Deepfake: Energy and utilities, United Kingdom 2019
The head of the British subsidiary believed he was on the phone with the head of the German parent company, who demanded an urgent payment to a Hungarian supplier.
- Incident · 03.2019 · United Kingdom
- Evidence: several media
- Deepfake
- Deception (social engineering)
- Fake payment instruction
- AI link
As of
What happened
He transferred the 220'000 euros demanded, which were supposedly due within one hour. Only a third call, asking for a second payment from an Austrian number, made him suspicious; the money had been passed on via Hungary and Mexico.
Role of AI: Considered one of the first known cases in which an AI-generated voice of a boss was used for payment fraud.
- Affected
- Company (anonymous)
- Industry
- Energy and utilities
- Loss
- EUR 220'000 (around USD 243'000)
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- Phone call with an AI-cloned voice of the group CEO
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: yes, according to the source.
-
CEO fraud, diverted payment, fake invoice
Mostly add-on 5 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
A familiar voice on the phone is no proof of identity; urgent payments need a call-back or four-eyes rule.