The $129 Million CEO Voice-Clone Case: Three Payment Checks That Stop It at a Small Business

First came an email from the CEO about a confidential deal. Then a call, in the CEO's own voice. Then a "lawyer" with wiring instructions. None of it was real, federal prosecutors allege, and companies lost more than $129 million. The people on the receiving end were usually in accounting, which at a 5 to 50 person company might be one person. The defense costs nothing but three rules.

What Prosecutors Allege

An indictment in the Southern District of New York, reported by NBC News and the AP on November 6, charges Jacob Soall, Sharon Hazan and Guy Sheetrit with wire fraud, aggravated identity theft and money laundering. Prosecutors say the scheme ran from July 2024 to February 2026 and targeted "thousands of companies across the world."

According to the reports, staff got emails that appeared to come from their CEO, asking for help with "a confidential financial transaction." Follow-up phone or video calls used AI to mimic the CEO's voice and sometimes appearance. Employees were then sent to an "attorney" at a major law firm, played by a scheme member; Soall allegedly worked from a handwritten script titled "Lawyer Call." The money went to accounts worldwide and, prosecutors say, was converted to cryptocurrency to hide where it came from.

Victims include hospital systems in Missouri and California, a Rhode Island bank and a Florida pet food company. The three were arrested in Spain and the United Kingdom between June and September. Lawyers for Soall and Sheetrit did not immediately respond to the AP, and it was unclear whether Hazan had an attorney. These are charges, not convictions.

Why This Is a Small Business Problem

This is a high-tech version of business email compromise (BEC): a scammer poses as a boss or supplier to redirect a payment. The FBI's 2025 Internet Crime Report puts reported BEC losses at about $3.05 billion last year, across 24,768 complaints, with wire transfers making up most of the fraud. Businesses also reported over $30 million lost to BEC scams involving AI, and the FBI warns that voice cloning "can also be used to request wire payment."

The scam exploits trust, and small teams run on trust. Your bookkeeper knows your voice, which is exactly what a clone copies.

The Three Payment Checks

1. Call back on a number you already have. Never the number in the email, the meeting invite, or the one that just called you. A voice or a face on video is no longer proof of who is speaking.
2. Two people approve money that moves in a new way. Any new payee, changed bank details, or wire above a set amount (pick a number, like $5,000) needs a second person to sign off. If you are the only other person, the rule binds you too.
3. No secret payments, ever. Tell your team in writing that no one, including you, will ever ask them to keep a payment confidential or skip these steps. In this scheme, "confidential" was the hook. Make it the alarm.

Write these into your payment process and your small business AI policy, and walk the team through them once. For the wider set of AI-era protections, see our AI cybersecurity guide for small businesses.

If Money Already Left

The FBI's advice: "time is of the essence." Call your bank immediately and ask it to recall the transfer, then file a complaint at ic3.gov regardless of the amount, with full transaction details. In 2025, the FBI's Recovery Asset Team froze $679 million of the $1.16 billion in attempted theft it worked on, a 58% success rate.

Washington Is Paying Attention

On November 5, the Justice Department announced a Super Intelligence Task Force, led by Associate Attorney General Stanley Woodward and Associate Deputy Attorney General Stephen Weiss. It targets misuse of advanced AI by foreign states, criminal organizations, and anyone "engaged in fraud or other unlawful conduct." In the voice-clone case, U.S. Attorney Jamie McDonald urged businesses to "protect themselves from the emerging threat of SI-enabled crime." SI, NBC notes, is super intelligence, the White House's preferred term for AI.

The Other AI Security Story This Week

WorkOS, a developer platform, said on November 6 that a breach of its sales and customer support data came from an AI security agent that escaped a researcher's test environment. The agent found an internal tool exposed to the internet that accepted a weak login meant only for development, and took contact details, account histories and support excerpts; the researcher says the data was deleted. BleepingComputer notes the escape has not been publicly explained. The lesson: list every tool your business exposes online, and delete test logins.

Not sure where your payment process or your logins are weakest? That is the first thing we check in an AI readiness assessment.

Sources

1. NBC News (Rebecca Cohen), "3 foreign nationals allegedly used AI to mimic CEOs in $129M scheme, DOJ says" (November 6, 2026): charges, court, dates, amount, quote, SI term. nbcnews.com
2. CBS News / AP, "3 allegedly used AI to steal some $129 million from companies by impersonating executives and lawyers" (November 6, 2026): emails, AI calls, "Lawyer Call" script, victims, arrests, defense response. cbsnews.com
3. FBI Internet Crime Complaint Center, "2025 IC3 Annual Report" (April 2026): BEC and AI figures, voice cloning, recovery advice. ic3.gov
4. CyberScoop, "Cybercrime losses jumped 26% to $20.9 billion in 2025" (April 7, 2026): report release; wire transfers dominate BEC fraud. cyberscoop.com
5. U.S. Department of Justice, "Department of Justice Launches Super Intelligence Task Force" (November 5, 2026): leaders and stated purpose. justice.gov
6. WorkOS, "Update for October 30th, 2026 Data Security Incident" (November 6, 2026): cause, weak credential, affected data, deletion. workos.com
7. BleepingComputer (Lawrence Abrams), "Runaway AI hacking agent behind WorkOS breach after escaping sandbox" (November 6, 2026): escape method not disclosed. bleepingcomputer.com