Ferrari Executive Targeted by AI Deepfake Scam Impersonating CEO Benedetto Vigna

A Ferrari executive was targeted by an AI-generated deepfake impersonating CEO Benedetto Vigna in an alleged fraud attempt. The scammer, using WhatsApp and a cloned voice, claimed an urgent, secretive financial deal required immediate action. The executive became suspicious after detecting slight artificial intonations; the scam failed when the executive tested the caller by asking about a recent book recommendation.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involved a targeted spear-phishing attempt using an AI voice clone of a CEO to commit financial fraud against a specific corporate executive.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was initiated by a human malicious actor who intentionally deployed a post-deployment AI voice-cloning tool to impersonate a CEO and attempt financial fraud.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Risk Level 3. Limited Risk: The system involves 'AI-generated content such as deepfakes' which require transparency obligations. The report explicitly describes the voice clone as an 'AI deepfake' and 'synthetic media' used to impersonate the CEO.

AI system and alleged parties

• AI system: unspecified
• AI purpose: Voice Generation
• Behaviour type: Tool
• Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
• Alleged deployer: Unknown scammers, Scammers impersonating Benedetto Vigna, Phishers
• Alleged harmed parties: Unnamed Ferrari executive, Ferrari, Benedetto Vigna

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Negligible. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

People affected

• Occurrences reported: 1
• People reportedly exposed: 2

Potential causes

Management

• Unprepared corporate operations: Management remains unprepared for precise executive impersonation attacks.
• Lack of security culture: Organizations fail to transition to a 'never trust, always verify' model.

Technology

• High-fidelity voice cloning: Voice cloning requires only 20 to 30 seconds of audio to mimic targets.
• Rapid video deepfake generation: Convincing video deepfakes can be created in 45 minutes using free software.
• High detection system error rates: Automated detection accuracy drops 45 to 50 percent in real-world settings.

Data Inputs

• Abundant public audio data: Publicly available audio of executives makes voice cloning highly accurate.
• Minimal training data required: Only 20 to 30 seconds of audio is needed to clone a voice.

Human Factors

• Low human deepfake detection rate: Human ability to identify deepfakes is barely better than random chance.
• Trust in visual and audio cues: Humans naturally trust familiar voices and faces, enabling deception.
• Overreliance on digital channels: Reliance on digital communication makes firms vulnerable to social engineering.

Process and Methods

• Flawed verification protocols: Traditional verification methods like recognizing faces on video are obsolete.
• Lack of multi-factor check: High-value transactions were approved without offline secondary verification.
• Lack of real-time alerts: Communication platforms lacked integrated real-time deepfake alerts.

Regulatory Environment

• Lack of federal deepfake laws: Absence of comprehensive federal legislation fails to deter bad actors.
• Lagging policy frameworks: Policies fail to keep pace with the 900 percent annual rise of deepfakes.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide clear, consistent details about the specific Ferrari incident, including the medium of communication (WhatsApp and phone call), the nature of the AI voice clone, the executive's suspicion, and the exact question used to foil the attempt. There is no conflicting information regarding the Ferrari event.
• Ambiguities identified: The specific AI software used to generate the voice clone is not identified.
• Alternative interpretations: None. The event is clearly a targeted social engineering attack leveraging AI voice cloning.

An attempted financial fraud targeting a Ferrari executive using an AI-generated voice clone of the CEO was successfully averted. The incident represents an evolved corporate security threat through AI-enabled social engineering, but carries negligible direct national security implications.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: Italy
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. The specific incident is resolved with no financial loss, representing an ongoing strategic concern regarding AI-enabled corporate fraud.
• Autonomy: Human-controlled. The AI voice cloning system acted strictly as a tool controlled and deployed by a human fraudster.
• Novelty: Evolved capability. Represents a significant advancement in social engineering techniques by integrating highly convincing synthetic voice cloning.

Impact by dimension

• Physical security: Negligible. No physical systems, critical infrastructure, or human safety elements were affected or targeted in this corporate fraud attempt.
• Information security: Negligible. While the attack used an AI voice clone, it was a localized corporate spear-phishing attempt rather than a state-sponsored information warfare or intelligence compromise operation.
• Sovereignty: Negligible. The incident was entirely confined to a private corporate entity and had no impact on state authority, elections, or government operations.
• Economic security: Minor. Targeted a major multinational corporation (Ferrari), representing a minor threat to corporate economic security, though no financial loss or intellectual property theft occurred.
• Societal stability: Negligible. No impact on societal stability, civil liberties, or population-scale safety.