AI scam targeted companies with calls from their own bosses who never called

• Calls from their own bosses and AI deepfakes drain millions from global corporate accounts.

• Federal prosecutors in New York charge three international operators after a massive artificial intelligence fraud scheme steals $129M.

• Hospital systems, banks and multinational corporations fall victim to a complex voice impersonation ring operating across multiple countries.

Three international operators face formal charges in New York federal court after leading a wire fraud and aggravated identity theft conspiracy that stole approximately $129M from global entities through a deceptive calling ring impersonating senior executives; consequently, federal prosecutors revealed last Thursday that the sophisticated AI scam targeted companies over an 18 month period, hitting vulnerable businesses across diverse industries according to the official indictment processed by the Department of Justice.

Additionally, court documents identify the defendants as 41 year old Jacob Soall, 54 year old Sharon Hazan, and 42 year old Guy Sheetrit, whose online handles included the aliases Rocky Balboa, Superman Cash, and Fat Boy while operating from Spain, the UK, Israel, and the United Arab Emirates; moreover, Federal Bureau of Investigation agents executed the arrests between June and September while prosecutors pursue money laundering charges against this transcontinental ring, noting that defense attorneys for Soall and Sheetrit did not respond to emails seeking comment, Hazan’s legal representation remained unclear, and the U.S. Attorney’s Office for the Southern District of New York did not return a voicemail from The Associated Press.

Furthermore, corporate victims of this calling ring included hospital systems in Missouri and California, a bank in Rhode Island, a financial technology firm in the UK, an investment management firm in Massachusetts, and a pet food company in Florida; on the other hand, judicial filings show Hazan has a prior criminal record after a 2008 conviction in a New York court for conspiracy to commit bank fraud.

Criminal operations relying on calls from their own bosses

The criminal ring targeted corporate accounting departments through advanced social engineering tactics and voice cloning techniques:

• Initial email contact: Fraudulent emails pretended to come from chief executives demanding urgent and confidential financial wire transactions.

• Coordinating calls from their own bosses: Operators arranged phone calls and video meetings using artificial intelligence to clone voices and images.

• Legal counsel impersonation: Scammers instructed employees to contact fake lawyers supposedly representing prominent international law firms.

• Detailed handwritten scripts: Jacob Soall relied on a script titled Lawyer Call to sound like an authentic attorney while defrauding targets.

• Wire transfers and cryptocurrency conversion: Victims transferred millions that were converted into digital assets to hide illicit origins before splitting funds.

• FBI official institutional statement: Federal leadership reaffirmed their commitment to stopping cybercriminals targeting local communities and businesses.

Aditionally, FBI Assistant Director in Charge James C. Barnacle Jr. stated through the official Federal Bureau of Investigation portal that the complex scheme demonstrates how rapidly advanced technology evolves into large scale fraud when victims receive fraudulent calls from their own bosses; indeed, federal authorities continuously adapt technical capabilities to counter these emerging threats and safeguard regional enterprises. Besides that, the absence of public statements from defense counsel leaves unresolved questions as judicial proceedings move forward.

Legal consequences and corporate defense measures

Federal courts establish severe criminal penalties for individuals involved in cross border technological crimes:

• Wire fraud charges: Each specific count carries a maximum statutory penalty of 20 years in prison.

• Aggravated identity theft penalties: The mandatory enhancement added by federal prosecutors imposes an additional mandatory 2 year sentence.

• Key sector vulnerabilities: Healthcare networks and financial institutions face unprecedented operational and financial cybersecurity risks.

• International law enforcement coordination: Federal agencies track global financial transactions by cross referencing banking data across borders.

• Corporate prevention strategies: Cybersecurity experts recommend verifying wire requests through alternative out of band communication channels.

• Widespread financial impact: The consolidated fraud demonstrates severe vulnerabilities associated with modern digital corporate impersonation.

Corporate entities often fall prey to fraudulent calls from their own bosses when protocols lack mandatory multi-person authorization checks; consequently, security firms urge executive boards to implement strict out-of-band identity verification before completing any high-value transfers.

Meanwhile, prosecutors maintain strict financial oversight on the defendants’ accounts to locate and recover stolen funds; precisely, international organizations are strengthening internal verification protocols to prevent future $129M security breaches caused by this sophisticated AI scam.