Cybersecurity

Deepfake & Impersonation Resilience

Agreed simulations of AI voice and video impersonation that test payment approvals, help desks and executive assistants.

Request a quote Questions we often hear

Scenario: urgent payment call Simulation

"CFO" on the line

AI voice

Verification checkpoints

Call back on a known number
Second approver for transfers
Code word for urgent requests

Voice and video scenarios

Payments and approvals tested

Playbook for verification

Scope

What we test

AI can now copy a voice from a short recording and imitate a face on a video call. Criminals use this to pose as executives, suppliers or colleagues and request urgent payments or password resets. We run agreed simulations that test whether your verification steps stop them.

Voice impersonation

A call in the cloned voice of an agreed executive, with their written consent.

Video call scenarios

Requests made during a simulated video meeting.

Payment approvals

Whether urgent transfer requests are verified by a second channel.

Help desk requests

Password and MFA resets requested by an impersonator.

Supplier changes

Requests to change bank details of a known supplier.

Verification playbook

Simple, written rules your staff can follow under pressure.

Scenarios our clients ask for

Every scenario is agreed in writing with management. The people whose voices are used give explicit consent.

Urgent CEO payment

A transfer request just before a deadline.

Supplier bank change

New account details sent with a familiar voice.

Account recovery

A manager who lost access calls the help desk.

Board meeting

A confidential request during a video call.

What you receive

01 Scenario results and timeline
02 Gaps in approval and verification steps
03 Verification playbook
04 Executive briefing on AI impersonation
05 Short awareness session for finance and help desk

Questions we often hear

Do you use real voices of our managers?

Only with the written consent of the person concerned. Voice models are created for the exercise and deleted afterwards.

Is this legal?

Yes. Every exercise runs under a signed agreement, within agreed limits, and complies with GDPR.

What is the best defence?

A simple verification rule: confirm unusual requests through a second, known channel. We help you write and practise it.