An urgent call from a company executive can sound real. But AI can now make a fake voice much harder to detect. For businesses that move money across borders, an AI-generated voice could be used to approve a fake wire transfer and trigger a federal investigation.
How does an AI voice-cloning scam work?
Criminals can use public audio and AI tools to copy the voice of a trusted person, such as a business executive or partner. The FBI warns that these tactics can trick businesses into giving up information or approving fraudulent transactions.
The scam can look like a business email compromise. A criminal poses as a CEO, CFO or vendor and creates urgency around a payment. The employee thinks the request is real and sends funds to the criminal’s account.
Why are international businesses vulnerable?
Importers, exporters and other companies involved in global trade often work across time zones and make large wire transfers. An urgent payment request may get less scrutiny, especially when it appears to come from a trusted executive or overseas partner.
Cross-border transactions can also make recovery harder. The FBI advises businesses that lose money to a fake transfer to call their bank right away and report the incident to the Internet Crime Complaint Center.
What should a business do to reduce the risk?
Steps companies can take to reduce their risk include:
- Confirming unusual payment requests through a separate communication channel
- Requiring multiple approvals for large or unexpected wire transfers
- Training employees to question urgent requests for new payment instructions
- Documenting internal approval processes and keeping records of all wire transfer requests
These steps can help a company act quickly without assuming a familiar voice is real.
What legal exposure can a victimized business face?
Federal wire fraud charges can arise when someone uses a wire communication as part of a scheme to defraud. An AI-generated voice call used to direct a fraudulent wire transfer could be part of such a scheme. The business receiving the call, however, is not automatically liable simply because it was deceived.
A business that loses money to an impersonation scam may still face questions about how the payment was approved and whether it followed its own procedures. Prompt reporting, keeping records and explaining the company’s actions can all strengthen a company’s position if federal authorities investigate or review the transaction.