to accounts around the world, which was then converted into cryptocurrency. A Missouri hospital system lost $4.8 million; the total across companies in the United States and Europe was more than $129 million, prosecutors said.
-
The ChargesNovember 5, 2026
An indictment was unsealed after authorities in Britain and Spain arrested three men over several months starting in June. They are awaiting extradition to face charges of wire fraud, aggravated identity theft and money laundering.
II.The damage
Prosecutors say the scheme cost companies in the United States and Europe more than $129 million. Three men were arrested in Britain and Spain over several months starting in June and are awaiting extradition to the United States, where they face charges of wire fraud, aggravated identity theft and money laundering. The charges are allegations and have not been proven in court.
Hany Farid, a Dartmouth College computer science professor and chief science officer at GetReal Security, told The Times: "I would comfortably say with less than a minute, you can clone somebody." On spotting a fake by ear, he said: "People are just slightly above chance performance." One chief executive, he said, told him: "That's it, we're doing everything in person."
III.What would have stopped it
Our analysis: prevention guidance, not part of the reported facts
Every one of these transfers started with a staff member hearing a familiar voice and having no other check to run. A codeword would have stopped it. With a rotating codeword set shared inside the company, the person asking for money gives the current words first. The real chief executive can read them from the app; a cloned voice cannot know words that rotate every 60 seconds. The finance employee checks them privately and never reads them out to the caller.
The "Lawyer Call" script was built to keep employees from checking with anyone, and that isolation is what made it work. A codeword check takes seconds, needs no approval chain and gives the employee a concrete reason to pause before money moves. Callers from outside the company, such as a law firm, a bank or a vendor, are not verified with codewords: hang up and call back on a number already on file, never one the caller provides.
Frequently asked questions
How did the AI fake-CEO scheme work?
Prosecutors say an accountant or finance manager first received an email, then calls from AI-generated voices of the company's chief executive and a lawyer. A script built on secrecy and insider trading pretexts pushed the employee to wire money quickly to accounts abroad, where it was converted into cryptocurrency.
How much money was taken?
More than $129 million from companies in the United States and Europe over about 18 months beginning in July 2024, according to the U.S. Attorney's Office for the Southern District of New York. A Missouri hospital system lost $4.8 million.
Which companies were targeted?
The victims were not named. They included a Missouri hospital system ($4.8 million), a British financial technology company ($11.6 million), a pet food company in Florida ($5 million), a hospital system in California ($3 million), a mutual fund company in Massachusetts ($4.7 million) and a bank based in Rhode Island ($2.7 million).
Has the case gone to trial?
Not yet. Three men were arrested in Britain and Spain and are awaiting extradition to the United States, where they face charges of wire fraud, aggravated identity theft and money laundering. The charges are allegations.
How can a finance team check that a call really comes from the CEO?
Use a rotating codeword set shared inside the company. The person asking for the payment gives the current words first, and the employee checks them privately. The words rotate every 60 seconds. For outside callers such as banks or law firms, call back on a number already on file.
Help Your Group Verify Calls
Friends, family, teams, and clubs can share three rotating words. Ask the caller to give them first; compare privately in your app.
Cite this page
Alleged AI Fake-CEO Ring Charged in More Than $129 Million Wire Fraud — Trust Onion, November 9, 2026. https://trustonion.io/case-studies/ai-cloned-ceo-voices-wire-fraud-129-million
