AI-Generated Deepfake Voice Used in CEO Impersonation Scam

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Attackers used AI-powered deepfake voice technology to impersonate a CEO, deceiving an employee at a UK energy company into transferring $240,000. The scam highlights the growing threat of AI-generated audio deepfakes in financial fraud, as security experts warn of increasing incidents targeting company executives.[AI generated]

Why's our monitor labelling this an incident or hazard?

The event involves the use of AI systems (deepfake voice synthesis) to impersonate CEOs and deceive employees into transferring funds, causing direct financial harm. The article describes realized harm (successful scams) and the role of AI in enabling these scams. The AI system's use directly led to harm to property (financial loss). Hence, it meets the criteria for an AI Incident rather than a hazard or complementary information.[AI generated]
AI principles
AccountabilitySafetyRobustness & digital securityTransparency & explainability

Industries
Energy, raw materials, and utilities

Affected stakeholders
BusinessWorkers

Harm types
Economic/Property

Severity
AI incident

AI system task:
Content generation


Articles about this incident or hazard

Thumbnail Image

偽造 CEO 語音騙走 712 萬元,語音版 Deepfake 詐騙案正在興起

2020-08-04
TechNews 科技新報 | 市場和業內人士關心的趨勢、內幕與新聞
Why's our monitor labelling this an incident or hazard?
The event involves the use of AI systems (deepfake voice synthesis) to impersonate CEOs and deceive employees into transferring funds, causing direct financial harm. The article describes realized harm (successful scams) and the role of AI in enabling these scams. The AI system's use directly led to harm to property (financial loss). Hence, it meets the criteria for an AI Incident rather than a hazard or complementary information.
Thumbnail Image

Expert: Cyber ruses getting harder to monitor

2020-08-12
The Star
Why's our monitor labelling this an incident or hazard?
The article explicitly mentions AI-generated deepfakes being used in scams that have already caused financial harm (e.g., the UK CEO scammed of €220,000 via a voice deepfake). The involvement of AI systems in generating fake videos and audio that deceive people and lead to financial scams constitutes direct harm to individuals (harm to persons). Therefore, this qualifies as an AI Incident because the AI system's use has directly led to realized harm. The discussion about the difficulty in moderating such content and the lack of technological solutions further supports the classification as an incident rather than a mere hazard or complementary information.
Thumbnail Image

Deepfakes soar during Covid-19 crisis as criminals 'easily make Zoom footage'

2020-08-11
Daily Star
Why's our monitor labelling this an incident or hazard?
The article centers on the plausible future harms that deepfake AI technology could cause, such as misinformation, election disruption, and judicial challenges, but does not describe any concrete event where such harm has already occurred. The involvement of AI systems (deepfake generation) is explicit, and the potential harms align with harm to communities and institutions. Since no actual harm has been reported yet, this fits the definition of an AI Hazard rather than an AI Incident or Complementary Information.
Thumbnail Image

Deepfake of Tom Hanks that 'easily passes as real' made for less than £75

2020-08-13
Daily Star
Why's our monitor labelling this an incident or hazard?
The event involves the use of an AI system (machine learning algorithms for deepfake generation) and discusses the potential for harm through disinformation campaigns and election interference. However, the article does not report any actual harm or incident occurring yet; it focuses on the plausible future risks posed by deepfake technology. Therefore, this qualifies as an AI Hazard because the development and use of AI-generated deepfakes could plausibly lead to significant harm such as misinformation, social disruption, and election interference, but no direct harm has been reported in this specific case.
Thumbnail Image

Why anyone could soon be the target of a deepfake

2020-08-13
7NEWS.com.au
Why's our monitor labelling this an incident or hazard?
The article explicitly describes AI systems (deepfake generation technology) being used to create synthetic videos and audio that have already caused harm, including financial fraud (the CEO scam), nonconsensual pornography, and political misinformation. These harms affect individuals' reputations, financial assets, and democratic processes, fitting the definitions of harm to persons, communities, and violations of rights. The AI system's development and use have directly led to these harms, meeting the criteria for an AI Incident rather than a hazard or complementary information. The article also discusses plausible future harms but the presence of realized harms takes precedence in classification.
Thumbnail Image

Deepfakes are getting cheaper, easier and way more convincing

2020-08-09
WIRED UK
Why's our monitor labelling this an incident or hazard?
The event involves AI systems explicitly (machine-learning models for face and voice generation). The use of these AI systems in generating deepfakes is demonstrated, showing how they could be misused for misinformation campaigns. While the article discusses the potential for harm (e.g., political interference, harassment, disinformation), it does not describe any realized harm or incident resulting from these AI-generated deepfakes. Therefore, this is a credible potential risk (AI Hazard) rather than an AI Incident. The article also provides context and expert opinions on the threat level and mitigation efforts, but the main focus is on the plausible future harm from AI deepfakes rather than a current incident or complementary information about responses to a past incident.
Thumbnail Image

Get Ready For Deepfakes To Be Used In Financial Scams

2020-08-10
Techdirt
Why's our monitor labelling this an incident or hazard?
The article explicitly mentions AI systems generating deepfake audio and video used in financial scams, including a concrete example where a CEO's cloned voice was used to defraud a company out of $243,000. This constitutes direct harm caused by AI system use, fulfilling the criteria for an AI Incident. Additionally, the article discusses multiple plausible future harms from deepfakes in financial contexts, but since actual harm has already occurred, the classification prioritizes AI Incident over AI Hazard. The article also discusses responses and mitigation but the main focus is on the harm caused and the emerging threat, not solely on responses, so it is not Complementary Information.