A sophisticated deepfake operation may cost a criminal gang no more than $10,000, and often considerably less. Free tools, greater AI power, and a worldwide shortage of cybersecurity professionals raise the risk of an attack succeeding. Cases such as the $35 million fraud targeting a Japanese company in 2020 or the $25 million theft from Arup in 2024 expose poor verification procedures and organisational preparedness. These conditions create vulnerabilities to social engineering attacks, for example phishing (where scammers send fraudulent communications, including attempts at ‘business email compromise’ or BEC). FBI guidance on preventing BEC fraud warns that attacks are more…
