$129 Million AI Fraud Case Exposes Risks of Executive and Lawyer Impersonation

Three individuals have been charged in the United States over an alleged $129 million international fraud scheme involving the impersonation of corporate executives and lawyers using advanced artificial intelligence technology.

Federal prosecutors in New York announced the charges on November 5, 2026, alleging that the defendants used manipulated voices and images to convince employees that fraudulent financial transactions were legitimate.

The alleged operation targeted companies across several industries, including healthcare, banking, financial services and manufacturing.

The case highlights an increasingly serious challenge for businesses: criminals can now combine convincing impersonation techniques with established financial fraud methods to bypass internal payment controls.

It also demonstrates the importance of independent verification, effective Fraud & Financial Investigation and the ability to trace funds transferred across international jurisdictions.

Three Charged in $129 Million Corporate Fraud Investigation

The US Attorney's Office for the Southern District of New York announced an indictment against Jacob Soall, Sharon Hazan and Guy Sheetrit on November 5, 2026.

Prosecutors allege that the three participated in a sophisticated scheme targeting businesses between 2024 and 2026.

The defendants allegedly used artificial intelligence to imitate the voices and, in some instances, images of company executives during communications with employees responsible for significant financial transactions.

According to the indictment, the scheme resulted in more than $129 million being fraudulently transferred from companies in the United States and internationally.

Reported losses included:

• Approximately $4.8 million from a Missouri hospital system.
• Approximately $2.7 million from a Rhode Island bank.
• Approximately $3 million from a California hospital system.
• Approximately $4.6 million from a Massachusetts mutual fund company.
• Approximately $5.2 million from a Florida pet food company.
• Approximately $11.6 million from a UK financial technology company.

The individuals face charges including wire fraud, aggravated identity theft and money laundering.

All three were arrested between June and September 2026, with extradition proceedings pending at the time of the announcement.

The charges remain allegations, and the defendants are presumed innocent unless proven guilty.

How the Alleged Executive Impersonation Scheme Worked

The alleged fraud involved more than simply sending deceptive emails.

According to prosecutors, the individuals first identified employees who could facilitate substantial financial transactions.

They then contacted those employees while impersonating senior executives, often claiming that an urgent or confidential corporate transaction required assistance.

Artificial intelligence was allegedly used during telephone or video communications to make the impersonation appear more credible.

Employees were subsequently directed to communicate with individuals supposedly representing major international law firms.

However, prosecutors allege that the supposed legal representatives were also impersonators participating in the scheme.

These individuals would reinforce the legitimacy of the fictional transaction before instructing employees to transfer funds to designated bank accounts.

The combination of executive authority, legal involvement and demands for confidentiality allegedly helped convince employees that the instructions were genuine.

The case illustrates how corporate fraud can exploit established business procedures rather than relying exclusively on weaknesses in technical security systems.

Why Impersonating Lawyers Creates Additional Risks

One particularly concerning aspect of the allegations is the impersonation of legal professionals.

Law firms are frequently involved in corporate acquisitions, investment transactions, commercial disputes and other matters requiring confidential financial arrangements.

Their participation can lend credibility to instructions involving substantial payments.

In this case, prosecutors allege that one defendant primarily impersonated UK lawyers and maintained a handwritten script designed to make conversations appear authentic.

The script reportedly included language intended to discourage employees from discussing the purported transaction with colleagues.

For businesses, this demonstrates why apparent professional authority should never replace independent verification.

A convincing telephone conversation, familiar executive voice or apparently legitimate law firm name does not establish that a payment instruction is genuine.

Organizations should ensure that significant transactions are independently verified through trusted contact details and established authorization procedures.

Unexpected requests involving secrecy, unusual payment destinations or changes to normal approval processes should receive particular scrutiny.

International Transfers Complicate Fraud Investigations

The alleged fraud extended beyond the initial deception of company employees.

According to the indictment, stolen funds were directed to bank accounts controlled by members of the alleged conspiracy across several countries.

These included the United States, Spain, Portugal, Greece, the United Arab Emirates, Singapore, Austria, Slovakia and China.

Prosecutors further allege that transferred funds were converted into cryptocurrency in an attempt to conceal their origins, ownership and subsequent distribution.

This illustrates the challenges investigators may encounter when following money transferred through multiple financial institutions and jurisdictions.

An effective financial investigation may require examination of:

• Original payment instructions and transaction records.
• Beneficiary bank accounts and intermediary institutions.
• Corporate entities connected to receiving accounts.
• Relevant individuals and their business relationships.
• Subsequent transfers between accounts or jurisdictions.
• Cryptocurrency transactions and potential exchange connections.
• Communications and documentation surrounding the payments.

Identifying where funds were transferred is not necessarily the same as establishing who ultimately controlled them.

Complex ownership arrangements, intermediary accounts and digital assets can create additional layers requiring independent examination.

The Role of Asset Tracing in Corporate Fraud

Where businesses suffer substantial financial losses, identifying the movement and potential location of diverted funds can be an important part of the response.

Asset Tracing can help establish relevant financial interests, corporate relationships, transaction pathways and potential connections between individuals and assets.

Depending on the circumstances, investigations may examine corporate records, property interests, associated businesses and available digital-asset transaction information.

In cryptocurrency-related matters, blockchain analysis can assist in reconstructing transfers between wallets and identifying interactions with exchanges or other services.

However, identifying a cryptocurrency wallet does not automatically establish the identity of its controller.

Attribution may require additional information from financial institutions, exchanges or records obtained through appropriate legal procedures.

Asset identification must also be distinguished from asset recovery.

The ability to freeze, seize or recover funds depends on the available evidence, relevant jurisdictions and applicable legal processes.

In international fraud cases, coordinated enquiries across several countries may therefore be necessary.

Why Corporate Payment Controls Can Fail

The allegations demonstrate that even organizations with established financial procedures can be exposed to sophisticated impersonation attempts.

Criminals may deliberately exploit the pressures associated with major transactions, particularly where employees believe they are acting on instructions from senior management.

A request presented as urgent and confidential can discourage normal consultation or independent checking.

The apparent involvement of external legal advisers may reinforce that impression.

Businesses should consider whether their payment processes remain effective when employees receive instructions that appear to originate from senior executives.

Appropriate safeguards may include:

• Independent confirmation of significant payment instructions.
• Verification of beneficiary bank details through trusted channels.
• Dual authorization for high-value transfers.
• Additional scrutiny of unusual or confidential transactions.
• Clear procedures for challenging unexpected executive instructions.
• Employee awareness of AI-enabled voice and video impersonation.
• Rapid escalation of suspected fraudulent payments.

Importantly, verification should not depend solely on recognizing an individual's voice or appearance.

As artificial intelligence technology develops, these indicators may become less reliable.

Investigating Suspected Corporate Payment Fraud

Where a fraudulent transfer is suspected, the initial response can significantly affect the available investigative options.

Businesses should promptly contact the relevant financial institutions to report the transaction and explore whether payment recall or other protective measures are available.

Relevant emails, call records, transaction documentation and internal communications should also be preserved.

In the United States, suspected cyber-enabled financial fraud can be reported to the FBI's Internet Crime Complaint Center.

Depending on the circumstances, independent investigative support may assist in identifying the individuals, entities and financial relationships potentially connected to the incident.

Specialist Fraud Investigations can also support the examination of relevant records, corporate connections and factual evidence surrounding suspected misconduct.

Where funds have crossed international borders, enquiries may require coordination with legal advisers and appropriately authorized professionals in the relevant jurisdictions.

The objective is to establish a reliable understanding of what happened, preserve available evidence and identify realistic options for further action.

What the $129 Million Case Means for Businesses

The investigation represents a significant example of how artificial intelligence may be incorporated into established corporate fraud methods.

The alleged perpetrators did not rely solely on convincing technology.

They reportedly combined impersonation with knowledge of corporate processes, legal authority, confidentiality expectations and international financial transfers.

For businesses, the wider lesson is that fraud prevention must address both technological and procedural vulnerabilities.

Employees should be able to question unusual requests without concern that doing so will be interpreted as challenging legitimate management authority.

Financial approval procedures should remain effective regardless of who appears to be requesting a transaction.

And where losses occur, a coordinated response involving financial institutions, legal advisers and appropriate investigative specialists can help establish the relevant facts.

How Conflict International USA Can Assist

Conflict International USA supports businesses, financial institutions, legal professionals and private clients dealing with suspected fraud, financial disputes and complex international matters.

Our investigative capabilities can assist with identifying relevant individuals, examining corporate relationships, reviewing available evidence and tracing assets potentially connected to fraudulent activity.

Through our international network, we can coordinate enquiries across multiple jurisdictions where funds, companies or individuals have international connections.

Our approach focuses on establishing independently verifiable information, identifying evidential limitations and supporting informed decisions about further investigative or legal action.

If your organization has experienced suspected corporate fraud, diverted payments or financial misconduct, contact Conflict International USA to discuss how an independent investigation may assist.