A Finance Worker Joined a Normal Video Conference. He Wired $25.6 Million to People Who Did Not Exist.

By The Editor at The Scam Playbook · 8 min read · Updated for 2026

In January 2024, a finance employee at the British multinational engineering firm Arup — the company behind the Sydney Opera House and the Beijing National Stadium — joined what looked like a routine video call with his chief financial officer and several colleagues. The CFO asked him to process fifteen wire transfers to overseas accounts. The employee complied. The total amount sent: $25.6 million. Every face on the video call had been generated by artificial intelligence.

The case was reported to Hong Kong police in January 2024 and publicly disclosed by Arup in May. It is now widely cited — by CNN, Fortune, and the BBC — as the first publicly documented use of live deepfake video in a major corporate fraud. It is also, by a wide margin, the most expensive single demonstration that the "video chat to verify" defense recommended by most banks since the late 2010s is no longer reliable in any form.

For most of the last decade, the standard advice from banks, federal agencies, and consumer-protection groups, when something felt off about a phone call or email, was: "Get on a video call. Verify in person." That advice was reasonable in 2018. It was already shaky by 2023. As of January 2024, it is dead.

This Is Not Just a Corporate Story

The Arup case made global headlines because of its size. But the same technology — the same voice cloning, the same deepfake video, the same personalized social-engineering scripts — is now being used at smaller scale, against individual families, every day in the United States.

Three months before the Arup disclosure, an Arizona mother named Jennifer DeStefano testified before the United States Senate Judiciary Committee about a phone call she had received roughly a year earlier. The voice on the line was her teenage daughter Brianna, sobbing, saying she had been kidnapped. A man took over and demanded a $1 million ransom, later reduced to $50,000.

DeStefano was on the verge of sending the money when she reached her husband, who was with Brianna at home. Their daughter had not been kidnapped. She had never been on the call. The voice DeStefano heard, the voice that sounded exactly like her teenage daughter sobbing, was an AI-generated clone, almost certainly built from social-media clips of Brianna's actual voice.

DeStefano was lucky. She reached her husband in time. Federal data suggests thousands of families now receive similar calls every year, and the rate is climbing. The technology is not getting harder to use. It is getting easier, cheaper, and more accurate.

The Scale of the Shift

Three publicly reported figures, drawn from federal databases and watchdog organizations, capture the change between 2023 and 2025.

The $146,000 California average is particularly striking. It reflects what happens when the new generation of "pig butchering" scams — long-haul, relationship-based investment frauds run from organized criminal operations in Southeast Asia — meets a successful American professional with retirement savings. The median loss is far smaller, but the high-end losses pull the average up sharply.

For an adult 50 or older with retirement assets, a paid-off home, or an inheritance to pass to children, the relevant question is not "will I be approached?" but "when?" The criminal networks are not selective. They are scraping social media, LinkedIn, alumni directories, and obituary pages for targets. Anyone with assets is in the dataset.

Why the Old Defenses Stopped Working

Three things became cheap on the public internet between January 2023 and December 2024.

• Voice cloning from three seconds of audio. Multiple consumer-grade tools now achieve recognizable voice clones from TikTok clips, voicemail greetings, or church-livestream snippets. The technology was research-only in 2022. By 2024 it was a commodity.
• AI-written phishing in fluent English. The "check for typos and broken grammar" rule that was standard fraud-prevention advice through the 2010s no longer applies. AI now writes English better than the average bank fraud-alert email.
• Real-time deepfake video. The Arup case proved this is no longer hypothetical. The "video chat to verify" defense, recommended by banks and law enforcement through 2023, was broken in production by January 2024.

The advice your bank still gives you was written for the scam landscape of 2015. The scams of 2026 require new defenses. The old ones have been tested at scale, and they no longer hold.

The Five Things That Still Work

The editorial team at Vital Years Press spent two years documenting the scams currently active against Americans 50 and older — and identifying the defenses that still hold up against AI voice cloning, deepfake video, and personalized phishing.

The result is Don't Fall for It — 50 Scams Targeting Adults 50+ (Including the New AI Era). It is 133 illustrated pages. Every dollar figure is independently sourced from federal databases, court records, and verified journalism. Every scam profile follows the same six-part shape: what it is, how it works, two real and sourced cases, the red flags that still apply, the one-sentence defense to use in the moment, and what to do if you have already engaged.

The book closes with five universal defenses. Three have worked for decades and will keep working. One has an honestly-flagged shelf life through mid-2027. And one is so simple it can be done at the dinner table tonight, and it neutralizes the AI voice clone scam category entirely.

Defense #1, the highest-value action in the book:

Pick one word. Share it once, in person, with your spouse, your adult children, and any grandchildren old enough to use a phone. Never text it. Never email it. Never store it in a note titled "code word." Anyone calling you in an emergency must say the word before you act.

AI can clone any voice. It cannot read your mind, and it cannot guess a word that has never been spoken in any recording, email, or social-media post. If Jennifer DeStefano's family had used Defense #1, the call that nearly cost them $50,000 would have ended in seven seconds.

The Math

$146,306

Average loss per cryptocurrency scam victim, California Attorney General prosecutions, 2024

— vs —

$32.94

The Scam Playbook (30% off, summer sale, no code required)

READ THE PLAYBOOK NOW →

The book costs less than one tank of gas. Less than a streaming subscription for a quarter. Roughly one three-thousandth of what the average California cryptocurrency-scam victim lost in 2024. Even if it prevents one bad decision, once, in the next decade, the return on this investment is between 200x and 30,000x.

What You Get

• 133 illustrated pages, broken into 50 self-contained two-page scam profiles
• 8 categories: phone & voice, mail & text, email & online, romance, investment, health & Medicare, home, identity
• 5 universal defenses in the closing chapter
• 3 bonus pages built for your phone, including a screenshot-ready card with the four questions to ask before any high-pressure financial decision
• 45 verified hotlines and URLs for reporting and recovery
• Instant PDF download, works on every device, print-friendly
• Free yearly updates for life — when the scam landscape changes, your edition does too

What to Do Tonight

If you do nothing else after reading this, do two things tonight.

First, pick a family code word. Share it at dinner. Do not text it. Do not email it. Tell your spouse, your adult children, and any grandchildren old enough to use a phone. This single five-minute conversation, repeated once a year, is the most powerful fraud-prevention behavior available to American families in 2026. It costs nothing. It works against every voice clone in production.

Second, send this article to one person who needs it. The scam industry's single largest advantage is the silence that surrounds it. Most victims never tell their families. Most families never warn each other. Breaking that silence, even with one person, materially shifts the math.

The book covers everything else. It is here when you are ready.

— The Editorial Team at The Scam Playbook. Vital Years Press. Independently researched. Independently published. All cited cases and figures are drawn from publicly reported journalism, sworn Congressional testimony, and federal or state law-enforcement disclosures.