Imagine this: your boss (or even your adult child) calls you in a worried voice, urgently asking you to transfer money to a “safe account” or send confidential data. The voice sounds familiar, the intonation is recognizable, the numbers on your messenger or caller ID match. Would you believe it? Most of us would.
This is precisely what modern scammers are banking on. The era when cybercriminals hacked corporate firewalls is fading into the background. Today, the main hacking tool is human psychology, coupled with artificial intelligence.
Welcome to the era of deepfake scams.
What are deepfakes and why have they become dangerous now?
Deepfake technology has been developing for years, but until recently, creating convincing video or audio required powerful studio computers and hours of work from specialists.
Today, the situation has changed dramatically. Neural networks have learned to generate a high-quality voice based on just 3-5 seconds of audio recording. Posted a story on Instagram, recorded a voice message in a work chat, or left a comment on social media? Congratulations, your digital fingerprint is now accessible to attackers.
And with the advent of affordable software for generating real-time video, scammers have reached a whole new level of social engineering.
New schemes: How does it work in practice?
While phishing emails once gave themselves away with grammatical errors and strange links, modern deepfake fraud precisely targets emotions—fear, haste, and trust. Here are the most common scenarios:
1. “Crisis call” from relatives
The classic “Mom, I was in an accident” scam has received a technological upgrade. Now, scammers don’t just whisper or disguise their voices—they call via video (WhatsApp, Telegram, or Zoom). You see your child’s or husband’s face, see their lips move, and hear their familiar voice. For a split second, the image may blur or freeze, but the criminals chalk it up to a bad connection. The frightened person turns off their critical thinking and transfers the money.
2. The CFO demands an urgent transfer (BEC attacks)
In the corporate sector, deepfakes have become a security nightmare. There are known cases of scammers using audio deepfakes to impersonate the voice of an international company’s CEO and instruct an accountant to make an urgent, secret transfer. An even more sophisticated case occurred in Hong Kong: there, scammers created a digital copy of the CFO via videoconferencing and “convinced” a company employee to transfer $25 million during a video conference where all the other participants were also deepfakes.
3. Fake interviews and Trojan horse hiring
IT companies and corporations with remote work arrangements are facing a new threat: job seekers are using real-time deepfakes during online interviews. The person on the screen appears to answer questions confidently, but the person actually interviewing is a completely different person (or is being hijacked by attackers with access to confidential corporate databases).
Why do we believe fakes?
Social engineering has always exploited human weaknesses. Deepfakes make it even more effective for three reasons:
- Presence effect: It is difficult for our brain to suspect deception when the senses (hearing and sight) confirm the identity of the interlocutor.
- Urgency factor: Fraudsters always create artificial time pressure (“decide right now,” “no time to explain”) so that the victim does not have time to double-check the information.
- Emotional trigger: Fear for loved ones or fear of the wrath of a superior blocks logical thinking.
How to protect yourself and your business?
While it’s impossible to completely eliminate risks, building a digital defense is entirely possible. Here are some basic security rules in the age of deepfakes:
For each of us:
- The code word rule. Come up with a secret word or phrase with your loved ones (especially elderly parents and children) that can’t be found on social media. If someone calls asking for money, ask this question. The neural network won’t guess the answer.
- Double-check your communication channels. If your “boss” or “friend” calls you asking for financial assistance, hang up and call them back on their regular mobile number.
- Reduce public exposure. Try to keep your social media accounts private. The fewer publicly available samples of your voice and video, the harder it is for scammers to create a high-quality clone of you.
For business:
- Verification protocols. No voice or video messages in messengers should be used as the basis for financial transactions. Multi-stage authorization and written confirmation through internal secure systems are required.
- Employee training. Your team should be aware of deepfake threats. Conduct regular cybersecurity training sessions that simulate similar attacks.
Deepfakes are a new front in the cyberwar, where each of us is becoming a weapon. As technology improves, it will become even more difficult to distinguish a real person from a digital double.
However, the main weapon against social engineering remains the same: critical thinking. Pause, doubt, and double-check —three pillars that today protect your wallet and your reputation better than any antivirus.
