AI Voice Cloning Scam Targets Italian Bank Executive for €95 Million Fraud

The Incident

Fideuram, a private bank owned by Italy's Intesa Sanpaolo group, fell victim to an AI voice cloning fraud. An executive at the bank received a WhatsApp message followed by a phone call that appeared to be from a trusted superior. Believing the instructions to be legitimate, the victim authorized multiple wire transfers totaling €95 million.

How the Scam Worked

Stage One: The Initial Message

The victim received what appeared to be an ordinary WhatsApp message from a colleague. Nothing in the message itself raised any red flags or suggested deception.

Stage Two: The Voice Call with Instructions

Shortly afterward, a phone call arrived from what seemed to be a superior or trusted business contact. The caller's voice possessed several convincing characteristics:

• The tone and vocal qualities matched the supposed caller
• Professional vocabulary and phrasing aligned with workplace norms
• Specific instructions were coherent with the victim's professional context

These elements eliminated any doubt in the victim's mind, leading him to follow the instructions without question.

Stage Three: Multiple Transfers

Following the caller's directions, the victim authorized a series of wire transfers. Each transaction followed a natural progression, which prevented immediate detection. The total amount eventually reached the staggering sum of €95 million.

The Technology: AI Voice Cloning

At the heart of this fraud lies AI-powered voice cloning technology. This technology operates as follows:

How It Works

• Specialized software analyzes existing voice samples (ranging from seconds to minutes) to extract the unique vocal characteristics of an individual
• The software learns and replicates the target person's speech patterns, intonation, accent, and linguistic quirks
• A convincing cloned voice can be generated in minutes

Sources of Voice Samples

• Public YouTube videos and online content
• Business presentations and conference recordings
• Voicemail and voice message systems
• Official company videos and announcements

Most of this material is already publicly available or easily obtainable.

Why the Fraud Succeeded

Exploitation of Trust

• Rather than simply lying, the scammers bypassed the victim's psychological defenses by replicating a voice the victim instinctively trusted
• This was not crude deception but a sophisticated fraud carefully crafted to fit a professional context

Timing and Dispersion

• The delay between the initial transfers and fraud detection provided a window for funds to be distributed across multiple channels
• This dispersal made tracking far more difficult

Detection and Unrecovered Losses

Once the bank detected the fraud and acted quickly, some funds were frozen or recovered. However, of the €95 million total, €36 million remains unaccounted for.

The missing funds were transferred across international borders, prompting Italian authorities to launch a cross-border investigation. Once money leaves the standard banking system, tracing becomes exponentially more difficult, making full recovery unlikely.

Warning Signs and How to Recognize It

Verification Is Essential, Even for Trusted Contacts

• Never authorize significant transactions based solely on a phone call, regardless of caller ID or voice recognition
• Always independently verify such requests using a separately obtained contact method (direct visit, phone number from your records, etc.)
• For large sums, this verification step is non-negotiable

Limitations of Voice Recognition

• An entirely natural-sounding voice provides no guarantee of authenticity (this is the core danger)
• Evaluate the content of the request: Would this person typically issue instructions this way?

Unusual Procedures

• Wire transfer requests via unconventional channels
• Instructions sent during unusual times (night hours, claimed emergencies)
• Emphasis on secrecy, urgency, or confidentiality

Prevention and Protection Measures

For Individuals

• Never act on financial instructions received by phone alone
• Always independently call back using a number you have previously verified
• Consider whether additional authentication methods are warranted

For Financial Institutions

• Implement multiple independent authentication methods for large transfers
• Avoid relying solely on voice recognition for identity verification
• Conduct regular staff training and awareness programs
• Develop internal controls that require separate authorization channels

What This Case Reveals

This €95 million fraud is not confined to the wealthy or banking executives. AI voice cloning technology can also be used to drain personal bank accounts in minutes. In France, for example, a senior citizen lost €25,000 in savings to a deepfake video impersonating President Macron. The technology poses a risk to everyone.

The Critical Lesson: A voice you recognize is no longer a reliable indicator of identity. Financial instructions—regardless of their apparent source—demand the most careful verification possible.