Mackey Information Technology

03/15/2026

Don’t use voice verification such as at your bank. All a bad actor needs is to get in your account and mimic your voice and they are in.

Learn how AI voice scammers impersonate family members and how to protect your loved ones from urgent money scams.

03/14/2026

Bad actors often try to trick users with phishing emails that look legitimate. At first glance, an email may appear to come from Microsoft with an address like noreply @ rnicrosoft . com, but a closer look at the domain reveals the first character is not “m” but “r n “ to appear as the letter m. Attackers frequently use fake or look-alike domains to impersonate trusted organizations and steal credentials through password reset requests or malicious links. Always verify the sender’s domain before clicking any link. A small detail can prevent a big security.

03/06/2026

🚨 $25.5 MILLION. One video call. Completely fake.

Let that sink in.

In 2024, scammers used a deepfake video conference to trick an employee at a multinational company into transferring $25.5 million.

Yes — the entire meeting was fake.

The employee joined what appeared to be a legitimate video call with the company’s CFO and other colleagues. Faces looked real. Voices sounded real. The instructions were clear: execute a series of financial transfers.

He completed 15 transactions to five bank accounts.

A week later, the company discovered the truth.

Every single person on that call — except the victim — was an AI-generated deepfake.

Scammers used publicly available video footage to recreate the CFO and team members, including their voices. The employee was even asked to introduce himself during the call. But he never meaningfully interacted with anyone else.
The meeting ended abruptly after the transfers were made.

Hong Kong police later revealed the attackers attempted similar scams against other employees — fortunately, those attempts failed.

The Bigger Issue:

This happened two years ago.

Imagine how much better the technology is today.

Deepfake scams are no longer theoretical. They are operational. They are convincing. And they are targeting finance departments, executives, and anyone with authority over money or sensitive access.

The Real Lesson:

✔️ Always verify — especially when money is involved
✔️ Be cautious of “urgent” requests from senior leadership
✔️ Question anything that feels unusual, even if it looks legitimate
✔️ Implement multi-step verification for financial transactions
✔️ Train your staff on emerging AI-driven threats

Trust — but verify. Even if the request appears to come from someone you know. Because in today’s world, it might not be them at all.

If your organization hasn’t discussed deepfake fraud prevention yet, now is the time. Ask your IT or MSP on how they can help educate your employees to identify potential threats.