FBI Reports Ongoing Vishing and Smishing Campaign Allegedly Targeting Government Officials Using Purportedly AI-Generated Voices

According to a May 15, 2025 public alert from the FBI and IC3, malicious actors have been using purported AI-generated voice messages and smishing tactics since April 2025 to impersonate senior U.S. officials. The campaign reportedly targets government personnel and their contacts to gain access to personal or official accounts. The FBI warns the scheme may involve credential theft and social engineering, with AI voice cloning used to increase believability.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves malicious actors using AI-generated voice cloning to impersonate specific senior U.S. officials to gain unauthorized access to personal accounts, which represents targeted manipulation and impersonation fraud.

Additional risk subdomains

• 2.1 Compromise of privacy by obtaining, leaking or correctly inferring sensitive information: The attackers successfully accessed Susie Wiles' personal contacts and targeted personal accounts of officials to obtain sensitive, non-public information.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident is driven by malicious human actors intentionally using deployed AI voice-cloning technology to conduct targeted phishing and impersonation campaigns.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The report describes the use of 'AI-generated content such as deepfakes' and 'AI-generated voice messages' to impersonate individuals, which falls under transparency obligations for synthetic content.

AI system and alleged parties

• AI system: None named
• AI purpose: Voice Generation; Text Style Replication
• Behaviour type: Tool
• Alleged developer: Unknown voice cloning technology developers, Unknown generative AI developers, Unknown deepfake technology developers
• Alleged deployer: Unknown scammers
• Alleged harmed parties: United States state government officials, United States federal government officials, Former United States government officials, Family and friends of United States government officials

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Minor, indirect Minor
• Privacy: direct Minor, indirect Minor
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Minor, indirect Minor
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Malicious content

Reported: The report explicitly describes the creation and spread of malicious content in the form of AI-generated deepfake voice messages used for impersonation.

Directly caused: Malicious actors created and sent AI-generated voice messages impersonating senior U.S. officials to target other officials and their contacts.

Inferred additional harm: It is likely that numerous deepfake audio clips were generated and distributed across messaging platforms to facilitate this ongoing social engineering campaign.

Democracy

Reported: The report explicitly describes threats to democratic norms, specifically the targeting of high-ranking government officials, including the White House Chief of Staff, to compromise secure communications.

Directly caused: An impersonator breached the phone of White House Chief of Staff Susie Wiles and pretended to be her in calls and messages to high-profile contacts, potentially compromising sensitive administration communications.

Indirectly caused: The FBI warned that access to personal or official accounts of U.S. officials could be used to target other government officials, undermining the security of government communications.

Inferred additional harm: The ongoing targeting of senior federal and state officials could lead to broader national security breaches, espionage, and the compromise of sensitive government policy discussions.

Privacy

Reported: The report explicitly describes privacy violations, specifically the unauthorized access to personal accounts and contact lists of high-ranking officials.

Directly caused: An impersonator breached White House Chief of Staff Susie Wiles' personal cellphone contacts and used them to target her high-profile contacts.

Indirectly caused: Malicious actors used phishing and vishing to gain unauthorized access to the personal accounts of senior U.S. federal or state government officials.

Inferred additional harm: It is highly likely that personal communications, private contact details, and sensitive personal data of multiple targeted officials were compromised during this campaign.

Epistemic

Reported: The report explicitly describes epistemic harm in the form of AI-generated voice cloning used to deceive individuals into believing they are communicating with authentic senior officials.

Directly caused: Malicious actors used AI-generated audio to realistically mimic the voice and likeness of senior U.S. officials, leading targets to question the authenticity of communications.

Indirectly caused: The FBI advised the public and officials that they can no longer assume messages claiming to be from senior U.S. officials are authentic, eroding trust in official communications.

Inferred additional harm: The widespread availability of realistic voice-cloning tools is likely to cause persistent skepticism and a general loss of trust in voice and text communications among government personnel.

People affected

• Occurrences reported: 1
• People reportedly harmed: 1
• People reportedly exposed: 100

Potential causes

Management

• Weak Policy Enforcement: Failure to enforce strict secure communication protocols among senior staff.
• Inadequate Risk Mitigation: Lack of preparation for AI-facilitated social engineering threats.

Technology

• AI Voice Cloning Technology: AI tools generate highly realistic voice clones to mimic senior officials.
• Scalable Content Generation: Generative AI enables adversaries to fabricate fake audio and text at scale.
• Use of Insecure Apps: Use of insecure third-party versions of encrypted messaging applications.

Data Inputs

• Compromised Contacts Lists: Breaching personal cellphones provides actors with trusted contact details.
• Publicly Available Photos: Actors use public photos in text messages to deceive targets and gain trust.

Human Factors

• Cognitive Trust Exploitation: Targets trust messages that appear to come from known, high-profile contacts.
• Inadequate Security Vigilance: Users fail to independently verify the identity of callers or senders.
• Mixing Personal and Work Devices: Officials using personal phones to discuss sensitive government policies.

Process and Methods

• Insecure Communication Habits: Conducting official government business on unapproved personal channels.
• Lack of Out-of-Band Verification: Absence of strict protocols to verify sender identity via trusted channels.
• Clicking on Unverified Links: Users clicking links in messages to transition to secondary platforms.

Regulatory Environment

• Gaps in AI Impersonation Laws: Current legal frameworks lack sufficient protections against AI impersonation.
• Insufficient Deterrence: Existing penalties fail to prevent actors from deploying deepfake campaigns.

Information quality

• Classification confidence: High
• Reason for confidence: The reports from CyberScoop, the FBI (IC3), and the Washington Post provide consistent, detailed accounts of the vishing/smishing campaign, including the specific breach of Susie Wiles' contacts. The role of AI voice cloning is clearly stated, and the targets and methods are well-documented.
• Ambiguities identified: The specific AI models or platforms used by the attackers to generate the cloned voices are not identified.
• Alternative interpretations: None. The reports clearly point to a coordinated social engineering and cyber-espionage/phishing campaign using AI voice cloning.

A sophisticated cyber-espionage and vishing campaign targeted senior U.S. officials, successfully breaching the contacts of White House Chief of Staff Susie Wiles. Utilizing AI-generated voice cloning, the attackers impersonated Wiles to target senators, governors, and executives. This represents a severe threat to government communications and intelligence security.

• Overall national security impact: Severe
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Immediate. The vishing and smishing campaign is an active, ongoing threat targeting senior U.S. officials, requiring immediate defensive and investigative response.
• Autonomy: Human-controlled. AI voice-cloning technology is used directly as a tool by human operators who execute the social engineering and phishing attacks.
• Novelty: Evolved capability. Represents a highly sophisticated advancement of existing vishing and phishing techniques, leveraging realistic AI voice cloning at the highest levels of government.

Impact by dimension

• Physical security: Negligible. No physical systems, critical infrastructure, or kinetic targeting were involved or affected in this cyber-espionage and social engineering campaign.
• Information security: Severe. Highly targeted cyber-espionage campaign using AI voice cloning breached the White House Chief of Staff's contacts, targeting senators, governors, and executives to compromise sensitive communications and credentials.
• Sovereignty: Substantial. The campaign directly targeted senior federal and state officials, compromising communications of the White House Chief of Staff and threatening the integrity of government decision-making processes.
• Economic security: Minor. While business executives were targeted, the primary impact remains focused on political espionage rather than systemic economic or technological theft.
• Societal stability: Minor. The incident erodes epistemic trust in official communications but is highly targeted at leadership rather than causing population-scale societal instability.