IDBank has warned about the “Fake Boss” or “CEO fraud” scheme, in which criminals pose as a company executive or direct supervisor and demand an urgent money transfer, a change in payment details, or the release of confidential documents. The bank says such attacks often target employees who have access to company funds or sensitive corporate information.
The scheme relies on the authority of senior management and psychological pressure on staff. Fraudsters may create a messenger account using the executive’s real name and photo, spoof an email address, or gain unauthorized access to the real account. In more sophisticated cases, they also use voice or video deepfakes.
IDBank notes that these messages almost always stress three triggers: “urgent,” “confidential,” and “personal instruction.” According to the bank, that combination should prompt maximum caution, even if the message appears to come from a familiar address or a profile carrying the director’s actual photo.
The bank also points to a legal risk. If an employee initiates a payment or submits a debit instruction through official banking channels, the bank’s automated systems may treat the transaction as fully authorized and legitimate. In that case, proving fraud and recovering the funds through a payment dispute process can become almost impossible.
IDBank recommends double-checking any unusual instruction, contacting the executive through a verified phone number or confirming the request in person, and avoiding reliance on the same message thread in which the order arrived. The bank also says large and non-standard transfers should be subject to dual authorization, with approval from at least two designated employees.
