Single high-value corporate wire
5Extremely likely3Major15
A CFO-sounding call authorises a transfer that policy said needed two humans in a room.
12automated residualNeeds reviewAt or under 12
Voice-clone executive and family fraud
Owner · Banks, corporates, carriers
CapabilityAffordanceImpact domainHarm-adjacent
Statement (NASA form)
Given that cloned executive and family voices are already being used to bypass approval chains and extract funds, there is a possibility of an organisation or household treating a synthetic voice as an authentic instruction resulting in direct financial loss, and the collapse of voice as an authenticator.
- Condition
- cloned executive and family voices are already being used to bypass approval chains and extract funds
- Departure
- an organisation or household treating a synthetic voice as an authentic instruction
- Impact
- direct financial loss, and the collapse of voice as an authenticator
VC + institute corroboration
Experimental share of compiled public capital that names this risk. Not a certified residual.
$3.0Mexperimental share · $0k private / $3.0M institute · thin corroboration
- CAISI · ~$3.0M of published budget mapped here
3 public sources · OECD AIM · OECD AIM · AIID / NTV
Worst scenario
4×2
Likely × Minor
Urgency
4
Expedite · This month
Inherent composite
20
Worst 15 + urgency
Residual composite
12
Under working threshold
This one is not waiting for next year’s model. Voice clones are cheap, the attack is social, and the control (callback on a known number, never on the inbound line) is well understood and still skipped under urgency.
Pathway fragment
Simple upstream → via → downstream notes. Not a causal graph. Experimental.
Upstream
- Cheap voice clones
- Voice used as authenticator
- Urgency in approval chains
Via
- Inbound call treated as the person
- Transfer or reset issued
Downstream
- Direct financial loss
- Collapse of voice as identity
Assumptions · Callback-on-a-known-number is counted as landed at large corporates, not universally.
Human calibration
Override is stored on this desk only. It does not make the score official.
Failure scenarios
Each scenario has its own likelihood and consequence. The risk takes the most severe cell. Residual applies implemented mitigations to every scenario, then re-ranks.
Vendor-master compromise
4Likely3Major12
A cloned AP clerk changes a supplier’s bank details. Losses compound across invoices.
Industrialised family-emergency campaign
3Probable4Critical12
Thousands of households hit in a week from scraped voicemail and social audio.
Examples
Executive impersonation
Voice-clone attacks are being used to impersonate executives and bypass approval chains for transfers and vendor changes.
Family emergency variant
The same stack is used against households: a child’s voice, a crash, a request for an immediate transfer.
Call-centre defeat
Voiceprint authentication at banks and carriers is now an asset for the attacker, not a control.
Contributing signals
X posts on the desk that evidence this risk. A signal can contribute to more than one risk.
Voice-clone attacks impersonating executives to bypass approvals.
AffordanceImpact domainCap-adjacent
Mitigations
Residual assumes only items marked in place. Highlighted rows are the remaining work needed to reach a composite of 12.
In placeCorporate treasury and banks
Out-of-band confirmation on a known number
No funds move on the inbound call. Ever. The callback number comes from the directory, not the caller.
Corporate treasury and banks · expedited 3 days · normal 3 weeks · −1 L · −1 C · −1 U
In progressBanks and carriers
Retire voiceprint as an authenticator
Voice is now evidence of possession of a file, not of a person.
Banks and carriers · expedited 3 weeks · normal 3 months · −1 L · −0 C · −1 U
ProposedVendors and banks
Real-time clone detection on high-risk lines
Treasury and helpdesk trunks run a detector; fail closed to a human protocol.
Vendors and banks · expedited 4 weeks · normal 4 months · −1 L · −0 C · −0 U