The US DOJ indicts three foreign nationals for allegedly using AI to impersonate CEOs and attorneys at major international law firms in a $129M+ fraud scheme

Business transactions may now require multi-factor verification beyond voice or video calls to prevent AI-powered impersonations.

Federal prosecutors in the Southern District of New York have indicted three foreign nationals for their alleged roles in an international fraud scheme that leveraged AI to impersonate corporate executives and attorneys. The scheme, which ran from July 2024 to February 2026, purportedly defrauded companies of over $129 million. Jacob Soall, Sharon Hazan, and Guy Sheetrit were arrested in Spain, Spain, and the United Kingdom, respectively, between June and September 2024. The indictment details how the trio and their co-conspirators used AI to mimic the voices and images of CEOs and lawyers to deceive employees, primarily in accounting departments, into transferring funds for purported confidential financial transactions. These funds were then converted into cryptocurrency to obscure their origins. Victims included an investment bank, a hospital system, a financial technology company, and others across the globe. The defendants face charges including conspiracy to commit wire fraud and money laundering, with each count carrying a maximum 20-year prison sentence.

This indictment signals a significant escalation in the use of sophisticated AI tools for financial crime, moving beyond simple phishing to high-fidelity impersonations that can deceive even sophisticated corporate employees. The scheme's success highlights a critical vulnerability in current business communication protocols, particularly those relying on audio or visual cues for authentication. The sophistication of mimicking both CEO and attorney voices and images suggests advanced deepfake technology is becoming more accessible and integrated into criminal operations. This raises the stakes for companies to invest in advanced fraud detection systems and employee training on identifying AI-generated impersonations.

The prosecution's focus on the AI impersonation aspect underscores a new frontier in cybercrime that regulators and law enforcement are grappling with. The rapid development and deployment of such technologies by malicious actors necessitate a proactive approach from businesses to secure their financial operations. Companies should anticipate increased scrutiny and potentially new compliance requirements related to safeguarding against AI-driven fraud. The conversion of stolen funds into cryptocurrency also points to the ongoing challenge of tracing and recovering illicit digital assets, suggesting a need for enhanced blockchain forensics capabilities.