Abstract: Generative AI has made it cheap to clone an executive's voice or face, turning the familiar "CEO fraud" email into live calls and video meetings in which the boss appears to be present. This article argues that the central vulnerability is not technical but hierarchical. Recent survey evidence from Singapore shows that half of office workers are uncomfortable challenging a senior executive's request, and that senior managers, the group most confident in spotting fakes, are the most likely to comply with a cloned CEO voice before verifying. Drawing on research on deepfake detection, obedience, authority gradients, employee voice, and phishing training, together with documented incidents at Arup, WPP, Ferrari, LastPass, Wiz, Retool, a UK energy firm, a Singapore multinational, and the US State Department, the article identifies five evidence-based responses: leaders who license the pause, out-of-band verification protocols, payment controls that do not rely on detection, hardened identity workflows, and role-specific practice with easy reporting. It closes with three pillars for building long-term verification capability.
Powered by the WRKdefined Podcast Network.


