Trio Charged in $129M AI Voice-Cloning Scam
Three suspects allegedly used AI voice and video impersonation to steal more than $129 million from companies worldwide.
Updated on Nov. 7, 2026 in Financial Crime
Live Poll
Do you trust that you could spot a voice-cloned call from your boss?
Three suspects used AI voice-cloning software and deepfake video to impersonate corporate executives and attorneys, stealing over $129 million from companies. Investigators in Spain and the UK arrested each suspect earlier this year, and the Justice Department has sought their extradition to the US.
Why it matters
The case shows how generative AI can be used to defeat trust-based controls in corporate payments, exposing organizations of all sizes to losses from realistic impersonation. It also highlights the difficulty of tracing funds laundered through cryptocurrency across borders.
The three suspects, aged 41, 54 and 42, face charges including aggravated identity theft, wire fraud and money laundering, with a maximum sentence of 104 years if convicted on all counts. The Justice Department has filed for their extradition to the US, and the 15-page indictment was unsealed on November 5, 2026.
The players
U.S. Department of Justice
The federal department responsible for prosecuting federal crimes, which announced the charges and sought extradition of the suspects.
The details
The scheme began in 2024 and targeted employees with emails sent through an electronic signature service such as DocuSign, appearing to come from a company's CEO. Fake attorneys urged the employees to sign a nondisclosure agreement and keep the transaction secret from colleagues, while AI tools mimicked the executive's voice and appearance on video calls. The stolen money was converted into cryptocurrency to launder it.
Timeline
2024: The trio began using voice-cloning technology to impersonate executives.
Earlier in 2026: Investigators in Spain and the UK arrested each suspect.
November 5, 2026: The Justice Department announced the case and unsealed the indictment.
Legal Context
The case extends a long-running pattern of business email compromise schemes that the FBI has repeatedly flagged, now upgraded with generative AI that can convincingly mimic a leader's voice and face. Prosecutors are relying on established federal statutes such as wire fraud and aggravated identity theft, which were not written with synthetic media in mind.
Organizations can reduce exposure by requiring out-of-band verification, such as a callback to a known number, before approving unusual payment requests, even when they appear to come from a senior executive. Employees who receive urgent requests for secrecy about a transaction should treat that secrecy itself as a warning sign.
The takeaway
Any request to move money quickly and keep it secret deserves a verification step through a separate channel, however convincing the voice or video appears. Familiar faces and voices can now be faked, so process checks matter more than recognition.
Further reading
For more on how fraudsters exploit trust in financial systems, see Financial Crime.
Live Poll
Do you trust that you could spot a voice-cloned call from your boss?
