A finance professional at a multinational firm (associated with ICCU’s broader financial sector context) fell victim to an AI-driven deepfake scam during a video call. The attacker impersonated trusted colleagues using AI-generated deepfake voices and visuals, convincing the employee to transfer $25 million to fraudsters. The attack exploited advanced generative AI to bypass traditional verification methods, highlighting the growing sophistication of business email compromise (BEC) and vishing tactics. While ICCU itself was not directly breached, the incident underscores vulnerabilities in financial institutions’ authentication protocols, particularly when AI-generated media is weaponized to manipulate employees. The financial loss was substantial, and the reputational damage extended to the firm’s credibility in safeguarding high-value transactions. The attack also exposed gaps in multi-factor authentication (MFA) reliance, as the fraudsters circumvented it through social engineering and deepfake deception.