Three individuals have been charged with using artificial intelligence to impersonate corporate executives and attorneys, swindling companies out of a staggering $129 million over 18 months. The scheme, which targeted thousands of businesses worldwide, has left many wondering how such a brazen heist was possible.
At the heart of this operation were Jacob Soall, 41, Sharon Hazan, 54, and Guy Sheetrit, 42 – all accused of using AI to convincingly mimic the voices and images of CEOs and lawyers. Their victims included hospital systems in Missouri and California, a bank in Rhode Island, a financial technology company in the UK, and others from various industries across the globe.
The trio’s modus operandi was straightforward: they would send an email purporting to be from the CEO, requesting help with a confidential financial transaction. This would then be followed by a phone or video call where the defendants used AI to mimic the voice of the CEO – sometimes even incorporating their image into the conversation. The impersonated executive would instruct employees to wire large payments to bank accounts worldwide, which were then converted into cryptocurrency and laundered through various channels.
The U.S. Attorney’s Office has described Soall as a key player in this scheme, noting that he had developed a “handwritten script titled ‘Lawyer Call’ to make himself appear like a real attorney when speaking with and defrauding victims.” Hazan, on the other hand, was convicted of conspiracy to commit bank fraud back in 2008 – a conviction that may have laid the groundwork for her involvement in this more recent scheme.
The scale and sophistication of this heist are both alarming and instructive. As FBI Assistant Director James C. Barnacle, Jr., noted, “This case demonstrates how advanced technology can be used to commit large-scale fraud.” It also highlights the need for companies to remain vigilant against such tactics – as well as the ongoing cat-and-mouse game between law enforcement and cybercriminals.
The indictment charges each of the three defendants with wire fraud and aggravated identity theft. If convicted, they face up to 20 years in prison on each count, except for the aggravated identity theft charge, which carries a maximum sentence of two years.
This case serves as a stark reminder that AI can be used both creatively and maliciously – and highlights the need for individuals and organizations alike to stay one step ahead of emerging threats. As we continue to navigate this increasingly complex cybersecurity landscape, it’s essential to remain mindful of the potential risks associated with advanced technologies like AI, and to take proactive steps to protect ourselves from their misuse.
Source: SecurityWeek — 2026-11-06