Omnicron
Threat Library

Deepfake Scams

High

Scams

Also known as: AI voice cloning, Synthetic media fraud

AI-generated voice or video used to impersonate executives and authorise fraudulent actions.

What it is

Deepfake scams use artificial intelligence to clone a person’s voice or likeness, creating convincing fake audio or video. Attackers use this to impersonate executives, colleagues or family members, adding powerful credibility to social engineering, for example a "video call" or "voicemail" from the CEO authorising an urgent transfer.

How it works

  1. 1

    The attacker gathers samples of a target’s voice or face from public videos, webinars, social media or voicemail.

  2. 2

    AI tools generate a realistic clone of that voice or appearance.

  3. 3

    The fake is used in a call, voicemail or video meeting impersonating a trusted person.

  4. 4

    The impersonator applies urgency and authority to request a payment, credentials, or sensitive data.

  5. 5

    Staff, trusting what they see and hear, comply before verifying.

Warning signs

  • Unusual urgency or secrecy in a voice or video request
  • Requests that bypass normal processes "just this once"
  • Slightly unnatural speech rhythm, audio glitches, or mismatched lip movement
  • A request to keep the matter confidential or to act before verifying

Business impact

  • Large fraudulent transfers authorised on fake instructions
  • Disclosure of confidential information to impersonators
  • Erosion of trust in normal voice and video communication
  • Reputational harm if executives are convincingly impersonated

How to defend against it

Verify through a second channel

Confirm any unusual or urgent request via a known phone number or in person, never trust voice or video alone.

Agree a verification word

Use an agreed code word or call-back procedure for high-value or sensitive requests.

Enforce payment controls

Dual approval and mandatory verification for payment or detail changes remove the "one person can be tricked" risk.

Educate leaders and finance teams

These roles are the prime targets. Make sure they know deepfakes exist and how to respond.

Measure your defences

Use these free Cyber Toolkit tools to check how exposed you are and close the gaps this threat exploits.

Ready to strengthen your protection?

Book a free security check and we'll show you where your business stands clear next steps, no jargon, no obligation.

If you are unable to reach us by phone, please email and a member of our team will respond promptly.

Or explore our free security tools — 30+ scanners, checkers and assessments, free with an account.