What happened
In early 2024 an employee at the Hong Kong office of British engineering firm Arup transferred HK$200 million, roughly $25 million, after joining a video conference in which AI-generated likenesses of the company's chief financial officer and other colleagues instructed the payment. Hong Kong police disclosed the case on February 4, 2024, and Arup was identified as the victim in May 2024. Funds went to five local bank accounts.
How the deception worked
The fraud began with a payment request that the employee initially suspected, so the criminals escalated to a video meeting to overcome doubt. In the call, deepfaked video and cloned audio of the CFO and several recognizable colleagues appeared alongside the victim, who was asked to introduce himself but was never genuinely engaged in dialogue, the participants delivering scripted instructions instead. Seeing familiar faces and hearing familiar voices supplied the assurance that the earlier email could not. Follow-up instructions arrived by instant message, email and one-to-one video calls, and the employee executed a series of transfers into five Hong Kong accounts before the deception was discovered.
AI involvement · Confirmed AI-enabled
Hong Kong police stated the fraudsters used AI-generated video and audio to impersonate the company's chief financial officer and other staff in a multi-person video conference; the fake participants did not interact naturally with the victim.
The control that would have caught it· our reading, not a claim from the sources
High-value payments should require verification through a separate, pre-registered channel and multi-party approval independent of whoever appears on the call; a live challenge that only the real colleague could answer also defeats a pre-rendered persona.
Sources (5)
- Deepfaked video conference call makes employee send $25 million to scammersHelp Net Security·helpnetsecurity.comOpen ↗
- Arup Group (fraud incident section)Wikipedia·en.wikipedia.orgOpen ↗
- Business Email Compromise: Virtual Meeting PlatformsFBI IC3·ic3.govOpen ↗
- Arup revealed as victim of $25 million deepfake scam involving Hong Kong employeeCNN·edition.cnn.comOpen ↗
- 'Everyone looked real': multinational firm's Hong Kong office loses HK$200 million after scammers stage deepfake video meetingSouth China Morning Post·scmp.comOpen ↗
This entry summarises public reporting. It is not a legal finding, and details can change as investigations conclude. Found an error? Send a correction.