AI Voice Cloning Scams: How to Stop a Fake "Boss" Payment Call (UK Small Business Guide)

It is twenty to five on a Friday. Your bookkeeper's mobile rings, and it is you: same voice, same way of saying her name. You are stuck in a meeting, a deal will fall through unless a deposit goes today, and the details are coming by WhatsApp. Please keep it quiet for now. She has paid suppliers for you a hundred times. Why would she doubt your voice?

Because voices can now be copied. Report Fraud, the national fraud reporting service for England, Wales and Northern Ireland, warns that fraudsters "use AI to generate fake audio clips" of someone you know or trust, pretend to be in an urgent situation and ask for a payment. AI voice cloning scams turn the old CEO fraud email into a phone call that sounds like someone you trust. You will not reliably beat them by listening harder. You beat them with three dull rules that do not care how convincing the voice is: call back on a number you already have, ask for a code word agreed in advance, and never let one person move money alone. This guide explains why each one works, where it breaks, and what UK rules say if money has already gone.

What happened at Fideuram

On 25 September 2026, Reuters reported, citing two sources, that fraudsters using AI to impersonate senior executives took €95 million from Fideuram, the private banking arm of Intesa Sanpaolo. In February, the bank's then chairman received what appeared to be a WhatsApp message from Intesa's chief executive asking for urgent help with an overseas transaction. A phone call followed that appeared to come from a senior partner at a well-known law firm, confirming the instruction. According to Reuters' sources, the callers used AI to replicate the lawyer's voice. The chairman told the finance department to send a series of transfers, mainly to accounts in China and Hong Kong.

Roughly €53 million was later recovered and some €36 million is still missing, the sources said. Intesa Sanpaolo and Fideuram declined to comment. Italy's news agency ANSA, quoting a Milan court order, puts the missing amount at €39.5 million. Two details from that order matter for any business. The first message came from a number different from the one the chairman knew. And on the same day, the head of treasury and payments was contacted by someone posing as Fideuram's chief executive, saying the chairman would call to order "urgent and confidential" transfers. The fraudsters had prepared not only the person giving the order but also the person who would carry it out.

The bank has not described the technique publicly, so "AI-cloned voice" is what sources and court papers report, not something the bank has confirmed. The pattern is still a useful one to learn from: a message from an unfamiliar number, a trusted voice to confirm it, secrecy, urgency and a payment abroad.

How common is this for smaller firms?

Most of these frauds are payment-redirection frauds that may or may not involve AI. The numbers show both the scale and the limits of what is known.

The FBI's 2025 Internet Crime Report says voice cloning "can also be used to request wire payment" but adds that there are multiple BEC tactics and "not all are AI-enabled". The AI-linked BEC figure is around 1% of the BEC total. That may undercount, because victims often cannot tell whether AI was used. The 2024 report gives the $2.77 billion figure for the previous year.

In the UK, UK Finance's Annual Fraud Report 2026 shows CEO fraud is rare, under 1% of authorised push payment (APP) fraud cases, but has the highest average loss of any of the eight APP scam types it tracks. CEO fraud losses fell 53% in 2025, from £11.9 million to £5.6 million, and the number of cases was the lowest UK Finance has ever recorded. APP fraud means you are tricked into sending a bank transfer yourself. UK Finance does not split out cases that used AI voices. The government's Stop! Think Fraud campaign says criminals impersonate senior executives, "sometimes using deepfake audio or video", to push staff into urgent payments.

For a small business the lesson is simple. An average CEO fraud loss of over £28,000 is a serious hit for most small firms, and the checks that stop the AI version also stop the email and text versions.

Why listening harder is not a defence

The FBI's December 2024 warning on generative AI fraud tells people to listen closely to tone and word choice, and its 2025 report says AI-generated content is "becoming increasingly difficult to detect". At Fideuram, according to Reuters' sources, a cloned voice of a partner at a real, well-known law firm was enough to confirm the instruction. Your staff should still report anything that sounds off. But a process that depends on someone spotting a fake voice is one that fails when the fake is good.

The three rules below take the voice out of the decision. They check the request through a channel the caller does not control.

Rule 1: hang up and call back on a number you already have

When a call or message asks for money, a new payee or new bank details, end it and ring the person back on a number you held before the request arrived: the contacts saved on your phone, the staff list, a supplier's number from an earlier contract. Stop! Think Fraud's advice is to confirm both the old and new account details "using a known phone number – not one provided in the message". The FBI gives the same advice for calls that claim to be from a bank or an organisation: hang up, look up the contact yourself and call directly.

This is the rule that could have caught the first Fideuram message, which came from an unfamiliar number. It works because cloning a voice does not give the criminal control of the real person's phone.

Where it breaks:

• The number came with the request. A number in the email signature, the WhatsApp profile or the "new" invoice is not a known number.
• Caller ID says it is the boss. Report Fraud's advice is not to trust the caller ID display, because "it's not proof of ID". Ofcom explains that criminals can change the number or name shown, a practice called spoofing. An incoming call that shows a saved name still gets a call back. Ofcom also advises waiting at least five minutes before you ring back, so the line has cleared and you are not still connected to the fraudster.
• The person really is unreachable. Then the payment waits. A real deal that cannot survive a one-hour delay for a call back is rare, and urgency is a warning sign in itself.

Rule 2: agree a code word for payment requests

Report Fraud advises people to agree a safe phrase with close friends and family "to help you verify you are really speaking to them", and the FBI gives similar advice to families. A business can use the same idea: a word or short phrase, agreed face to face, that anyone asking for an urgent or unusual payment must give. A cloned voice can copy how you speak. It cannot know a word that was never written down or said on a call.

It is a backstop, not a replacement for Rule 1:

• Keep it off email, chat and shared documents. If it is written in a compromised inbox, the criminal has it too.
• Change it when someone with the word leaves, or if it may have been said on a call that was not genuine.
• Never give it to someone who asks for it. The person asking for money gives the word. The person paying never says it first.
• A correct word is not a blank cheque. The payment still goes through Rule 3.

Rule 3: two people approve every new payee and large payment

Stop! Think Fraud recommends sign-off processes and delay periods for changes to bank or payroll details, and notes that some companies wait 14 or 30 days before new supplier account details are approved. For a small business, a practical version is that one person sets up a payment and a second person approves it, with a waiting period for any new or changed bank account.

Fideuram shows the trap. The fraudsters contacted the treasury head as well, so the person who would process the payments had already been told to expect the call. Two people only protect you when the second person checks independently:

• The approver calls the requester back on a known number. They do not rely on the first person's word that "it's genuine, I spoke to them".
• "Keep this confidential" from a supposed senior person is a reason to slow down, not to skip the approver.
• The boss is not exempt. If the managing director wants a payment, someone else still approves it. Stop! Think Fraud suggests telling all staff when the CEO or finance director will never ask them for urgent payments, so a request like that stands out.
• In a two-person business, the second check can be your accountant or a business partner. Your bank may also let you require a second approval in its online banking; ask it what it offers.

If you are already automating invoice handling, the approval step belongs in that process too. Our guide to AI invoice processing covers where a human sign-off should stay.

A worked example (hypothetical)

Assumptions: a design agency in Leeds with nine staff and an annual turnover of £900,000. The managing director, Sam, is at a trade fair. Priya handles payments. These details are invented for illustration.

• 2.10 pm. Priya gets a WhatsApp message from a number she does not recognise, with Sam's photo: "New phone, old one died. Need a favour, keep it between us." A call follows. It sounds exactly like Sam. A £18,500 deposit must go to a new supplier today.
• Rule 1. Priya says she will call straight back, hangs up and rings Sam's number from the staff list. It goes to voicemail. She leaves a message and pays nothing.
• Rule 2. The caller rings again and pushes. Priya asks for the code word. The caller says it is "not the time for games". That settles it.
• Rule 3. Even with a word, the new payee would need approval from Ben, the operations lead, after a call back to Sam on a known number.
• 4.30 pm. Sam calls back from his usual phone between meetings. He made no request. Priya reports the number and keeps the messages.

The cost of the controls is a short delay on a genuine urgent payment, a few times a year. Without them, the agency would have lost £18,500. If Priya had paid, the APP reimbursement rules described below might have helped, but the claim would have depended on the payment route and the bank's assessment.

If money has already gone

Speed matters. The National Cyber Security Centre says to contact your bank directly, using its official website or phone number, and to report it to your IT department or IT person as soon as you can. Report Fraud notes you can also call 159 to get through to your bank. The government's reporting page says to report fraud to Report Fraud, the national reporting centre, online or on 0300 123 2040. In Scotland, report it to Police Scotland on 101.

Whether you get the money back depends on who you are and how the money left:

• Covered: under the Payment Systems Regulator's APP fraud reimbursement rules, individuals, microenterprises and charities get mandatory reimbursement for APP fraud on UK Faster Payments and CHAPS transfers made on or after 7 October 2024, up to £85,000 per claim. Firms may apply an excess of up to £100.
• Microenterprise means, in the FCA's definition, an enterprise with fewer than 10 staff and a turnover or annual balance sheet of no more than €2 million.
• Not covered: the PSR's consolidated policy statement excludes international payments and payments over other systems. Banks can refuse claims made more than 13 months after the last payment. A transfer to Hong Kong, like those in the Fideuram case, would fall outside the rules.
• Exceptions: no reimbursement if you were complicit or grossly negligent. The PSR says gross negligence "is a high bar".
• If the bank says no: the PSR says you can refer an unresolved complaint to the Financial Ombudsman Service, including when more than £85,000 is lost and not reimbursed. The Ombudsman's compensation limit is £430,000.

Larger businesses fall outside the mandatory scheme and depend on their bank's terms and on recovering the funds. UK Finance's figures show how little comes back: in 2025, only 20% of CEO fraud losses were returned to victims, through bank refunds or recovered funds.

One change to watch: the PSR's 2025/26 annual report says a bill introduced in Parliament on 19 May 2026 would abolish the PSR and move its functions to the FCA. The government's consultation response says the requirements of the APP reimbursement regime will be transferred to the FCA.

What to decide this week

Write the three rules down on one page and tell everyone who can move money, including the directors. Agree the code word in person. Check your bank's approval settings and save known numbers for your key suppliers and senior staff before you need them. None of this needs new software, and it holds up whether the next request comes by email, text, WhatsApp or a cloned voice.

If you want this built into how your business actually pays suppliers, with approval steps in your banking and invoice workflow and a short staff briefing, Evoogen can map your payment process and set it up with you. See how Evoogen works with small businesses.