FBI Warns of Surge in Deepfake-Enabled Business Email Compromise Attacks

The FBI's Internet Crime Complaint Center (IC3) has issued an urgent advisory warning businesses about a dramatic increase in Business Email Compromise (BEC) attacks that leverage real-time deepfake audio and video technology to impersonate C-suite executives during video conference calls.

Since October 2025, the FBI has documented over 150 cases where deepfake technology was used to successfully authorize fraudulent wire transfers, with total losses exceeding $680 million. In the most significant case, a multinational corporation lost $47 million after a deepfaked CFO authorized transfers during what appeared to be a routine video conference call.

The deepfake technology used in these attacks has reached a level of sophistication where real-time video manipulation is indistinguishable from genuine footage, even to colleagues who know the impersonated individual well. Audio cloning requires as little as 15 seconds of sample audio.

The FBI recommends implementing multi-person authorization for all wire transfers above a threshold amount, establishing out-of-band verification procedures for financial transactions, and training employees to recognize potential deepfake indicators such as slight audio-visual synchronization issues.

Several cybersecurity companies have begun offering deepfake detection tools specifically designed for video conferencing platforms. Microsoft has announced plans to integrate deepfake detection capabilities into Teams in a forthcoming update.