AI-Enhanced Invoice Fraud Campaign Targets Organizations

• •Over a million fraudulent emails sent, targeting U.S. organizations.
• •Attackers impersonated CEOs to request ACH payments of nearly $50,000.
• •AI was used to enhance email templates and narratives, increasing legitimacy.

In early August 2026, Microsoft detected a sophisticated email fraud campaign targeting organizations, leveraging AI to create convincing impersonation emails. The attackers sent over a million fraudulent emails, primarily to U.S. users, impersonating CEOs and requesting ACH payments of nearly $50,000. The emails included fabricated threads and invoices to enhance legitimacy. This campaign utilized third-party email services and showcased advanced tactics, including layered social engineering techniques. Microsoft noted that the use of AI allowed for improved email templates and narratives, making the scams more believable. The attack highlights the evolving nature of business email compromise (BEC) scams, which are becoming more sophisticated and scalable. Microsoft researchers emphasized the need for organizations to enhance their security measures against such evolving threats.