What is a deepfake scam, and could it target my business?

A deepfake scam uses artificial intelligence to impersonate a real person — cloning their voice, or even their face on a video call — to make a fraudulent request look completely genuine. In 2026 it's one of the fastest-growing threats to businesses of every size.

Why it works, and why small businesses aren't safe

The technology has become alarmingly cheap and easy. As little as a few seconds of someone's audio — from a voicemail, a webinar, or social media — can produce a highly convincing voice clone. Attackers don't need to hack anything; they just need to sound like your director, your accountant or a supplier. And because small businesses often have fewer checks in place, they're attractive, easy targets — the myth that "criminals only go after big companies" is exactly what makes SMBs vulnerable.

What it looks like

• A phone call that sounds like your boss, urgently asking you to pay an invoice or buy gift cards.
• A voice message from a "supplier" confirming their bank details have changed.
• A video call with what appears to be a senior manager authorising a transfer.

The financial damage is real: globally, businesses have lost hundreds of millions to AI voice and video fraud, including one engineering firm tricked out of tens of millions on a single fake video call.

The defence that actually works

You can't reliably spot a good deepfake — so the answer isn't better eyes or ears, it's process. Never let a voice or video call alone authorise money or data. Any unusual or urgent request to pay, change bank details or reset access must be verified through a separate, trusted channel. That single habit defeats the scam. To build these controls into your business, see our managed cyber security or call (08) 9325 1196.