US charges 3 men who used AI to pose as CEOs and steal $129 million

A Manhattan federal indictment unsealed on Thursday, US time, says three men used artificial intelligence to copy the voices and faces of chief executives and law firm partners, then persuaded employees to wire them more than $129 million. Prosecutors charged Jacob Soall, Sharon Hazan and Guy Sheetrit with conspiracy, money laundering and other counts. All three were arrested in Europe and are awaiting extradition to the United States. How the scheme allegedly worked The group usually began with an employee at a target company, posing as that company’s chief executive and asking for help with a confidential financial transaction, according to the indictment. The supposed executive then pointed the employee to lawyers at large international firms who were handling the deal. Those lawyers were the same conspirators, using AI to mimic their voices and images, prosecutors said. The employee would eventually be told to send a large payment to an account controlled by the group. The indictment covers conduct from July 2024 to February 2026. The companies named in the indictment The indictment lists losses at six companies by name and amount, among other victims around the world. Victim Loss Hospital system based in Missouri $4,829,580 Bank based in Rhode Island $2,684,580 Hospital system based in California $2,968,497 Financial technology company based in the United Kingdom $11,578,474 Mutual fund company based in Massachusetts $4,639,918 Pet food company based in Florida $5,242,747 Where the money went Prosecutors said the group routed the money through accounts in the United States, Spain, Portugal, Greece, the United Arab Emirates, Singapore, Austria, Slovakia and China. The proceeds were then converted into cryptocurrency to hide their source. Soall kept a handwritten script titled “Lawyer Call” for his role as a fake attorney. Hazan boasted that he had laundered money since 1994 and had handled more than $400 million in the three years, according to the Justice Department. The defendants and the charges Soall, 41, of Marbella, Spain and the United Kingdom, was arrested in Spain in June. Hazan, 54, of Israel, was arrested in Spain in August, and Sheetrit, 42, of Israel and the United Arab Emirates, was arrested in Britain in September. Hazan was previously convicted in Manhattan federal court of conspiracy to commit bank fraud in 2008. The current charges carry a maximum sentence of 20 years in prison. What prosecutors said “AI technology offers tremendous potential. But the public should recognize that there are some who seek to use this emerging technology to pursue criminal goals,” US Attorney Jamie McDonald said. James Barnacle Jr., the assistant director in charge of the FBI’s New York field office, said criminals are weaponizing emerging technologies and that the bureau is adapting its capabilities to identify and disrupt them. Why this matters for Filipino firms The case describes a playbook Philippine banks and technology companies have been warning : a familiar voice on the phone, an urgent payment, and a request to keep the transaction quiet. PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

Prosecutors charged Jacob Soall, Sharon Hazan and Guy Sheetrit with conspiracy, money laundering and other counts. All three were arrested in Europe and are awaiting extradition to the United States. How the scheme allegedly worked The group usually began with an employee at a target company, posing as that company’s chief executive and asking for help with a confidential financial transaction, according to the indictment. The supposed executive then pointed the employee to lawyers at large international firms who were handling the deal. Those lawyers were the same conspirators, using AI to mimic their voices and images, prosecutors said. The employee would eventually be told to send a large payment to an account controlled by the group. The indictment covers conduct from July 2024 to February 2026. The companies named in the indictment The indictment lists losses at six companies by name and amount, among other victims around the world. Victim Loss Hospital system based in Missouri $4,829,580 Bank based in Rhode Island $2,684,580 Hospital system based in California $2,968,497 Financial technology company based in the United Kingdom $11,578,474 Mutual fund company based in Massachusetts $4,639,918 Pet food company based in Florida $5,242,747 Where the money went Prosecutors said the group routed the money through accounts in the United States, Spain, Portugal, Greece, the United Arab Emirates, Singapore, Austria, Slovakia and China. The proceeds were then converted into cryptocurrency to hide their source. Soall kept a handwritten script titled “Lawyer Call” for his role as a fake attorney. Hazan boasted that he had laundered money since 1994 and had handled more than $400 million in the three years, according to the Justice Department. The defendants and the charges Soall, 41, of Marbella, Spain and the United Kingdom, was arrested in Spain in June. Hazan, 54, of Israel, was arrested in Spain in August, and Sheetrit, 42, of Israel and the United Arab Emirates, was arrested in Britain in September. Hazan was previously convicted in Manhattan federal court of conspiracy to commit bank fraud in 2008. The current charges carry a maximum sentence of 20 years in prison. What prosecutors said “AI technology offers tremendous potential. But the public should recognize that there are some who seek to use this emerging technology to pursue criminal goals,” US Attorney Jamie McDonald said. James Barnacle Jr., the assistant director in charge of the FBI’s New York field office, said criminals are weaponizing emerging technologies and that the bureau is adapting its capabilities to identify and disrupt them. Why this matters for Filipino firms The case describes a playbook Philippine banks and technology companies have been warning : a familiar voice on the phone, an urgent payment, and a request to keep the transaction quiet. PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

How the scheme allegedly worked

The group usually began with an employee at a target company, posing as that company’s chief executive and asking for help with a confidential financial transaction, according to the indictment. The supposed executive then pointed the employee to lawyers at large international firms who were handling the deal. Those lawyers were the same conspirators, using AI to mimic their voices and images, prosecutors said. The employee would eventually be told to send a large payment to an account controlled by the group. The indictment covers conduct from July 2024 to February 2026. The companies named in the indictment The indictment lists losses at six companies by name and amount, among other victims around the world. Victim Loss Hospital system based in Missouri $4,829,580 Bank based in Rhode Island $2,684,580 Hospital system based in California $2,968,497 Financial technology company based in the United Kingdom $11,578,474 Mutual fund company based in Massachusetts $4,639,918 Pet food company based in Florida $5,242,747 Where the money went Prosecutors said the group routed the money through accounts in the United States, Spain, Portugal, Greece, the United Arab Emirates, Singapore, Austria, Slovakia and China. The proceeds were then converted into cryptocurrency to hide their source. Soall kept a handwritten script titled “Lawyer Call” for his role as a fake attorney. Hazan boasted that he had laundered money since 1994 and had handled more than $400 million in the three years, according to the Justice Department. The defendants and the charges Soall, 41, of Marbella, Spain and the United Kingdom, was arrested in Spain in June. Hazan, 54, of Israel, was arrested in Spain in August, and Sheetrit, 42, of Israel and the United Arab Emirates, was arrested in Britain in September. Hazan was previously convicted in Manhattan federal court of conspiracy to commit bank fraud in 2008. The current charges carry a maximum sentence of 20 years in prison. What prosecutors said “AI technology offers tremendous potential. But the public should recognize that there are some who seek to use this emerging technology to pursue criminal goals,” US Attorney Jamie McDonald said. James Barnacle Jr., the assistant director in charge of the FBI’s New York field office, said criminals are weaponizing emerging technologies and that the bureau is adapting its capabilities to identify and disrupt them. Why this matters for Filipino firms The case describes a playbook Philippine banks and technology companies have been warning : a familiar voice on the phone, an urgent payment, and a request to keep the transaction quiet. PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

The supposed executive then pointed the employee to lawyers at large international firms who were handling the deal. Those lawyers were the same conspirators, using AI to mimic their voices and images, prosecutors said. The employee would eventually be told to send a large payment to an account controlled by the group. The indictment covers conduct from July 2024 to February 2026. The companies named in the indictment The indictment lists losses at six companies by name and amount, among other victims around the world. Victim Loss Hospital system based in Missouri $4,829,580 Bank based in Rhode Island $2,684,580 Hospital system based in California $2,968,497 Financial technology company based in the United Kingdom $11,578,474 Mutual fund company based in Massachusetts $4,639,918 Pet food company based in Florida $5,242,747 Where the money went Prosecutors said the group routed the money through accounts in the United States, Spain, Portugal, Greece, the United Arab Emirates, Singapore, Austria, Slovakia and China. The proceeds were then converted into cryptocurrency to hide their source. Soall kept a handwritten script titled “Lawyer Call” for his role as a fake attorney. Hazan boasted that he had laundered money since 1994 and had handled more than $400 million in the three years, according to the Justice Department. The defendants and the charges Soall, 41, of Marbella, Spain and the United Kingdom, was arrested in Spain in June. Hazan, 54, of Israel, was arrested in Spain in August, and Sheetrit, 42, of Israel and the United Arab Emirates, was arrested in Britain in September. Hazan was previously convicted in Manhattan federal court of conspiracy to commit bank fraud in 2008. The current charges carry a maximum sentence of 20 years in prison. What prosecutors said “AI technology offers tremendous potential. But the public should recognize that there are some who seek to use this emerging technology to pursue criminal goals,” US Attorney Jamie McDonald said. James Barnacle Jr., the assistant director in charge of the FBI’s New York field office, said criminals are weaponizing emerging technologies and that the bureau is adapting its capabilities to identify and disrupt them. Why this matters for Filipino firms The case describes a playbook Philippine banks and technology companies have been warning : a familiar voice on the phone, an urgent payment, and a request to keep the transaction quiet. PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

The employee would eventually be told to send a large payment to an account controlled by the group. The indictment covers conduct from July 2024 to February 2026. The companies named in the indictment The indictment lists losses at six companies by name and amount, among other victims around the world. Victim Loss Hospital system based in Missouri $4,829,580 Bank based in Rhode Island $2,684,580 Hospital system based in California $2,968,497 Financial technology company based in the United Kingdom $11,578,474 Mutual fund company based in Massachusetts $4,639,918 Pet food company based in Florida $5,242,747 Where the money went Prosecutors said the group routed the money through accounts in the United States, Spain, Portugal, Greece, the United Arab Emirates, Singapore, Austria, Slovakia and China. The proceeds were then converted into cryptocurrency to hide their source. Soall kept a handwritten script titled “Lawyer Call” for his role as a fake attorney. Hazan boasted that he had laundered money since 1994 and had handled more than $400 million in the three years, according to the Justice Department. The defendants and the charges Soall, 41, of Marbella, Spain and the United Kingdom, was arrested in Spain in June. Hazan, 54, of Israel, was arrested in Spain in August, and Sheetrit, 42, of Israel and the United Arab Emirates, was arrested in Britain in September. Hazan was previously convicted in Manhattan federal court of conspiracy to commit bank fraud in 2008. The current charges carry a maximum sentence of 20 years in prison. What prosecutors said “AI technology offers tremendous potential. But the public should recognize that there are some who seek to use this emerging technology to pursue criminal goals,” US Attorney Jamie McDonald said. James Barnacle Jr., the assistant director in charge of the FBI’s New York field office, said criminals are weaponizing emerging technologies and that the bureau is adapting its capabilities to identify and disrupt them. Why this matters for Filipino firms The case describes a playbook Philippine banks and technology companies have been warning : a familiar voice on the phone, an urgent payment, and a request to keep the transaction quiet. PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

The companies named in the indictment

The indictment lists losses at six companies by name and amount, among other victims around the world. Victim Loss Hospital system based in Missouri $4,829,580 Bank based in Rhode Island $2,684,580 Hospital system based in California $2,968,497 Financial technology company based in the United Kingdom $11,578,474 Mutual fund company based in Massachusetts $4,639,918 Pet food company based in Florida $5,242,747 Where the money went Prosecutors said the group routed the money through accounts in the United States, Spain, Portugal, Greece, the United Arab Emirates, Singapore, Austria, Slovakia and China. The proceeds were then converted into cryptocurrency to hide their source. Soall kept a handwritten script titled “Lawyer Call” for his role as a fake attorney. Hazan boasted that he had laundered money since 1994 and had handled more than $400 million in the three years, according to the Justice Department. The defendants and the charges Soall, 41, of Marbella, Spain and the United Kingdom, was arrested in Spain in June. Hazan, 54, of Israel, was arrested in Spain in August, and Sheetrit, 42, of Israel and the United Arab Emirates, was arrested in Britain in September. Hazan was previously convicted in Manhattan federal court of conspiracy to commit bank fraud in 2008. The current charges carry a maximum sentence of 20 years in prison. What prosecutors said “AI technology offers tremendous potential. But the public should recognize that there are some who seek to use this emerging technology to pursue criminal goals,” US Attorney Jamie McDonald said. James Barnacle Jr., the assistant director in charge of the FBI’s New York field office, said criminals are weaponizing emerging technologies and that the bureau is adapting its capabilities to identify and disrupt them. Why this matters for Filipino firms The case describes a playbook Philippine banks and technology companies have been warning : a familiar voice on the phone, an urgent payment, and a request to keep the transaction quiet. PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

Prosecutors said the group routed the money through accounts in the United States, Spain, Portugal, Greece, the United Arab Emirates, Singapore, Austria, Slovakia and China. The proceeds were then converted into cryptocurrency to hide their source. Soall kept a handwritten script titled “Lawyer Call” for his role as a fake attorney. Hazan boasted that he had laundered money since 1994 and had handled more than $400 million in the three years, according to the Justice Department. The defendants and the charges Soall, 41, of Marbella, Spain and the United Kingdom, was arrested in Spain in June. Hazan, 54, of Israel, was arrested in Spain in August, and Sheetrit, 42, of Israel and the United Arab Emirates, was arrested in Britain in September. Hazan was previously convicted in Manhattan federal court of conspiracy to commit bank fraud in 2008. The current charges carry a maximum sentence of 20 years in prison. What prosecutors said “AI technology offers tremendous potential. But the public should recognize that there are some who seek to use this emerging technology to pursue criminal goals,” US Attorney Jamie McDonald said. James Barnacle Jr., the assistant director in charge of the FBI’s New York field office, said criminals are weaponizing emerging technologies and that the bureau is adapting its capabilities to identify and disrupt them. Why this matters for Filipino firms The case describes a playbook Philippine banks and technology companies have been warning : a familiar voice on the phone, an urgent payment, and a request to keep the transaction quiet. PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

Soall kept a handwritten script titled “Lawyer Call” for his role as a fake attorney. Hazan boasted that he had laundered money since 1994 and had handled more than $400 million in the three years, according to the Justice Department. The defendants and the charges Soall, 41, of Marbella, Spain and the United Kingdom, was arrested in Spain in June. Hazan, 54, of Israel, was arrested in Spain in August, and Sheetrit, 42, of Israel and the United Arab Emirates, was arrested in Britain in September. Hazan was previously convicted in Manhattan federal court of conspiracy to commit bank fraud in 2008. The current charges carry a maximum sentence of 20 years in prison. What prosecutors said “AI technology offers tremendous potential. But the public should recognize that there are some who seek to use this emerging technology to pursue criminal goals,” US Attorney Jamie McDonald said. James Barnacle Jr., the assistant director in charge of the FBI’s New York field office, said criminals are weaponizing emerging technologies and that the bureau is adapting its capabilities to identify and disrupt them. Why this matters for Filipino firms The case describes a playbook Philippine banks and technology companies have been warning : a familiar voice on the phone, an urgent payment, and a request to keep the transaction quiet. PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

The defendants and the charges

Soall, 41, of Marbella, Spain and the United Kingdom, was arrested in Spain in June. Hazan, 54, of Israel, was arrested in Spain in August, and Sheetrit, 42, of Israel and the United Arab Emirates, was arrested in Britain in September. Hazan was previously convicted in Manhattan federal court of conspiracy to commit bank fraud in 2008. The current charges carry a maximum sentence of 20 years in prison. What prosecutors said “AI technology offers tremendous potential. But the public should recognize that there are some who seek to use this emerging technology to pursue criminal goals,” US Attorney Jamie McDonald said. James Barnacle Jr., the assistant director in charge of the FBI’s New York field office, said criminals are weaponizing emerging technologies and that the bureau is adapting its capabilities to identify and disrupt them. Why this matters for Filipino firms The case describes a playbook Philippine banks and technology companies have been warning : a familiar voice on the phone, an urgent payment, and a request to keep the transaction quiet. PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

Hazan was previously convicted in Manhattan federal court of conspiracy to commit bank fraud in 2008. The current charges carry a maximum sentence of 20 years in prison. What prosecutors said “AI technology offers tremendous potential. But the public should recognize that there are some who seek to use this emerging technology to pursue criminal goals,” US Attorney Jamie McDonald said. James Barnacle Jr., the assistant director in charge of the FBI’s New York field office, said criminals are weaponizing emerging technologies and that the bureau is adapting its capabilities to identify and disrupt them. Why this matters for Filipino firms The case describes a playbook Philippine banks and technology companies have been warning : a familiar voice on the phone, an urgent payment, and a request to keep the transaction quiet. PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

What prosecutors said

“AI technology offers tremendous potential. But the public should recognize that there are some who seek to use this emerging technology to pursue criminal goals,” US Attorney Jamie McDonald said. James Barnacle Jr., the assistant director in charge of the FBI’s New York field office, said criminals are weaponizing emerging technologies and that the bureau is adapting its capabilities to identify and disrupt them. Why this matters for Filipino firms The case describes a playbook Philippine banks and technology companies have been warning : a familiar voice on the phone, an urgent payment, and a request to keep the transaction quiet. PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

James Barnacle Jr., the assistant director in charge of the FBI’s New York field office, said criminals are weaponizing emerging technologies and that the bureau is adapting its capabilities to identify and disrupt them. Why this matters for Filipino firms The case describes a playbook Philippine banks and technology companies have been warning : a familiar voice on the phone, an urgent payment, and a request to keep the transaction quiet. PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

Why this matters for Filipino firms

The case describes a playbook Philippine banks and technology companies have been warning : a familiar voice on the phone, an urgent payment, and a request to keep the transaction quiet. PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

PLDT Enterprise has been training Filipino workers to spot AI-assisted scams of exactly this kind. Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

Ransomware claims in the Philippines more than doubled in 2026 , according to Check Point’s local threat report, and attackers are using AI to sharpen them. The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

The Justice Department has separately warned that the scam hubs behind online fraud are back, smaller and mostly Chinese . The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.

The indictment says the scheme worked because employees believed they were speaking to their own leadership. The FBI asked anyone who believes they were a victim to report it at tips.fbi.gov.