What Happened
Prosecutors in the Southern District of New York charged three people in an AI impersonation scheme tied to $129 million in thefts, SecurityWeek reports. Jacob Soall, Sharon Hazan, and Guy Sheetrit face wire fraud, aggravated identity theft, and money laundering charges. They were arrested between June and September.
The indictment describes a repeatable script. An accounting employee received an email from the supposed CEO asking for help with a confidential transaction. A call or video chat followed, with AI mimicking the CEO’s voice and sometimes image. The employee then spoke to a fake attorney at a major law firm. The lawyer ordered wires to accounts around the world, and the money moved into cryptocurrency. Victims include hospital systems in Missouri and California, a Rhode Island bank, and a UK fintech company.
Why This Matters for Canadian Organizations
The report names no Canadian victims. The method does not need a Canadian target, because it relies on a lean accounting team and a hurried approval. Canadian hospitals, municipalities, credit unions, and mid-sized firms match this profile. The group hit thousands of companies over a year and a half, so you should assume Canadian staff have seen similar approaches.
The key lesson is trust. A familiar voice on a call no longer proves identity. Controls built on recognizing the boss fail against this attack. Controls built on process hold.
What to Do
Require a callback on a number already on file for any payment request tied to a call or video chat. Set dual approval on wires above a fixed amount. Ban payment instructions from an outside attorney unless the finance lead confirms the engagement through a known channel. Agree on a verbal code word for executives. Tell staff to report the request to security before they refuse, so you spot patterns. If a wire goes out, call your bank within hours to request a recall, then report to the Canadian Anti-Fraud Centre. Read more Trends coverage and our latest news.
