AI Powered CEO Scams: How Idaho Businesses Can Spot Deepfake Phishing in 2025

Imagine you’re going about your day when suddenly you receive a text from the CEO. The head of the company is asking for your help. They’re out doing customer visits, and someone else dropped the ball providing gift cards. The CEO needs you to buy six $200 gift cards and text the information right away.

The sender promises to reimburse you before the end of the day. Oh, and by the way, you won’t be able to reach them by phone for the next two hours—they’ll be in meetings. One last thing: this is high priority. They need those gift cards urgently.

Would this kind of request make you pause and wonder? Or would you quickly pull out your credit card to do as the message asked?

A surprising number of employees fall for this type of AI powered CEO scam. There are many variations—such as your boss being stuck without gas or some other urgent situation that only you can help with.

This scam can arrive by text message or email, and often the unsuspecting employee buys the gift cards and sends back the codes. Later, they discover the real company CEO never contacted them—it was a phishing scammer. The employee is out the cash.

Without proper training, 32.4% of employees are prone to fall for a phishing scam, something Idaho businesses can’t afford to ignore.

Why Employees Still Fall for CEO Phishing Scams in 2025

Though the circumstances may be odd, many employees fall for this gift card scam. Cybercriminals manipulate emotions to get employees to act without thinking.

Some of these tactics trigger the following reactions:

  • Fear of disobeying a superior
  • Desire to be helpful or “save the day”
  • Pressure not to let the company down
  • Belief that quick action could lead to recognition

The message’s urgency (“I need this now”) and unreachability (“I’ll be in meetings”) make it even more convincing limiting the chance of verification.

Related Reading: Phishing 2.0: How AI Is Transforming Email Security

Real-World Example of AI Powered CEO Scams: Illinois Woman Scammed Out of $6,000

In one case, a woman from Palos Hills, Illinois lost more than $6,000 after receiving what appeared to be a legitimate email from her company’s CEO.

The email explained that the CEO wanted to reward top-performing staff with gift cards. It ended with: “Can you help me purchase some gift cards today?”

Believing it to be authentic, she purchased the gift cards and sent photos of them as requested. Later, she discovered her real boss had no idea about any such request. She was the victim of a CEO fraud phishing scam.

(External Reference: ABC7 Chicago News Report – Fake CEO Gift Card Scam)

How AI Deepfakes Are Powering a New Wave of CEO Scams in 2025

While traditional phishing and text scams remain a concern, AI powered deepfake scams have taken these schemes to an entirely new level.

In 2024 alone, Business Email Compromise scams—including CEO fraud—caused $2.77 billion in losses, with 21,442 complaints reported to the FBI Internet Crime Complaint Center (IC3). These scams remain one of the most financially damaging cybercrimes, and nearly 89% of these attacks impersonate authority figures like CEOs or CFOs to manipulate employees into transferring funds or sharing confidential information.​

The FBI IC3 continues to emphasize the widespread impact of BEC scams on businesses and individuals, highlighting the importance of vigilance and email verification protocols to prevent such costly fraud.​

Real-World Deepfake Cases

  • $25 Million Video Call Scam (Jan 2024): At multinational firm Arup, a finance employee joined a video call with what appeared to be real executives. They were all AI-generated deepfakes. The result? $25 million lost.
  • Ferrari’s Close Call (July 2024): A scammer impersonated Ferrari’s CEO using cloned voice patterns and an authentic Italian accent. A quick-thinking executive thwarted the fraud by asking a question only the real CEO would know.
  • LastPass Attempt (Early 2024): Even cybersecurity experts were targeted with AI-generated CEO voice calls urging employees to share login credentials.

Deepfakes are becoming shockingly easy to create—requiring as little as 20 seconds of audio or a short public video clip. In Idaho and across the U.S., small and mid-sized businesses are increasingly being targeted because they often lack advanced verification protocols.

What Is a Deepfake CEO Scam?

A deepfake CEO scam leverages advanced artificial intelligence to convincingly mimic a real executive’s voice, facial appearance, and communication style—tricking employees or business partners into sending money or sharing sensitive company data.

These scams often involve:

  • Video calls featuring AI-generated likenesses of executives
  • Voice messages that replicate a CEO’s or CFO’s exact voice patterns and tone
  • Emails or chat messages sent through trusted business platforms like Microsoft Teams, Zoom, or WhatsApp

Deepfake scams have evolved far beyond simple phishing emails. Modern attacks now use AI-generated video conferences that feature multiple fake participants, making them nearly indistinguishable from genuine company meetings.

📉 Real-World Example:
 In 2024, an engineering firm in Hong Kong was defrauded of $25 million during a deepfake video call where the attacker impersonated the CFO and other staff members—each created through AI generated video and audio. The employee authorized 15 financial transactions before realizing the call had been entirely fabricated.
 (Source: Deepstrike AI Deepfake Statistics 2025)

According to Deloitte Insights, the financial impact of AI-driven fraud is accelerating rapidly, with deepfake-related losses projected to rise from $12.3 billion in 2023 to $40 billion by 2027 in the United States alone.

These attacks pose a critical threat to business integrity, requiring companies—especially small and mid-sized businesses in Idaho—to adopt multi-layered defenses such as:

How to Protect Your Business from Deepfake and CEO Phishing Scams

1. Always Verify Unusual Requests

Even if a message says the sender is unreachable, verify in person or by phone through known contact methods. Never rely on the contact information provided in the suspicious message.

🔗 Related Service: Managed IT Security & Network Protection in Idaho Falls

2. Don’t React Emotionally

Scammers use urgency to override logic. Pause and ask yourself—does this seem normal? Just a few minutes of calm evaluation can prevent a costly mistake.

3. Get a Second Opinion

If in doubt, ask a trusted colleague or your Idaho IT service provider—like MOATiT—to review the message. Having a second set of eyes can prevent emotional or rushed decisions.

[2025 UPDATE]

Enhanced Cybersecurity Strategies for Idaho Businesses

With AI deepfakes now a reality, traditional security awareness training isn’t enough. Idaho businesses should adopt multi-layered verification and AI-aware training programs.

Implement Multi-Factor Verification

Require multiple approvals for financial transactions over a certain amount. Confirm requests via independent communication channels—never within the same email thread or message.

Use Code Words or Authentication Phrases

Develop internal code words for executives making sensitive requests. Change them regularly and keep them confidential to prevent AI mimicry.

Train Employees to Spot Deepfake Inconsistencies

Even the best deepfakes show subtle tells—off timing, lighting mismatches, or awkward speech patterns. Employees trained to recognize these can stop attacks in progress.

Leverage AI Detection Tools

Use AI-powered tools that detect visual or audio inconsistencies, such as unnatural blinking or mismatched lip-syncing.

According to the Cybersecurity and Infrastructure Security Agency (CISA), a layered defense strategy is essential to protect against deepfake and AI-enabled fraud. 

Limit Public Executive Media

Reduce the amount of high-quality audio or video of company leaders available online to limit material for deepfake creation.

The Human Factor: Idaho’s Strongest Line of Defense

Technology evolves fast, but people remain both the weakest link and strongest defense. Even the most sophisticated deepfake can’t defeat a well-trained, security-conscious employee who knows the red flags.

For Idaho Falls and Southeast Idaho businesses, investing in phishing awareness training is no longer optional—it’s essential to prevent losses and maintain customer trust.

Need Help with Employee Phishing Awareness and help them catch on time AI powered CEO scams in Idaho?

Phishing and deepfake scams are evolving faster than ever. Protect your business with MOATiT’s Cybersecurity Awareness Training—customized for Idaho organizations.

Our experts teach your team how to:

  • Recognize and respond to CEO and deepfake phishing scams
  • Implement verification procedures that stop fraud before it happens
  • Build a culture of cybersecurity awareness

Contact MOATiT today to schedule an AI powered CEO scams prevention consultation for your Idaho business.
 Let’s make sure your team—and your company—stays protected in 2025 and beyond.

—
Featured Image Credit

This Article has been Republished with Permission from The Technology Press.