Case Studyai phone call
AI Voice Clone and Fake WhatsApp Message Cost Italian Bank €95 Million
Fraudsters sent Fideuram Chairman Paolo Molesini a fake WhatsApp message impersonating Intesa Sanpaolo CEO Carlo Messina, then followed up with an AI-cloned voice call posing as a senior law firm partner, prompting Molesini to authorize €95 million in overseas wire transfers. International cooperation recovered approximately €53 million, but roughly €36 million was converted to cryptocurrency and remains missing.
Filed to the News Deskai phone call Originally reported by TechSpot
- When
- September 2026
- Who
- Executive
- Loss
- €95 million transferred; approximately €53 million recovered; roughly €36 million unrecovered
- Outcome
- Successful Fraud
I.How it happened
A WhatsApp message crafted to appear from Intesa Sanpaolo CEO Carlo Messina landed in Fideuram Chairman Paolo Molesini's inbox, framing an urgent, confidential financial matter and priming him to expect a call from a trusted legal intermediary. The follow-up came as a phone call using an AI-generated voice clone designed to sound like a senior law firm partner, who presented the transfers as legally sanctioned and time-sensitive.
Molesini relayed the instructions to Fideuram's finance department, which processed wire transfers totaling €95 million to accounts in China and Hong Kong without a verification step capable of confirming the original executive's identity. A message from a known superior, backed by a call from a credible professional, made the request look legitimate across two channels that were both fabricated.
Timeline
-
The Setup
Fraudsters researched the relationship between Intesa Sanpaolo CEO Carlo Messina and Fideuram Chairman Paolo Molesini, then built a fake WhatsApp persona and an AI voice clone capable of simulating a senior law firm partner.
-
The Attack
Molesini received a WhatsApp message purportedly from CEO Carlo Messina, followed by a phone call using an AI-cloned voice posing as a senior law firm partner, who instructed him to authorize wire transfers totaling €95 million to accounts in China and Hong Kong. Molesini passed the instructions to Fideuram's finance department, which processed the transfers.
-
The Impact
Ninety-five million euros left Fideuram's accounts and were routed overseas. Approximately €36 million was rapidly converted into cryptocurrency, making recovery extremely difficult.
-
The Discovery
Fideuram's internal systems detected transaction anomalies after the transfers. The bank launched an internal review and engaged law enforcement, triggering an international effort to trace and freeze the funds.
-
The Fallout
International cooperation allowed authorities to recover approximately €53 million, while roughly €36 million converted to cryptocurrency remains unaccounted for. Molesini resigned, and Milan prosecutors placed at least one foreign national under investigation for computer fraud.
II.The damage
The direct loss was €95 million in outbound wire transfers. International cooperation recovered approximately €53 million, leaving roughly €36 million that was converted to cryptocurrency before detection and remains out of reach. The speed of that conversion shows the attackers planned their exit in advance.
Chairman Paolo Molesini resigned, removing a senior executive from one of Italy's largest private banking groups at the same moment the institution was managing a public fraud disclosure. Milan prosecutors have placed at least one foreign national under investigation for computer fraud. Regulatory scrutiny of Fideuram's internal transfer approval procedures is a likely consequence.
III.What would have stopped it
Our analysis: prevention guidance, not part of the reported facts
A finance team member who challenged the instruction with "What are the words?" before approving any transfer would have stopped this attack at both layers. The real Carlo Messina would have known Fideuram's current three codewords; an impersonator sending a WhatsApp message cannot. The AI-cloned voice on the follow-up call would have faced the same question and failed the same way. Note that a failed callback alone does not prove the original caller was legitimate; the codeword challenge is the verification step, not the callback.
Trust Onion's rotating codewords are calculated locally on each authorized device and change every 60 seconds, with no server to breach and no database to steal. A protocol requiring any wire transfer request above a defined threshold to be verbally challenged, regardless of the apparent sender's seniority or the urgency claimed, turns a three-second question into a check that AI voice cloning cannot defeat.
Frequently asked questions
What happened in the Fideuram AI voice clone fraud?
Fraudsters sent Fideuram Chairman Paolo Molesini a WhatsApp message impersonating Intesa Sanpaolo CEO Carlo Messina, then followed up with an AI-cloned call posing as a senior law firm partner. Molesini authorized €95 million in overseas wire transfers. The bank detected anomalies, and international cooperation recovered approximately €53 million, but roughly €36 million converted to cryptocurrency remains missing.
How much money was lost in the Fideuram fraud?
€95 million was transferred out of Fideuram. Approximately €53 million was recovered through international law enforcement cooperation. Roughly €36 million was converted to cryptocurrency and has not been recovered.
How could this wire transfer fraud have been prevented?
A mandatory codeword challenge would have stopped both layers of the attack before any funds moved. Neither the WhatsApp impersonator nor the AI-cloned voice could have supplied Fideuram's current three rotating codewords. Trust Onion's codewords change every 60 seconds, are calculated locally on authorized devices, and give finance teams a challenge that AI voice cloning cannot defeat.
Why was the fraudulent wire transfer difficult to reverse?
Funds were sent to accounts in China and Hong Kong, requiring international legal coordination to freeze assets. Approximately €36 million was rapidly converted to cryptocurrency, placing it outside the conventional banking system. Only approximately €53 million was reachable through international cooperation.
What verification step should finance teams add to prevent CEO fraud?
Finance teams should require any executive requesting a wire transfer to verbally supply the current three rotating codewords before the request is actioned, regardless of the channel used, the apparent sender's seniority, or the urgency claimed. Trust Onion provides this rotating codeword system free of charge; the words rotate every 60 seconds and cannot be cloned or intercepted.
Help Your Group Verify Calls
Friends, family, teams, and clubs can share three rotating words. Ask the caller to give them first; compare privately in your app.
Cite this page
AI Voice Clone and Fake WhatsApp Message Cost Italian Bank €95 Million — Trust Onion, October 11, 2026. https://trustonion.io/case-studies/ai-voice-clone-and-fake-whatsapp-message-cost-italian-bank-95-million
