CEO Impersonation Scam: Could a Fake CEO Call Get Your Team to Wire Millions?
Prosecutors say the scheme took more than $129 million in total, including $4,829,580 from a hospital system headquartered in Missouri and $2,968,497 from a hospital system headquartered in California. Neither organization was named. Source: SDNY press release 26-317, Nov. 5, 2026 (allegations).
Yes, and federal prosecutors say it already happened at two hospital systems. In a case announced on Nov. 5, 2026, they allege a group copied CEOs' voices and images, then talked employees into wiring money as part of a scheme that took more than $129 million in total (SDNY press release).
The good news: a few boring habits go a long way. Boring is great when it comes to wires.
You can watch the short version here: Watch the Short on YouTube
The video uses a digital avatar of Erick Grau, CEO of Chibitek.
Why Does This Case Matter to Your Business?
It matters because the target was not a computer. It was a helpful employee. Prosecutors say the group used AI to sound like, and sometimes look like, real executives. If it can work on a hospital system's finance team, it can work on yours. Size and industry did not seem to matter.
According to the release, between 2024 and 2026 the group impersonated "the voices and/or images" of executives at many companies, plus attorneys at major law firms (SDNY press release). Prosecutors listed six examples of what was taken:
$11,578,474 from a financial technology company in the United Kingdom
$5,242,747 from a pet food company in Florida
$4,829,580 from a hospital system in Missouri
$4,639,918 from a mutual fund company in Massachusetts
$2,968,497 from a hospital system in California
$2,684,580 from a bank in Rhode Island
All six figures come from the SDNY press release. They are examples only. The release puts the total at more than $129 million.
Six examples listed by prosecutors, with the two hospital systems highlighted. Examples only; the release says more than $129 million in total. Source: SDNY press release 26-317, Nov. 5, 2026 (allegations).
Think of it like a stranger at your front door wearing your neighbor's face. You would still want to call your neighbor before handing over the house keys.
How Did the Fake CEO Scam Work?
Prosecutors describe three steps. First, a fake CEO asked an employee for help with a confidential deal. Next, the fake CEO handed the employee off to a fake lawyer at a big law firm. Finally, that fake lawyer gave wiring instructions to an account the group controlled. Two fake voices, one very real wire.
Here is the play, in plain words, as the release describes it (SDNY press release):
The fake CEO calls. The caller says they need help with a confidential financial transaction. AI mimics the CEO's voice and/or image.
The fake lawyer joins. The "CEO" tells the employee to contact lawyers at large international law firms. The group impersonates those lawyers too, so the deal feels real.
The money moves. The "lawyer" tells the employee to wire a large sum to a bank account the group controls. Prosecutors say the money was then converted into cryptocurrency to hide where it went.
One detail stuck with me. Prosecutors say one defendant kept a handwritten script titled "Lawyer Call," with language meant to keep employees from discussing the calls with their coworkers. That is the whole trick. Get one person alone, make it secret, make it urgent.
How prosecutors say it worked, including the "Lawyer Call" script note. Source: SDNY press release 26-317, Nov. 5, 2026 (allegations).
What Should You Do Right Now?
Chibitek guidance: put three checks in front of every wire. Call back on a number you already have. Require two approvers over a set amount, with one who was not on the call. Treat secret plus urgent as the red flag. None of this needs new software, just a rule everyone follows.
These are Chibitek's recommendations, not a claim about what the hospital systems in this case did or did not do.
Call back on a number you already have. Not the number in the email, text or meeting invite. Even if you can see their face on the screen. A face is not proof anymore.
Two people approve every wire over a set amount. And one of them was not on that call. A scammer can work on one person. Working on two people who never talked to them is much harder.
Secret plus urgent is the red flag. "Don't tell anyone" plus "it has to go out today" should make your team slow down, not speed up. Write that into your payment policy so nobody has to feel awkward about it.
Train your staff, again. Training is now more important than ever. Phishing is still a thing, but it is far more complex, and AI bots don't sleep.
Chibitek guidance. Not a claim about what these hospital systems did or did not do.
What Happens Next in the Case?
Three people were arrested overseas in 2026, and extradition requests are pending, according to prosecutors. They face charges that include wire fraud, aggravated identity theft and money laundering. These are charges, not convictions. The release says the charges are merely accusations and the defendants are presumed innocent until proven guilty.
Source: SDNY press release 26-317. The release also asks anyone who thinks they may be a victim of this conduct to use the FBI tips page at https://tips.fbi.gov.
Key Points of the CEO Impersonation Scam Case
Prosecutors allege AI-copied voices and images of CEOs and lawyers were used to trick employees into wiring money.
The release says more than $129 million was taken in total.
Two examples were hospital systems: $4,829,580 (Missouri) and $2,968,497 (California).
The pattern was a confidential deal, a fake lawyer, then a wire.
Chibitek guidance: call back on a known number, use two approvers, and treat secret plus urgent as the red flag.
Frequently Asked Questions
What is a CEO impersonation scam?
It is when a criminal pretends to be your boss to get you to send money or data. In this case, prosecutors say AI copied the CEO's voice and/or image on calls (SDNY press release).
Can I trust a video call if I can see my boss's face?
Not on its own. The release says the group mimicked "the voices and/or images" of executives. Chibitek guidance: hang up and call back on a number you already have.
Which hospital systems were hit?
The release does not name them. It says one is headquartered in Missouri and one in California (SDNY press release).
Have the people charged been convicted?
No. The release says the charges are merely accusations and the defendants are presumed innocent unless and until proven guilty.
Is this only a problem for big companies?
No. The six examples include a bank, a pet food company and a mutual fund company. Any business that sends wires has something worth stealing.
What is the single best habit to start today?
Chibitek guidance: no wire goes out until someone calls back on a number already on file. It only takes a moment, and it is built to break exactly this kind of play.
Let's Make Your Wires Boring Again
At Chibitek, we help businesses build payment checks, train their teams and spot AI-powered scams, with no geek-speak. Don't let one convincing call become a seven-figure wire. Contact us at hello@chibitek.com to learn how we can help you set up callback rules, two-person approvals and staff training your team will actually use.
Further reading: the full SDNY press release, and our earlier video, Is That Really Your Boss on the Call? Deepfake Payment Scams.
You can watch the short version here: Watch the Short on YouTube
We make IT effortless so you can create, disrupt, and grow!
Comments