Three charged over alleged $129 million AI deepfake CEO scam

Prosecutors say AI impersonators posing as executives and lawyers persuaded employees worldwide to wire millions into accounts controlled by a fraud network.

Key takeaways

• Three men face charges over an alleged $129 million corporate fraud
• AI-cloned voices and images allegedly enabled executive and lawyer impersonations
• Victims included US hospitals, a bank and a UK fintech company
• Suspects arrested in Spain and Britain; extradition is pending

Fake CEOs, then fake lawyers

US prosecutors charged Jacob Soall, Sharon Hazan and Guy Sheetrit over a cross-border scheme allegedly run from 2024 to 2026. The US Justice Department's said in a Nov. 5 announcement that the group used AI to imitate corporate leaders during calls with employees.

A supposed CEO would introduce a confidential transaction, then refer the employee to attorneys at major law firms. Those lawyers were also impersonators, prosecutors allege. One defendant kept a handwritten script intended to discourage staff from discussing the payment internally.

Victims across sectors and borders

Reported losses included $11.6 million from a UK fintech firm and $4.8 million from a Missouri hospital system. Other victims included hospitals, financial firms and businesses. Investigators say proceeds passed through international bank accounts before they were converted into cryptocurrency.

Soall and Hazan were arrested in Spain and Sheetrit in the UK between June and September. All face wire fraud, aggravated identity theft and money laundering charges. However, Sheetrit's lawyers deny he was involved. The defendants are presumed innocent unless proven guilty.

A familiar voice is no longer proof

Technology advancements have made deepfakes much harder to spot. Nowadays, the dead giveaways are no longer distorted faces—they’re more likely secrecy, unusual payment instructions and authority you can’t easily verify independently.

Before approving transfers, contact the purported executive using a known number and require a second sign-off. FBI guidance recommends another communication channel to verify payment requests.

If someone shares a suspicious recorded video, Bitdefender RealCheck can assess AI manipulation and deceptive intent. However, it’s worth mentioning that our app doesn't authenticate live calls. If you want further peace of mind, Bitdefender Scamio can assess questionable messages and links. Note that neither replaces independent confirmation before sending money.