---
title: "How do deepfake CFO scams work?"
description: "How deepfake CFO and CEO scams work, from cloned voice messages to fake video calls, and the verification steps that stop them."
url: https://realpayee.com/answers/how-do-deepfake-cfo-scams-work
canonical: https://realpayee.com/answers/how-do-deepfake-cfo-scams-work
date_published: 2026-10-05
date_modified: 2026-10-05
author: RealPayee
---

# How do deepfake CFO scams work?

> In a deepfake CFO scam, criminals use AI to imitate a real executive's voice or face, usually from public recordings, and call, message or video-call a finance employee with an urgent, confidential payment request. The fake often follows a spoofed email to look consistent. It works because staff trust a familiar voice. The defense is confirming every such request through a separate, known channel.

A familiar voice or face should never be enough to release a payment. Use a phone-bound approval or an ID plus live selfie check with the real executive before money moves.

_Published 2026-10-05 · Updated 2026-10-05 · By RealPayee_

## Anatomy of a deepfake executive request

1. Attackers collect voice and video of the executive from earnings calls, interviews or social media.
2. A spoofed or lookalike email sets up a confidential deal or urgent supplier payment.
3. A call, voice note or video meeting with the cloned executive applies pressure and asks for secrecy.
4. The employee sends a wire, often split into several payments to avoid thresholds.

## Controls that work

- Hold payments above a threshold until the real executive confirms on a channel bound to them.
- Never treat an inbound call or meeting invite as verification. Call back on a known number.
- Require dual approval for urgent or confidential payments.
- Train staff that secrecy and urgency are red flags, whoever is asking.

Our [CEO fraud guide](https://realpayee.com/ceo-fraud) and [deepfake scams](https://realpayee.com/blog/deepfake-scams) post cover real cases and scripts.

## Frequently asked questions

### Are deepfake BEC losses already being reported?

Yes. The FBI's IC3 reported over $30 million in 2025 BEC losses with a confirmed AI nexus. See [payment fraud statistics](https://realpayee.com/payment-fraud-statistics).

### Can deepfake detection software stop it?

Detection tools can help on calls and meetings, but detection can miss. A verification step tied to the real person before payment is the reliable control.

## Sources

- [McDonald Hopkins: The sobering truth of the FBI's 2025 IC3 report](https://www.mcdonaldhopkins.com/insights/news/the-sobering-truth-of-the-fbis-2025-internet-crime-complaint-center-report)

## Related

- [CEO fraud and deepfake executive calls: how finance teams stop them](https://realpayee.com/ceo-fraud) - How CEO fraud works - from spoofed emails to deepfake video calls - and the verification steps that stop fake payment requests. (markdown: https://realpayee.com/ceo-fraud.md)
- [Deepfake scams: how AI voice and video fraud targets finance](https://realpayee.com/blog/deepfake-scams) - How deepfake scams and AI voice cloning target finance teams, what the Arup and Ferrari cases teach, and a verification protocol your team can run today. (markdown: https://realpayee.com/blog/deepfake-scams.md)
- [Deepfake](https://realpayee.com/glossary/deepfake) - A deepfake is AI-generated or AI-altered audio, video or imagery that convincingly imitates a real person. In payment fraud, deepfaked executives on... (markdown: https://realpayee.com/glossary/deepfake.md)
- [Voice cloning](https://realpayee.com/glossary/voice-cloning) - Voice cloning uses AI to synthesize speech in a specific person's voice from samples of their recordings. Fraudsters use cloned executive voices on... (markdown: https://realpayee.com/glossary/voice-cloning.md)

---

Canonical HTML: https://realpayee.com/answers/how-do-deepfake-cfo-scams-work · Site index: https://realpayee.com/llms.txt · Book a demo: https://realpayee.com/demo