The Securities and Exchange Board of India has issued a formal warning regarding a rise in sophisticated financial scams that utilize artificial intelligence to impersonate company executives. Fraudsters are increasingly using deepfake technology to mimic the voices and appearances of high-ranking officials, such as CEOs and CFOs, to manipulate employees into authorizing unauthorized fund transfers or disclosing sensitive corporate data. This trend marks a significant shift in how cybercriminals are exploiting emerging technologies to bypass traditional security protocols.
These scams typically involve attackers gaining access to internal communication channels or using AI-generated audio during video calls to create a sense of urgency. By posing as leadership, perpetrators pressure staff members to bypass standard financial verification procedures, often citing confidential mergers or urgent regulatory requirements. The goal is to trick unsuspecting employees into moving large sums of money into fraudulent accounts before the deception is discovered.
Corporate entities are particularly vulnerable because these attacks rely on social engineering rather than technical hacking of infrastructure. When an employee believes they are speaking directly to their superior, they are less likely to question the legitimacy of a request. This psychological manipulation is the core of the threat, making it difficult for standard software-based firewalls to detect or prevent the breach.
SEBI has urged companies to strengthen their internal governance and verification processes. The regulator recommends that organizations implement multi-factor authentication for all financial transactions and establish clear, non-negotiable protocols for verifying requests that come through digital channels. Employees are encouraged to remain vigilant and report any suspicious communication that deviates from established corporate procedures.
Moving forward, the regulator is expected to monitor these developments closely to determine if additional policy mandates are required. As AI tools become more accessible, the burden of security is shifting toward human awareness and rigorous internal checks. Companies that fail to adapt their training programs to address these new digital risks may find themselves increasingly exposed to significant financial and reputational damage.