Deepfake Video Call Scam: How It Works, Warning Signs & What To Do

AI-generated fake video and audio used to impersonate executives or colleagues in video meetings.

Deepfake video call scams use artificial intelligence to create fake video and audio of executives, colleagues, or trusted individuals to trick victims into transferring money or revealing sensitive information. Scammers find public videos and audio—from YouTube, company websites, conferences, or social media—and use deepfake technology to generate convincing imposters. In documented cases, criminals have created entire fake video conferences with multiple participants who looked and sounded like the victim's real colleagues. The fake participants may be pre-recorded with no real interaction, or in some cases, generated in real-time. The FBI and security experts warn this threat is growing as deepfake tools become more accessible and convincing.

How It Works

  1. 1Scammers research target organization and identify key executives or CFO
  2. 2Collect public videos and audio from YouTube, conferences, or social media
  3. 3Use AI/deepfake software to generate fake video and audio
  4. 4Send phishing email purporting to be from executive mentioning confidential matter
  5. 5Invite victim to video conference to discuss urgent transaction
  6. 6Victim joins call and sees/hears what appears to be their boss and colleagues
  7. 7Fake participants (who may be pre-recorded) give instructions for wire transfers
  8. 8End meeting quickly to prevent victim from asking questions
  9. 9Victim executes transfers before realizing it was fake

Warning Signs (Red Flags)

  • Unexpected video call about urgent confidential financial matter
  • Participants end meeting abruptly without allowing questions
  • Video or audio quality is inconsistent or laggy
  • Participants' movements seem unnatural or robotic
  • Lighting or background looks artificial or doesn't match
  • Request bypasses normal approval processes or checks
  • No follow-up email or documented authorization
  • Unable to reach participants at their known direct numbers afterward

What To Do If Targeted

  • If you suspect a deepfake, end the call and verify independently
  • Call the person back at their known direct number from your contacts
  • Ask questions only the real person would know
  • Require written authorization through official channels for financial transactions
  • Implement multi-person approval requirements for large transfers
  • Report to your IT security team and management immediately
  • If funds were transferred, contact your bank to attempt reversal
  • Report to FBI IC3 at https://www.ic3.gov

Real Cases

Arup Hong Kong Deepfake Video Conference

Alleged
📅 January 2024💰 HK$200 million (approximately US$25.6 million)

A finance worker at engineering firm Arup in Hong Kong was tricked into transferring HK$200 million (~US$25.6 million) after joining a video conference where everyone except the victim was a deepfake impersonation. Per Hong Kong police, the worker initially suspected phishing when receiving a message from the company's UK-based CFO about a confidential transaction. However, doubts faded when the worker joined a video call with the CFO and other colleagues who 'looked and sounded just like' people they knew. Police said scammers found public video and audio online, including from YouTube, and used deepfake technology to create the fake participants. The meeting was pre-recorded with no real interaction. Arup confirmed 'fake voices and images were used.' No arrests had been announced as of June 2024.

View Official Source

Frequently Asked Questions

How can I tell if someone on a video call is a deepfake?

Look for inconsistencies in lighting, shadows, or reflections. Watch for unnatural movements, especially around the mouth and eyes. Listen for audio that doesn't match lip movements or has robotic quality. Check if the person blinks naturally—deepfakes often have issues with blinking. Test with spontaneous questions that require specific knowledge or recent context. When in doubt, hang up and call back using a verified number.

How long does it take to create a convincing deepfake?

According to Arup's CIO, creating a real-time deepfake took about 45 minutes with open-source software. The quality improves significantly with more source material and time. Professional-grade deepfakes used in fraud can be extremely convincing. The technology is advancing rapidly and becoming more accessible. Don't assume someone is real just because the video quality seems good.

What organizational policies prevent deepfake video call scams?

Implement multi-person approval for large financial transactions. Require written authorization through official channels, not just verbal instructions. Establish verification procedures: call back using known phone numbers before executing high-value requests. Train employees to ask questions only the real person would know. Use code words or authentication phrases for sensitive requests. Never bypass normal approval processes, even if asked by someone who appears to be a senior executive.

See a Scam? Report It

Report suspected scams to law enforcement to help protect others and aid investigations.

Report a ScamFBI IC3FTC ReportFraud