Purportedly AI-Generated Deepfake Reportedly Used to Impersonate DNB Bank CFO and CEO in Live Teams Meeting

January 21, 2025

Cybercriminals allegedly used a deepfake to impersonate the CFO and CEO of DNB Bank during a live Microsoft Teams meeting, instructing employees at their Singapore office to transfer funds. The video and voice were cloned from public sources and appeared convincing. Identifying it as a 'CEO fraud', DNB managed to avoid losses, marking their first experience with a live deepfake incident in a business setting.

Learn how Project Cerebellum's AI governance can help prevent such incidents by mapping this case to HISPI Project Cerebellum TAIM: Govern and Manage. Join us now at JOIN US to shape the future of safe and secure AI practices.

Matched TAIM controls

Suggested mapping from embedding similarity (not a formal assessment). Browse all TAIM controls

GOVERN 2.2 — similarity 0.602, rank 1. TAIM detail and related incidents →
GOVERN 1.7 — similarity 0.600, rank 2. TAIM detail and related incidents →
GOVERN 6.2 — similarity 0.593, rank 3. TAIM detail and related incidents →

Alleged deployer: unknown-scammers-impersonating-dnb-bank-officials, unknown-scammers
Alleged developer: unknown-deepfake-technology-developers, unknown-voice-cloning-technology-developers
Alleged harmed parties: kjerstin-braathen, ida-lerner, dnb-bank-employees, dnb-bank

Source

Data from the AI Incident Database (AIID). Cite this incident: https://incidentdatabase.ai/cite/1246

Data source

Incident data is from the AI Incident Database (AIID).

When citing the database as a whole, please use:

McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. In Proceedings of the Thirty-Third Annual Conference on Innovative Applications of Artificial Intelligence (IAAI-21). Virtual Conference.

Pre-print on arXiv · Database snapshots & citation guide

We use weekly snapshots of the AIID for stable reference. For the official suggested citation of a specific incident, use the “Cite this incident” link on each incident page.