Cybercriminals are impersonating CEOs and senior executives using fake profiles, AI deepfakes, voice cloning and malware to trick employees into making urgent payments.
A new form of cyber fraud known as the “Boss Scam” is putting businesses and finance teams at risk. In this scam, criminals pretend to be a company’s CEO, managing director or another senior official and contact employees through platforms they regularly use, including WhatsApp, email, Microsoft Teams and social media.
The goal is simple: make the victim believe the request is coming from their boss and convince them to transfer money to an account controlled by the fraudsters.
What makes the scam particularly dangerous is that criminals are increasingly using artificial intelligence, deepfakes, voice cloning and malware to make their impersonation appear genuine.
What Is The Boss Scam?
The Boss Scam is essentially an executive impersonation fraud.
Scammers first identify a senior company official and gather information about them from sources such as social media, company websites and publicly available documents. They may then create a fake account, use a lookalike email address or impersonate the executive on WhatsApp or Microsoft Teams.
The victim may receive a message such as a request to:
- Transfer money urgently
- Make a payment to a new bank account
- Pay an invoice
- Send money to a particular beneficiary
- Keep the transaction confidential
The message is designed to create pressure and urgency, leaving the employee little time to verify whether the request is genuine.
How Does The Scam Work?
The fraud generally follows a simple pattern.
Step 1: The scammer impersonates the boss
The fraudster creates a fake WhatsApp profile, email account or social media profile using the CEO’s name, photograph, company details or branding.
Step 2: The employee is contacted
The scammer approaches an employee, often someone working in finance or accounts, because they may have access to company funds.
Step 3: An urgent request is made
The fake CEO asks the employee to transfer money or change the beneficiary details of a payment. The request may come with a deadline to make it appear more authentic.
Step 4: The victim is discouraged from checking
In some cases, scammers tell employees that the transaction is confidential or related to sensitive company information. This is meant to prevent the employee from contacting the real executive.
Step 5: The money is transferred
Once the employee follows the instructions, the money goes into an account controlled by the fraudsters or their money mules.
Traditional impersonation scams often relied on fake emails and profiles. Today, criminals have more sophisticated tools.
Using AI-generated audio and video, scammers can clone a person’s voice or create convincing deepfake video calls that make it appear as though the CEO is actually speaking to the employee.
Fraudsters can also create fake online groups or profiles featuring an impersonated senior executive and use them to communicate with employees.
This means that even seeing or hearing someone who appears to be the CEO may not be enough to establish that the request is genuine.
The Malware Threat: How A File Can Put WhatsApp At Risk
The scam can also involve malware.
In one method, criminals send a ZIP file containing malicious executable files. If an employee opens the file on a Windows computer, malware can compromise the device and potentially steal active WhatsApp Web session information.
Once an attacker gains access, they may be able to use the compromised WhatsApp account to contact other employees and issue payment instructions.
In some cases, criminals may even manipulate contact information and save their own number under the CEO’s or managing director’s name, making the impersonation even harder to spot.
Why Do Employees Fall For It?
The scam exploits something that is difficult to eliminate in a workplace: trust and authority.
Employees are naturally more likely to act quickly when a request appears to come from the CEO or another senior executive. When that request is combined with urgency, secrecy and a convincing digital identity, victims may transfer money before stopping to verify it.
The scam therefore relies less on sophisticated hacking alone and more on social engineering, where criminals manipulate people into taking an action themselves.
How To Protect Yourself From A Boss Scam
The most important rule is simple: never transfer money solely because a message appears to come from your boss.
Before making any unusual or urgent payment:
- Verify the request independently. Call the executive using a phone number you already have rather than replying to the message.
- Check the sender carefully. Look at the complete email address, phone number and account details.
- Be suspicious of urgency. Requests demanding immediate action should be treated cautiously.
- Confirm bank-account changes separately. Never rely on an email or WhatsApp message to verify a new beneficiary.
- Do not open unexpected executable files or suspicious ZIP attachments.
- Do not share passwords, OTPs, PINs or banking credentials.
- Review and log out of unused WhatsApp Web sessions.
- Follow company payment-verification procedures even when the request appears to come from a senior executive.
What To Do If You Have Lost Money
If you believe you have been targeted by an impersonation scam or have already transferred money, act immediately.
In India, victims can report financial cyber fraud through the National Cyber Crime Reporting Portal at cybercrime.gov.in or by calling the 1930 cybercrime helpline.
The faster a fraudulent transaction is reported, the better the chances of authorities taking steps to trace or freeze the funds before they are moved through additional accounts.
The Boss Scam works because it makes a fraudulent request look like a normal workplace instruction.
A familiar name, a CEO’s photograph, a professional-looking email or even an AI-generated voice does not prove that a financial request is genuine.
Pause. Verify independently. Then act.
A few minutes spent confirming an unusual payment request could prevent a major financial loss.
