Threat Alert: Deepfake Scam Targeting Financial Transactions 

• An employee attended a video conference call with seemingly authentic colleagues, all of whom were later revealed to be deepfake representations. 
• The worker, initially suspicious of a phishing email, was convinced by the realistic appearance and voices of the deepfake participants during the video call. 
• Subsequently, the employee authorized a large financial transaction, thinking it was a legitimate request initiated by the CFO. 

Key Actions (at Work and at Home) 

• Follow proper payment processes. If you receive a work call requesting urgent financial action, always follow the organizational processes in place. Establish clear communication channels for verifying sensitive transactions, especially those involving unusual or confidential requests. 
• Verify callers. If a call from a known contact seems suspicious, always verify it by calling back via a known, trusted number prior to taking any action. 
• Follow established processes. Always follow proper organizational processes when handling payments or sensitive information, even if you receive conflicting instructions by voice or video from someone you know.   
• Report ANY suspicious emails using the Phish Alarm button. Remember: Our organization occasionally sends phishing simulations.