When a lawyer’s voice is cloned: verifying payment and deal instructions (the Fideuram case)

Last checked 12 November 2026. General information, not legal advice. TimeBinder does not detect AI or prevent fraud, and a dated record is not proof of authorship, ownership or originality.

What was reported in the Fideuram case

The facts below come from press reports. Several rest on unnamed sources or on a court order as described by news agencies, and the investigation is ongoing, so treat details as provisional.

• The set-up. In February 2026 the then-chairman of Fideuram, the private-banking arm of Intesa Sanpaolo, received a WhatsApp message that appeared to come from Intesa’s chief executive, asking for help with an urgent overseas transaction (Reuters, 25 September 2026).
• The “lawyer”. A follow-up phone call appeared to come from a senior partner at a well-known law firm and confirmed the instruction. According to Reuters’ sources, the voice was replicated with AI. Reports describe an impersonation that used a real lawyer’s name; nothing in them suggests the lawyer took part.
• The paperwork. Italian news agency ANSA, describing the judge’s order, reports that eleven documents were sent, including a confidentiality agreement and a special power of attorney that appeared to be signed by the chief executive.
• The money. About €95 million was transferred, mainly to accounts in China and Hong Kong. Reports say a large part has since been recovered through cooperation between authorities in China, Portugal and Italy. Reuters’ sources put the shortfall at about €36 million; ANSA, citing the court records, gives €39.5 million. The reports say the rest was converted into cryptocurrency.
• The investigation. Milan prosecutors are investigating a foreign national on suspicion of computer fraud. Reuters’ sources say neither the former chairman nor other Fideuram executives are under investigation. Nobody has been convicted on these reports.

ANSA also reports similar episodes at other Italian banks, which suggests this was a pattern, not a one-off.

Why this works on careful people

The pattern combines familiar social-engineering steps with new tools. A trusted name starts the story. A second trusted voice “confirms” it, so the target feels they have checked. Documents that look right arrive on the same channel. Urgency and secrecy (here, a supposed leak and a confidential deal) discourage the target from asking anyone else.

The weak point is that every proof arrived through channels the attacker controlled. A confirmation from a second person is only a check if the target reached that person independently. A voice on an inbound call, a familiar-looking number or a PDF with a signature image does not do that, because each can be faked or spoofed. We cannot say from outside whether any particular warning sign would have been visible in this case.

Why law firms are in the frame

Lawyers sit in the middle of high-value instructions: completion funds, escrow, share purchases, settlement payments, trust-account transfers. Their names and voices carry trust, and many firms publish photos, bios, talks and recordings that can be copied. A law firm can be the person being impersonated, as here, or the target of a request that appears to come from a client.

That makes verification a routine to agree with clients before a matter starts, not something to improvise under pressure. Regulators and professional bodies in many places publish their own guidance on payment-redirection fraud, so follow yours first.

A verification routine a firm can adopt

1. Fix the channel in advance. At engagement, agree with each client how payment details and instructions are given, and who the named contacts are. Record their numbers from a source you trust, not from the message you are checking.
2. Call back on a number you already hold. If an instruction or a change of bank details arrives, end the conversation and ring the known number yourself. Never use contact details offered in the message or call you just received.
3. Require two people. No money moves, and no signed power of attorney is relied on, until two people have each completed an independent check. Pressure to skip this step is itself a warning sign.
4. Treat secrecy and urgency as signals. A request that says “do not tell anyone” and “it must go today” deserves a pause, not speed.
5. Use a pre-agreed challenge. Some firms and families agree a phrase that a cloned voice would not know. It is not foolproof, but it is cheap.
6. Verify documents at the source. Ask the supposed signatory’s office, through a known contact, to confirm that the document exists and is theirs. Do not rely on how a signature looks.
7. Have an incident plan. The reported recovery of more than half the money came from fast alerts to banks and authorities across borders. Know in advance who to ring at your bank, your insurer and the police, and in what order.

What to record, and what a dated record adds

If a payment or deal is later disputed, the questions will be what was received, in what form, and when. These steps help whatever tools you use:

• Keep the original messages, call logs, emails with full headers and every attachment exactly as received. Export chats rather than relying on screenshots. Our screenshots guide explains the limits.
• Keep a short, contemporaneous log: who you spoke to, on what number, at what time, and what you did to verify.
• Fingerprint the pack at the time. You can make a SHA-256 fingerprint of each file in your browser with our hash checker; the file stays on your device. A TimeBind then records that those exact files existed no later than a recorded time and still match. See how to prove a file existed before a date.
• Follow a consistent chain-of-custody log so you can show who held each file.

A TimeBind would not have stopped this fraud, and it does not show that a message was genuine or who sent it. It is a dated record of the exact files you held, which can help later when you need to show what you received and when. For the wider legal picture, see our guide for lawyers on AI forgeries and backdating, deepfake evidence and the rules and the legal hub.

Limits

This page is a summary of press reports, not an account of what happened inside any firm or bank, and not a compliance standard. It does not say any named organisation was careless. Fraud routines, insurance and professional obligations differ by country and by practice area, so take advice from your regulator, insurer or counsel.

Tools that can help

There is no affiliate link on this page: nothing here depends on a paid third-party tool. Our affiliate disclosure explains when we do use them. Related terms such as voice cloning and deepfake are defined in the AI fakes and file-integrity glossary.

Sources checked

• Reuters via StreetInsider, AI messaging scam costs Italy’s top bank Intesa millions, sources say, 25 September 2026.
• ANSA, Truffa da 39,5 milioni all’ex capo di Fideuram, un indagato, 25 September 2026 (Italian); the eleven documents and the €39.5 million figure, which ANSA attributes to the court records, come from here.
• Il Sole 24 ORE (English edition), 95 million scam at Fideuram, 25 September 2026: €40 million returned by a Chinese institution and €13 million seized in Portugal; the article cites €36 million still unaccounted for. Its page summary uses a different recovery figure, so we rely on the body text.

For a quick, non-technical pass over a suspicious call or payment instruction, see the free AI Voice Scam Red-Flags Checker. It is a checklist, not a detector: it does not analyse the audio or prove a voice was cloned, and it is not legal advice.

Start a dated record of the files you hold, while they are as you received them

Your first Pooled TimeBind is free, with no credit card required. After that, TimeBinds start from US$5, and an ASAP TimeBind is US$15. Click here to start, or see plans and pricing.