Would you recognize your CEO's voice on a phone call?

What if the voice sounded exactly right—but the person on the other end wasn't actually your CEO?

Artificial intelligence has made it easier for criminals to create convincing fake audio, video, and images, commonly known as deepfakes.

These tools can be used to impersonate executives, employees, vendors, or business partners and persuade people to transfer money or disclose sensitive information.

What Should Raise a Red Flag?

Pay attention when a call or video meeting includes:

• An urgent request to transfer funds or share confidential information.

• Pressure to bypass normal approval procedures.

• Instructions to keep the conversation secret.

• An unusual request that doesn't fit the person's normal responsibilities.

• A request that feels out of character, even if the voice or video appears authentic.

Visual or audio irregularities may sometimes provide clues, but sophisticated deepfakes can be difficult to identify.

Don't rely on appearance or voice alone to establish someone's identity.

Three Practical Safeguards

1. Verify sensitive requests. Use a separate, trusted communication channel to confirm unusual instructions.

2. Establish verification procedures. Businesses should consider documented approval requirements, callback procedures, and other safeguards for financial transactions.

3. Follow internal security protocols. If your company uses verification phrases, designated contacts, or additional approval requirements, make sure you understand how to use them.

Concierge Insight

Technology can make impersonation more convincing, but your verification procedures should remain consistent.

Whether a request arrives by email, phone, or video conference, verify before taking action.