Scam Detective
Scam verdict · Educational pattern check
Scam Detective research desk · Updated August 2026
Verify it yourself

My boss video-called me with an urgent payment request — could it be a deepfake?

It could be — and one engineering firm lost $25 million exactly this way. Fraud crews now clone an executive's face and voice from public footage and stage a video meeting convincing enough to authorize real wire transfers; the urgency and the request for secrecy are the tells. Confirm any payment order on a second channel you initiate — call the executive at the number you already have — and make it house policy that a face on a screen alone never moves money.

Educational verdict from documented scam patterns — not a live report. For a 0–100 risk score on the exact link in your hand, run the checker.

Check a URL freeRead the full guide

From the research desk — this pattern is one of those documented in This Week's Scam Wave, in Numbers — August 19, 2026 →

Why now · August 2026

Why you’re seeing this now

Because deepfake fraud moved from the ad break into the meeting room. In the case that defined it, a finance employee at the engineering firm Arup wired roughly $25 million after a video call with a synthetic “CFO” and “colleagues” — a case reported by Hong Kong police, CNN, and the World Economic Forum — and crews have been cloning executives' faces and voices from public footage ever since. The searched moment in August 2026 isn't a sponsored post anymore; it's a live instruction from what looks like your own boss.

The script · As it arrives — video meeting, then the chat follow-up

The exact words they use

Quoted from documented versions of this script so you can recognize it on sight. The words are the scammer’s — the patterns inside them are what give the con away.

“Sorry to drop this on you with no warning — I'm about to board, so keep this between us for now.”

“We are finalizing an acquisition. I need a transfer executed today for the deposit — the details will follow after this call.”

“Do not loop in anyone else yet. This is board-level confidential until we announce next week.”

“Everyone on this call is across it. I just need you to action the payment now.”

Script language quoted for recognition — if the message in your hand reads like this, you already have your verdict.

The checklist

Five red flags — any one is enough

An urgent payment order paired with secrecy — “keep this between us” is the tell, not the face on the screen.
A meeting that exists only to authorize money, with the payment details arriving afterward by message instead of through your normal finance workflow.
Pressure to bypass the usual approval chain “just this once.”
Colleagues on the call who barely speak or interact — synthetic attendees are set dressing.
The request routes around established channels even though the face and voice look exactly right.
What to do now

Your next three moves

1
Pause the payment. No real deal dies because finance took an hour to verify — say you'll action it the moment it's confirmed through the normal channel.
2
Verify on a second channel you initiate: call the executive at the number you already have, or walk to their desk. Never confirm inside the same meeting or chat thread that made the request.
3
Make it standing policy that a face on a screen alone never moves money — payment orders need two-channel confirmation, no matter how senior the requester looks.
Instant URL Check · $2, one-time
Holding the actual message? Check the exact link, number, or sender.
Paste it into the instant check — free risk signal in 60 seconds, then the full report for $2: a 0–100 scam risk score, a plain-English verdict, the top 5 red flags found, and a 3-step what-to-do-now list. No subscription.
Run the $2 instant check
Follow-up questions

People also ask

Can a live video call really be faked?

Yes. Real-time face-and-voice cloning from public footage is documented and cheap; the $25 million Arup transfer happened on a call with multiple synthetic participants. “I saw them with my own eyes” no longer settles anything.

Should I quiz the caller with personal questions?

Don't bother — prepared scripts come with prepared answers, and breached email plus LinkedIn supplies the rest. Verify through a channel the caller doesn't control: the number already in your contacts, or in person.

The caller knew real internal details — isn't that proof?

No. Org charts, project names, and deal chatter leak through breached mailboxes and public filings. Inside knowledge proves access to information, not identity.

What if it was really my boss and I delayed a genuine payment?

Then you followed the policy your CFO wants you to follow. Legitimate urgency survives a verification call; only the fake kind punishes it.

Related verdicts

People asking this also asked

Is that “Amazon took payment” email a scam?Almost alwaysIs decision-study.org a scam?Treat as data-harvestIs that Wells Fargo / Bank of America fraud call or text real?Verify it yourself
← Browse all 95 answers
$2, one time
No subscription, no account, nothing to cancel.
Verdict in minutes
Full report on screen and as a PDF, usually within minutes.
Honest verdicts
If it looks safe, we say so — a clear “safe” is worth $2 too.
Got a link of your own?

Sixty seconds of checking beats a four-figure mistake.

Paste any URL for a free instant preview — the full 0–100 report is $2, one-time. No subscription.

Check a URL free
Spot the scam before it spots you.
For businesses · $29, one-time
Is someone impersonating your brand?

The costume in these scams — a lookalike domain, a copied storefront, a spoofed sender — is exactly what the brand impersonation audit researches for your company: lookalike domains, typosquats, and copycat sites trading on your name, each with evidence and a risk rating, plus a ready-to-send takedown-request template.

Audit my brand — $29
Free brand scan first — you only pay for the full audit.