Deepfake and voice-clone fraud against executives: how to stop it
A call that sounds exactly like your CEO. A video meeting where the finance director looks and speaks like herself. A voice note from the founder asking for an urgent favor. Companies of every size receive these, and the people who fall for them are careful, capable professionals.
This kind of fraud can be stopped. A few firm habits inside the company close the door on most attempts, and the fakes themselves can be found and taken down. Here is how it works and what to put in place.
How executive impersonation fraud works
The fraudster needs only what is already public: interviews, conference talks, podcasts, videos on the company's channels. From that material they build a fake voice or a fake face, then contact someone who can move money or share sensitive information.
The contact rarely comes alone. It is often prepared with a fake profile of the executive on LinkedIn or WhatsApp, an email from a lookalike domain or a message that sets up the call. By the time the voice speaks, the target already expects it.
The warning signs
The technology changes, the pressure does not. Almost every attempt leans on the same few levers, and teams who know them pause at the right moment.
- Urgency: the payment or the file is needed now, before a deadline, a closing or a meeting.
- Secrecy: the request is confidential, and the usual colleagues must not be told.
- An unusual channel: a personal number, a messaging app or a meeting link the executive never uses.
- Skipping the process: the request asks to bypass the normal approval just this once.
- Pressure on the person: flattery, trust or an implied threat to their job if they hesitate.
Beyond payments: fake statements and fake videos
Not every deepfake of an executive asks for money. Fake videos and audio can put words in a leader's mouth: a statement about results, an offensive remark, a fake endorsement of an investment scheme. Published on social media, they reach investors, employees and customers before anyone checks.
These fakes break the rules of the major platforms when they mislead people, and most can be reported as impersonation, fraud or a misuse of the person's image and voice. The faster the company knows they exist, the less they spread.
When a fake is circulating, say so. A short, calm note to staff, partners and customers that names the official channels and says the recording is not genuine takes away most of its power, and shows people where to check next time.
Who is at risk inside the company
The executive whose voice is cloned is the face of the fraud, but the target is usually someone else: finance, assistants, payroll, IT support, new hires who don't yet know how leaders communicate. Protection works when those people know the habits and feel free to use them.
Make it explicit from the top: nobody is ever criticized for checking a request, even one that turns out to be real. A leader who says this openly removes the fear the fraudster relies on.
What you can do right now
- 01
Call back on a known number
Any unusual request for money or data is confirmed by calling the person back on the number already on file, never the one in the message.
- 02
Two people approve every payment
Payments above the usual routine need a second person's approval, and no call, voice note or video can skip that step.
- 03
Agree on a code word
Leaders and the people who act on their instructions share a word that a real request would include. A caller who can't give it is stopped.
- 04
Set the official channels
Write down which channels executives use for instructions, and treat anything from another channel as unconfirmed.
- 05
Keep the evidence
Save the recording, the message, the number or account and a screenshot with the date. Don't reply or delete it.
- 06
Money involved? Tell us straight away
If a payment was requested or made, every minute counts. If money was sent, contact the bank straight away to ask for the transfer to be stopped or recalled. We take it on: report it to us and we act immediately.
How Praivon helps
- We search for fake profiles, deepfake videos and cloned audio of your executives across the major platforms plus thousands of websites across the open web.
- You get an alert with the evidence as soon as we find one.
- We send removal requests on every channel: the platform, the hosting provider, the domain registrar and search engines.
- We report lookalike domains and fake accounts that prepare the ground for the call.
- We follow up and escalate until it's resolved.
- Every request is sent on your behalf, under the authorization you give us.
Straight answers.
What is deepfake CEO fraud?
A scam in which someone uses a fake voice or video of an executive to make an employee send money or share sensitive information. It usually relies on urgency and secrecy.
How can a company protect itself from voice-clone scams?
With firm habits: call back on a known number, two people approving every payment, a shared code word and set official channels. Then make sure fakes of your executives are found and taken down early.
Can a deepfake of our CEO be removed?
Yes. Platforms, hosting providers and search engines can all be asked to remove it or stop showing it. We use every channel and stay on each copy until it's resolved.
Can you protect several executives at once?
Yes, on the Custom plan, built for agencies, teams and public figures, with a dedicated case manager and access for your team.
What should we do if money has already been sent?
Act at once and keep every piece of evidence. If money was sent, contact the bank straight away to ask for the transfer to be stopped or recalled. We take it on: report it to us and we act immediately.