When Social Engineering Becomes More Convincing
In a world where trust is fragile, threat actors have always exploited psychology through social engineering. However, sophisticated artificial intelligence has added a new dimension: deepfake fraud. In 2026, these AI-generated deceptions are emerging as highly effective threats.
Deepfakes use AI to create hyper-realistic fabricated audio, video or images. They are now being deployed at scale. The statistics are alarming: deepfake attacks are reportedly occurring every five minutes. A significant 63% of cybersecurity professionals identify AI-driven social engineering as the top cyber threat to their organisations this year.
How Deepfake Fraud Targets Enterprises
Imagine a scenario where a CFO receives a call from what sounds exactly like the CEO. The call instructs a confidential wire transfer. Or consider a seemingly legitimate video conference where a senior executive appears to authorise a sensitive data transfer. These are the realities of deepfake fraud.
The hallmarks of these attacks often remain consistent with social engineering: urgency, requests for secrecy, unusual payment instructions or pressure to bypass normal approval processes. However, the deepfake element adds a layer of credibility. It makes it incredibly difficult for even vigilant employees to discern deception.
Building a Multi-Layered Defence Strategy
For enterprises, defending against deepfake fraud and advanced social engineering requires a multi-layered strategy. Firstly, enhanced employee training is paramount. Beyond recognising phishing emails, employees need to be educated on the nuances of deepfake technology and the psychological tactics employed by attackers.
Secondly, robust technical controls are essential. This means implementing multi-factor authentication (MFA) that goes beyond simple SMS or voice verification. It also involves exploring biometrics and deploying advanced threat detection systems.
Creating a Culture of Verification
A “zero trust” approach to communication becomes increasingly vital. Finally, fostering a culture where employees feel empowered to question requests without fear of reprisal is crucial. This involves establishing out-of-band communication channels for verifying sensitive requests.
