AI-Driven CEO Impersonation Scams Net Nearly $50,000 in Fraudulent ACH Transfers

Cybercriminals are leveraging artificial‑intelligence tools to craft convincing CEO‑style emails that lure corporate finance departments into approving unauthorized ACH payments, a recent Microsoft investigation revealed.

The scheme combines AI‑generated phishing templates with forged ServiceNow invoices and fabricated email threads that mimic internal communication. Victims report receiving messages that appear to originate from senior executives, complete with realistic language, signatures and references to ongoing projects, prompting finance staff to act quickly and release funds.

Microsoft’s security team identified more than one million suspicious messages matching this pattern across multiple organizations. While the total monetary loss reported so far hovers around $50,000, the attacks demonstrate a growing sophistication that could enable larger scale fraud if left unchecked.

Experts note that the use of generative AI lowers the barrier for attackers to produce personalized content at scale, making it harder for recipients to spot inconsistencies. Traditional phishing defenses, which often rely on known malicious links or attachments, are less effective against these text‑only, context‑rich messages.

Financial teams are advised to reinforce verification protocols, such as requiring multi‑factor authentication for payment requests and confirming large transfers through separate communication channels. Companies are also urged to train staff on the tell‑tale signs of AI‑crafted impersonation, including subtle grammatical anomalies and unexpected urgency.

As AI tools become more accessible, cybersecurity professionals anticipate an uptick in similar campaigns targeting other high‑value functions. Ongoing collaboration between technology firms, law‑enforcement agencies, and industry groups will be critical to developing detection methods and sharing threat intelligence to mitigate the emerging risk.