{"schema_version":"0.10.0","id":"LR-2026-0755","record_version":1,"title":"Video call with fake participants led to $25 million transfer","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":42.5,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":0.0,"completeness":2.24,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"Publisher not yet named · subject to change","original_document":null,"reports_total":1,"reports_independent":0,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"Publisher not yet named · subject to change"}]},"sources_hash":"661218ba9f663d083150d4f1373069f35d7a1428f2e1850100398524dcdf212b"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-09-04","incident_class":"other","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"victim","summary":"A finance worker in Hong Kong received a message claiming to come from his company's chief financial officer asking for money for a confidential transaction. His first reaction was suspicion, but he then joined a video call in which the chief financial officer and colleagues appeared. The source states that every other participant on the call was fake, with faces recreated from existing footage and voices imitated. The employee authorized 15 transfers into five local bank accounts, totalling HK$200 million, roughly US$25.6 million. He discovered the fraud only after following up with headquarters. The sources describe no AI agent and do not give the transfer dates or the company's name.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"Test: data or systems of others touched with a bounded scope stated. Fact: the scope stated is 15 transfers into five local bank accounts; the source states the total as roughly US$25.6 million.","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://nypost.com/contributor-content/everyone-on-the-video-call-was-fake-the-twenty-five-million-was-real/","publisher":"New York Post","date":"2026-09-04","type":"press","title":"Everyone on the video call was fake. The twenty-five million was real. - New York Post","archived_url":null,"attachment":"first_report"}],"per_field_confidence":{"event.detection_method":"C","event.incident_class":"D","impact.severity":"D","impact.severity_because":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","context.country":"D","system.developer":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"event.detection_method":[{"source_index":0,"quote":"And he discovered the fraud only after following up with headquarters."}],"event.incident_class":[{"source_index":0,"quote":"Every other person on the call was fake."}],"impact.severity":[{"source_index":0,"quote":"The employee authorized 15 transfers into five local bank accounts."}],"impact.severity_because":[{"source_index":0,"quote":"The employee authorized 15 transfers into five local bank accounts."}],"event.summary":[{"source_index":0,"quote":"A message from someone claiming to be his company’s chief financial officer requested money for a confidential transaction."},{"source_index":0,"quote":"The employee’s first reaction was suspicion."},{"source_index":0,"quote":"The chief financial officer appeared on screen."},{"source_index":0,"quote":"Every other person on the call was fake."},{"source_index":0,"quote":"Their faces had been recreated from existing footage and their voices imitated."},{"source_index":0,"quote":"The employee authorized 15 transfers into five local bank accounts."},{"source_index":0,"quote":"And he discovered the fraud only after following up with headquarters."}]},"notes_on_gaps":"No AI agent is described; the incident involves a deepfake video call used by criminals, so agent_involved is false and failure_class fields are omitted. The source does not state the date the transfers occurred, so date_occurred is omitted; the November 2024 date concerns a FinCEN report, not the incident. date_disclosed is omitted because the source publication date is not a stated disclosure date. The company, industry, deepfake tool and root cause are not named, so root_cause, trigger and industry are omitted. The source is contributor content promoting the Vertus product; its product claims are not used. No remediation by the affected company is stated. The USD figure is the source's own approximate conversion of HK$200 million, recorded as stated. Severity moderate is my judgement: funds of another party were moved in a bounded scope. Reversibility and detection timing are not stated. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (Publisher not yet named · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"went_wrong","text":"The video call included other participants who were not real, with faces and voices reproduced.","quote":"Every other person on the call was fake.","source_index":0,"grade":"C"},{"step":"reached","text":"The employee authorized 15 transfers into five local bank accounts.","quote":"The employee authorized 15 transfers into five local bank accounts.","source_index":0,"grade":"C"},{"step":"caught","text":"The fraud was discovered only after the employee followed up with headquarters.","quote":"And he discovered the fraud only after following up with headquarters.","source_index":0,"grade":"C"},{"step":"done","text":"The total transferred was HK$200 million, roughly US$25.6 million, as stated in the source.","quote":"The total was HK$200 million, roughly US$25.6 million.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://nypost.com/contributor-content/everyone-on-the-video-call-was-fake-the-twenty-five-million-was-real/"]},"analysis":{"sections":{"timeline":[{"text":"The employee received a message claiming to be from the chief financial officer requesting money for a confidential transaction.","quote":"A message from someone claiming to be his company’s chief financial officer requested money for a confidential transaction.","source_index":0,"when":null},{"text":"The employee authorized 15 transfers into five local bank accounts.","quote":"The employee authorized 15 transfers into five local bank accounts.","source_index":0,"when":null},{"text":"The employee discovered the fraud after following up with headquarters.","quote":"And he discovered the fraud only after following up with headquarters.","source_index":0,"when":null}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://nypost.com/contributor-content/everyone-on-the-video-call-was-fake-the-twenty-five-million-was-real/"]}}