how it happened
- whofraudstercloned the CEO's voice
- the targetone executivetone felt slightly off
- how it stoppedcall endedno transfer, no loss
what everyone assumed
We authenticate people by how they sound. A familiar voice, the right accent, the right manner of pressing on something urgent: that combination has meant “this is really them” for as long as telephones have existed. It is not a careless belief. It is how human trust has always worked, and until recently the voice was one of the hardest things in the world to forge convincingly.
what happened
Here the quiet stretch was only minutes long, which is the modern version of it. The script was built to compress time and remove doubt: a major deal, a regulator supposedly already informed, a document that needed signing now. The voice was close. It carried the accent. But the executive noticed slight inconsistencies in tone during the call, the small wrongness that the impersonation could not fully smooth over, and instead of dismissing the feeling, kept listening to it.
step by step
- an executive gets a call in the CEO's voiceA major deal, a regulator already informed, a document to sign now.
- small inconsistencies in toneThe executive keeps listening to the doubt instead of dismissing it.the assumption breaks here
- a question only the real CEO could answerThe title of a book recommended days earlier.
- the caller hangs upNo transfer, no loss.
how it surfaced
The executive asked a question only the real CEO could answer: the title of a book the CEO had recommended days earlier. The caller could not answer it and ended the call. The book was Alberto Felice De Toni’s “Decalogue of Complexity.” There was no transfer, no loss, no breach. The attempt retired the assumption without collecting on it, which is the rarest and most useful version of this story.
A voice is no longer proof of a person.
What still works is a shared fact the caller would have to know rather than imitate, asked at the moment the request feels urgent.
picture it at a company like yours
The company here is made up. The other two paths are not: they happened, and each links to the story.
- in this storythe day it mattersSomething feels slightly off, so the CFO asks a question only the real CEO could answer.what it costs youThe caller hangs up. One personal question was the whole defence, and it worked.
- or it goes like thisit happenedArup deepfake fraud, 2024howA video call full of deepfaked executives asks for urgent transfers.what leavesmoney, in several transfers in one daywho ends up with itfraudsters who built the call
- or it goes like thisit happenedFacebook and Google, 2019howInvoices arrive in a real supplier's name with new bank details.what leavesmonths of supplier paymentswho ends up with ita fraudster abroad
sources
your turn
what you can do about it
this week
Agree on one out-of-band step for any urgent money-or-secrets request: a callback to a known number, or a question only the real person could answer.
Somewhere in your company, an urgent request from a senior name will arrive by message or call, and the pressure will be to act before verifying. The question the quiet months ask is whether your team has permission to pause and check. Ferrari's loss was zero because one person felt entitled to ask.
go deeper
if you're not sure where to start
Run the offboarding checklist on one leaver. It covers every account and token to close when someone leaves.
open the checklist →