Fideuram (Intesa Sanpaolo private banking) deepfake voice/video executive impersonation fraud
Severity major: A live production compromise at a European private bank, with a stated loss of close to 95 million euros.
Earliest source we hold 2026-10-12
Fideuram, the private-banking arm of Intesa Sanpaolo, lost close to 95 million euros after attackers used synthetic voice and video to impersonate senior executives and advisers, convincing internal staff to authorise transfers.
Risk grouping: AI used to exploit
| Who caused it | A person or organisation “attackers used synthetic voice and video to impersonate senior executives and advisers, convincing internal staff to authorise transfers” source |
|---|---|
| Intended or not | Intended “attackers used synthetic voice and video to impersonate senior executives and advisers, convincing internal staff to authorise transfers” source |
| Before or after release | After release “Fideuram, the private-banking arm of Intesa Sanpaolo, lost close to 95 million euros after attackers used synthetic voice and video to impersonate senior executives and advisers, convincing internal staff to authorise transfers.” source |
| The AI's part | Used as a tool “attackers used synthetic voice and video to impersonate senior executives and advisers, convincing internal staff to authorise transfers” source |
The story
1 · What it was doingFideuram, Intesa Sanpaolo's private-banking arm, was processing high-value transfers when attackers used synthetic voice and video to impersonate senior executives and advisers, convincing internal staff to authorise payments.
2 · What went wrongAttackers used deepfake voice and video to impersonate executives and advisers, and staff authorised transfers on the strength of that impersonation, breaching the bank's authentication and authorisation controls.
3 · What it reached or didClose to 95 million euros left the bank through authorised transfers; the bank has not published its own confirmation.
Show every field, with its source and grade
The AI system
Stage of use
in live use
D inferred by us from the described behaviour, reason shown
What happened
Earliest source we hold
2026-10-12
A the date the source itself carries
Who caused it
an outside attacker
C one secondary source states it
What went wrong
other
D inferred by us from the described behaviour, reason shown
Impact
Severity
major
D inferred by us from the described behaviour, reason shown
Kind of harm
money
C one secondary source states it
Who was affected
Fideuram, the private-banking arm of Intesa Sanpaolo
C one secondary source states it
Why this severity
A live production compromise at a European private bank, with a stated loss of close to 95 million euros.
D inferred by us from the described behaviour, reason shown
Context
Industry
Finance and Insurance
D inferred by us from the described behaviour, reason shown
Country
Italy
D inferred by us from the described behaviour, reason shown
Rules that apply
DORA
C one secondary source states it
LR-2026-0167 · version 6 · published 2026-10-25 after automatic checks; not yet checked field by field by a person · changes to this case · JSON