Deepfake Video Detection: Blind to a $108M Bank Voice Scam

A bank in Italy lost about a hundred and eight million dollars. The attackers didn't hack a single computer. They sent a WhatsApp message, then made one phone call.

If you've ever gotten a text from someone you trust

If you've ever gotten a text from someone you trust and acted on it without a second thought, this story is about you. That instinct is normal. It's also exactly what these scammers are counting on. It's unsettling, and it's fair to feel that.

Here's what the reporting says happened. The case involves Fideuram, an Italian bank. According to Biometric Update, the scheme started with a WhatsApp message that appeared to come from the bank's chief executive. Then came a phone call. The voice on the line was an A.I. clone of a senior lawyer. Money moved. So the question is simple. If no one broke into the system, how did a message and a call get past everyone?

Start with the structure of the trick. No single message did the job. The attacker layered two authority figures. First the chief executive makes a request. Then a lawyer's voice confirms it. Repetition feels like proof. Two familiar sources saying the same thing is exactly how we decide something is real.

For investigators, that's the pattern to watch. A first message, a voice follow-up, and a push to hurry. The analyst has to compare channels side by side, not judge one message alone. For the rest of us, it means a second confirmation isn't automatically a safe one if both come through channels an attacker can fake.

Consider how little the attacker needs

Now consider how little the attacker needs. According to fraud statistics compiled by StationX, a convincing voice clone can now be built from about three seconds of audio. Three seconds. Less time than it takes to say your name and where you work.

And the raw material is easy to find. The research describes attackers pulling audio and video of senior leaders from sites like LinkedIn. They feed it into open-source A.I. tools. Anyone who's posted a conference talk or a video greeting has handed over a sample. That includes people far outside the corner office.

Then there's the success rate. StationX reports that among people actually reached by voice clone scams, about three in four lost money. Three in four. This isn't a scam most people spot. It's one most targets pay.

The earlier Arup case set the template. In twenty twenty-four, a faked video call cost that company about twenty-five million dollars. The Italian case shows the same idea working with nothing but a message and a voice.