LEGALAUDIT

Scam Radar

How can you recognize Executive deepfake — fake Teams video call with CEO / CFO?

Published

TLDR

Modus operandi identical to Arup / WPP, but targeting French companies (CAC40, mid cap firms): Teams/Zoom video call where the 'CEO' and 'CFO' are real time deepfakes requesting an urgent international wire transfer for a confidential...

How it works

Modus operandi identical to Arup / WPP, but targeting French companies (CAC40, mid cap firms): Teams/Zoom video call where the 'CEO' and 'CFO' are real time deepfakes requesting an urgent international wire transfer for a confidential...

Red flags

  • Urgent pressure to click, pay, or share codes immediately.
  • A link or sender that does not match the official organization.
  • Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What to do

  1. 1Indicators: 1) meeting proposed by an unknown WhatsApp account claiming to be the CEO; 2) participants never interrupt each other; 3) eyes fixed at the center, unnatural gaze; 4) explicit request to bypass the procurement / legal department; 5) IBAN in an unusual jurisdiction.
  2. 2IF VICTIMIZED: SWIFT/SEPA recall within 24 hours, report to ANSSI + cybermalveillance.gouv.fr + file a police complaint.

Source

ANSSI-France

Source reviewed by Mythos Forensic Team

https://www.ssi.gouv.fr/

FAQ

Is Executive deepfake — fake Teams video call with CEO / CFO a real scam pattern?

Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.

What are the first warning signs?

Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What should I do first?

Indicators: 1) meeting proposed by an unknown WhatsApp account claiming to be the CEO; 2) participants never interrupt each other; 3) eyes fixed at the center, unnatural gaze; 4) explicit request to bypass the procurement / legal department; 5) IBAN in an unusual jurisdiction.; IF VICTIMIZED: SWIFT/SEPA recall within 24 hours, report to ANSSI + cybermalveillance.gouv.fr + file a police complaint.

Can LegalAudit check my case?

Yes. Start a free chat and paste the message, link, sender, or payment details for triage.