Individuals Charged in $129 Million AI-Facilitated Scam

Three individuals have been charged in a New York District Court for allegedly using artificial intelligence to steal over $129 million from various companies around the world.

Their targets included hospital systems in Missouri and California, as well as a bank in Rhode Island, a financial technology company in the UK, a mutual fund company in Massachusetts, and a pet food company in Florida. The indictment alleges that the defendants exploited vulnerabilities in these companies' accounting departments to carry out their scheme.

The trio, who have adopted nicknames such as "Rocky Balboa" and "Superman Cash", also allegedly engaged in money laundering activities with associates based in Israel and the UAE. Lawyers for two of the defendants, Soall and Sheetrit, were contacted for comment but did not immediately respond to requests.

Emails purporting to be from CEOs were sent to employees of several companies, requesting assistance with confidential financial transactions. These emails typically requested urgent action to facilitate a large transaction.

The defendants would then follow up with phone or video calls, during which they used AI to mimic the voice and sometimes the image of the CEO. This added an extra layer of authenticity to the scam, making it even harder for employees to detect the deception.

In some cases, the defendants would also impersonate attorneys at major law firms, further complicating matters for the victims. These impersonated attorneys would then instruct the employees to transfer large sums of money to overseas bank accounts.

The case highlights the growing threat of technology-enabled crimes, and the FBI is determined to stay ahead of these emerging threats. The agency is committed to rapidly adapting its capabilities to identify, investigate, and disrupt those who use advanced technologies for illicit purposes.

The defendants face severe penalties if convicted, with a maximum sentence of 20 years in prison, except for aggravated identity theft, which carries a maximum sentence of two years. This underscores the gravity of the alleged crimes and the importance of bringing perpetrators to justice.