Um funcionário recebe uma ordem de pagamento 'urgente' que parece vir do CEO, ou uma fatura de um fornecedor de verdade com os dados bancários trocados. Assim o dinheiro da empresa vai parar na mão dos golpistas. Na Suíça, o registro comercial público ZEFIX entrega de bandeja os nomes e cargos, e pequenas empresas e até municípios são alvos recorrentes; já houve casos locais de fraude do CEO com áudio deepfake.

Como o golpe funciona

1. Os golpistas pesquisam a empresa (muitas vezes pelo registro comercial público) pra descobrir nomes e cargos.
2. Um e-mail - ou, cada vez mais, uma chamada de voz/vídeo deepfake com IA - imita o CEO exigindo uma transferência urgente e confidencial.
3. Na variante da fatura, o e-mail de um fornecedor é invadido e o IBAN numa fatura real é trocado.
4. O funcionário, sob pressão de tempo e hierarquia, faz o pagamento.
5. O dinheiro some rápido pro exterior, passando por contas de laranja.

Sinais de alerta

• Urgência e segredo incomuns num pedido de pagamento 'do chefe'.
• Um fornecedor anunciando de repente novos dados bancários numa fatura.
• Pedidos que pulam os procedimentos normais de aprovação.
• Domínios de e-mail do remetente ou endereços de resposta levemente alterados.

Como se proteger

• Confirma qualquer instrução de pagamento incomum ou alterada por um segundo canal conhecido (liga de volta num número conhecido).
• Exige dupla aprovação pra pagamentos acima de um valor.
• Confirma mudanças de dados bancários de fornecedor direto com um contato conhecido.
• Treina a equipe pra saber que 'o CEO' pode ser falsificado, inclusive por voz/vídeo com IA.

Eine Angestellte erhält einen 'dringenden' Zahlungsauftrag, der vom CEO zu kommen scheint, oder eine Rechnung eines echten Lieferanten mit ausgetauschten Bankdaten. So landet das Geld der Firma bei den Betrügern. In der Schweiz liefert das öffentliche Handelsregister ZEFIX Namen und Funktionen frei Haus, und kleine Firmen und sogar Gemeinden sind wiederkehrende Ziele; es gab bereits lokale Fälle von CEO-Betrug mit Deepfake-Audio.

So funktioniert die Masche

1. Die Betrüger recherchieren die Firma (oft über das öffentliche Handelsregister), um Namen und Funktionen herauszufinden.
2. Ein E-Mail - oder immer öfter ein KI-Deepfake-Sprach-/Videoanruf - imitiert den CEO und verlangt eine dringende, vertrauliche Überweisung.
3. Bei der Rechnungsvariante wird das E-Mail eines Lieferanten gehackt und die IBAN auf einer echten Rechnung ausgetauscht.
4. Die Angestellte macht unter Zeit- und Hierarchiedruck die Zahlung.
5. Das Geld wird schnell ins Ausland verschoben, über Mittelsmann-Konten.

Warnsignale

• Ungewöhnliche Dringlichkeit und Geheimhaltung bei einer Zahlungsanforderung 'vom Chef'.
• Ein Lieferant, der plötzlich neue Bankdaten auf einer Rechnung angibt.
• Anfragen, die die normalen Freigabeverfahren umgehen.
• Leicht veränderte Absender-E-Mail-Domains oder Antwortadressen.

So schützt du dich

• Bestätige jede ungewöhnliche oder geänderte Zahlungsanweisung über einen zweiten, bekannten Kanal (ruf auf einer bekannten Nummer zurück).
• Verlange eine Doppelfreigabe für Zahlungen über einem bestimmten Betrag.
• Bestätige Änderungen der Bankdaten eines Lieferanten direkt mit einem bekannten Kontakt.
• Schule das Team, dass 'der CEO' gefälscht sein kann, auch per KI-Stimme/Video.

An employee receives an 'urgent' payment order that seems to come from the CEO, or an invoice from a real supplier with the bank details swapped. That's how the company's money ends up with the scammers. In Switzerland, the public commercial register ZEFIX hands over names and roles for free, and small firms and even municipalities are recurring targets; there have already been local cases of CEO fraud using deepfake audio.

How the scam works

1. The scammers research the company (often via the public commercial register) to find out names and roles.
2. An email - or, increasingly, an AI deepfake voice/video call - imitates the CEO demanding an urgent, confidential transfer.
3. In the invoice variant, a supplier's email is hacked and the IBAN on a real invoice is swapped.
4. The employee, under time and hierarchy pressure, makes the payment.
5. The money is quickly moved abroad, through mule accounts.

Warning signs

• Unusual urgency and secrecy in a payment request 'from the boss'.
• A supplier suddenly announcing new bank details on an invoice.
• Requests that bypass the normal approval procedures.
• Slightly altered sender email domains or reply-to addresses.

How to protect yourself

• Confirm any unusual or changed payment instruction via a second, known channel (call back on a known number).
• Require dual approval for payments above a certain amount.
• Confirm supplier bank-detail changes directly with a known contact.
• Train the team that 'the CEO' can be faked, including by AI voice/video.

Un empleado recibe una orden de pago 'urgente' que parece venir del CEO, o una factura de un proveedor real con los datos bancarios cambiados. Así el dinero de la empresa acaba en manos de los estafadores. En Suiza, el registro mercantil público ZEFIX entrega nombres y cargos gratis, y las pequeñas empresas e incluso los municipios son objetivos recurrentes; ya ha habido casos locales de fraude del CEO con audio deepfake.

Cómo funciona la estafa

1. The scammers research the company (often via the public commercial register) to find out names and roles.
2. An email - or, increasingly, an AI deepfake voice/video call - imitates the CEO demanding an urgent, confidential transfer.
3. In the invoice variant, a supplier's email is hacked and the IBAN on a real invoice is swapped.
4. The employee, under time and hierarchy pressure, makes the payment.
5. The money is quickly moved abroad, through mule accounts.

Señales de alerta

• Unusual urgency and secrecy in a payment request 'from the boss'.
• A supplier suddenly announcing new bank details on an invoice.
• Requests that bypass the normal approval procedures.
• Slightly altered sender email domains or reply-to addresses.

Cómo protegerte

• Confirm any unusual or changed payment instruction via a second, known channel (call back on a known number).
• Require dual approval for payments above a certain amount.
• Confirm supplier bank-detail changes directly with a known contact.
• Train the team that 'the CEO' can be faked, including by AI voice/video.

Un employé reçoit un ordre de paiement 'urgent' qui semble venir du PDG, ou une facture d'un vrai fournisseur avec les coordonnées bancaires modifiées. C'est ainsi que l'argent de l'entreprise finit chez les escrocs. En Suisse, le registre du commerce public ZEFIX livre gratuitement noms et fonctions, et les petites entreprises et même les communes sont des cibles récurrentes ; il y a déjà eu des cas locaux de fraude au PDG avec de l'audio deepfake.

Comment l'arnaque fonctionne

1. The scammers research the company (often via the public commercial register) to find out names and roles.
2. An email - or, increasingly, an AI deepfake voice/video call - imitates the CEO demanding an urgent, confidential transfer.
3. In the invoice variant, a supplier's email is hacked and the IBAN on a real invoice is swapped.
4. The employee, under time and hierarchy pressure, makes the payment.
5. The money is quickly moved abroad, through mule accounts.

Signaux d'alerte

• Unusual urgency and secrecy in a payment request 'from the boss'.
• A supplier suddenly announcing new bank details on an invoice.
• Requests that bypass the normal approval procedures.
• Slightly altered sender email domains or reply-to addresses.

Comment te protéger

• Confirm any unusual or changed payment instruction via a second, known channel (call back on a known number).
• Require dual approval for payments above a certain amount.
• Confirm supplier bank-detail changes directly with a known contact.
• Train the team that 'the CEO' can be faked, including by AI voice/video.

Un dipendente riceve un ordine di pagamento 'urgente' che sembra venire dal CEO, o una fattura di un fornitore reale con i dati bancari sostituiti. Così i soldi dell'azienda finiscono ai truffatori. In Svizzera, il registro di commercio pubblico ZEFIX fornisce gratis nomi e ruoli, e piccole imprese e persino comuni sono bersagli ricorrenti; ci sono già stati casi locali di frode del CEO con audio deepfake.

Come funziona la truffa

1. The scammers research the company (often via the public commercial register) to find out names and roles.
2. An email - or, increasingly, an AI deepfake voice/video call - imitates the CEO demanding an urgent, confidential transfer.
3. In the invoice variant, a supplier's email is hacked and the IBAN on a real invoice is swapped.
4. The employee, under time and hierarchy pressure, makes the payment.
5. The money is quickly moved abroad, through mule accounts.

Segnali d'allarme

• Unusual urgency and secrecy in a payment request 'from the boss'.
• A supplier suddenly announcing new bank details on an invoice.
• Requests that bypass the normal approval procedures.
• Slightly altered sender email domains or reply-to addresses.

Come proteggerti

• Confirm any unusual or changed payment instruction via a second, known channel (call back on a known number).
• Require dual approval for payments above a certain amount.
• Confirm supplier bank-detail changes directly with a known contact.
• Train the team that 'the CEO' can be faked, including by AI voice/video.