A cloned voice moved €95 million out of an Italian private bank

Reuters reported that a fake message from Intesa Sanpaolo’s CEO and a cloned lawyer’s voice led to transfers of about €95 million. About €36 million went into crypto and has not been traced.

In February the chair of Fideuram, Intesa Sanpaolo’s private-banking arm, received a WhatsApp message that appeared to come from Intesa’s chief executive, Reuters reported on September 26. A phone call followed from what sounded like a senior partner at a law firm. “AI technology was used to replicate the lawyer’s voice, making the call appear genuine,” Reuters wrote.

Transfers of about €95 million, or $108 million, followed, mainly to accounts in China and Hong Kong. About €53 million has been recovered. About €36 million was converted to crypto and remains untraced. Milan prosecutors are investigating, and Intesa and Fideuram declined to comment.

The scheme worked at the top of a large, well-controlled institution. It relied on authority and urgency, and on a voice the target had reason to trust.

What this means for your bank
  • Require call-back verification on a known number for any executive-initiated wire, with no exception for senior staff.
  • Train executives and wire-room staff on cloned-voice requests that arrive through messaging apps.
Sources

This is for information only and is not legal advice. Verify the details against the linked reporting before acting.