Scam Radar

How can you recognize CEO Voice Clone — Fake Boss Instructs Transfer via Voice Note?

Published

TLDR

Attackers clone the CEO's voice using YouTube/webinar material and send the CFO a WhatsApp voice message: 'Please transfer 350,000 EUR immediately to the following IBAN, acquisition is underway, NDA'. Very widespread since 2024 in...

How it works

Attackers clone the CEO's voice using YouTube/webinar material and send the CFO a WhatsApp voice message: 'Please transfer 350,000 EUR immediately to the following IBAN, acquisition is underway, NDA'. Very widespread since 2024 in...

Red flags

  • Urgent pressure to click, pay, or share codes immediately.
  • A link or sender that does not match the official organization.
  • Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What to do

  1. 1Indicators: 1) Voice message instead of call (prevents real time verification); 2) Unknown WhatsApp number; 3) Unknown IBAN, often Eastern Europe/Turkey; 4) Demand for confidentiality; 5) Voice sounds correct, but breathing pauses are missing, intonation on numbers is mechanical.

Source

BSI-Bundesamt

Source reviewed by Mythos Forensic Team

https://www.bsi.bund.de/

FAQ

Is CEO Voice Clone — Fake Boss Instructs Transfer via Voice Note a real scam pattern?

Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.

What are the first warning signs?

Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What should I do first?

Indicators: 1) Voice message instead of call (prevents real time verification); 2) Unknown WhatsApp number; 3) Unknown IBAN, often Eastern Europe/Turkey; 4) Demand for confidentiality; 5) Voice sounds correct, but breathing pauses are missing, intonation on numbers is mechanical.

Can LegalAudit check my case?

Yes. Start a free chat and paste the message, link, sender, or payment details for triage.