Business Email Compromise scams caused $3.046 billion in losses during 2025 as criminals increasingly utilize AI-driven deepfakes and voice cloning to deceive employees into authorizing fraudulent wire transfers.

Key Points

• The FBI’s Internet Crime Complaint Center reported a $250 million increase in annual losses compared to the previous year.
• Scammers leverage social engineering, public social media data, and email infiltration to mimic corporate communication styles and protocols.
• A 2025 incident involving the engineering firm Arup resulted in a $25 million loss after an employee was deceived by a deepfake video conference.
• Modern tactics include spoofing, AI-generated voice cloning, and highly personalized spear phishing messages to bypass traditional security checks.
• Recommended defenses include mandatory dual authorization for payments, callback verification, and the implementation of secret code words for executive requests.

Why it Matters

These sophisticated scams represent a growing financial and reputational threat to businesses of all sizes as AI lowers the barrier for entry for cybercriminals. Companies must update their security protocols to include human-centric verification methods to counter the increasing realism of deepfake and voice-cloning technology.