3 allegedly used AI to steal some $129 million from companies by impersonating executives and lawyers

New York — Three people accused of using artificial intelligence to impersonate corporate executives and attorneys to steal about $129 million have been indicted on charges of wire fraud and aggravated identity theft, prosecutors said Thursday.

Over more than a year and a half, Jacob Soall, 41, Sharon Hazan, 54, and Guy Sheetrit, 42, targeted thousands of companies across the world in their AI scheme, according to the indictment filed in a U.S. District Court in New York.

Their victims included hospital systems in Missouri and California, a bank in Rhode Island, a financial technology company in the United Kingdom, a mutual fund company in Massachusetts and a pet food company in Florida, according to court documents.

The defendants, from Spain, the U.K., Israel and the United Arab Emirates, were also charged with money laundering, according to the indictment.

Lawyers for Soall and Sheetrit didn’t immediately respond to an email requesting comment. It wasn’t clear whether Hazan had an attorney. The U.S. Attorney’s Office for the Southern District of New York didn’t immediately respond to a voicemail left by The Associated Press.

The three were arrested between June and September — Soall and Hazan in Spain and Sheetrit in the U.K. Extradition requests for all three are pending.

In 2008, Hazan was convicted in a New York court of conspiracy to commit bank fraud, according to the U.S. Attorney’s Office.

The trio, who have nicknames that include “Rocky Balboa,” “Superman Cash” and “Fat Boy,” often targeted the companies’ accounting departments. They would send an email purporting to be from the CEO and ask for help with a confidential financial transaction, according to court documents.

They would also coordinate a phone or video call where the defendants used AI to mimic the voice and sometimes the image of the CEO, according to the indictment.

The defendants would then tell them to contact an attorney at a major law firm, who the group was also ready to impersonate, according to court documents.

Soall mainly impersonated attorneys from the U.K. and had a “handwritten script titled ‘Lawyer Call’ that he utilized to make himself seem like a real attorney when speaking with and defrauding victims,” according to the U.S. Attorney’s Office.

The impersonated attorney would tell the employee to wire large payments to bank accounts across the world, according to court documents. The funds were then converted into cryptocurrency to try to conceal where they came from and then distributed to the trio and others involved, according to court documents.

FBI Assistant Director in Charge James C. Barnacle Jr. said the case shows how advanced technology can be used to commit large-scale fraud.

“As criminals continue to weaponize emerging technologies, the FBI remains committed to rapidly adapting our capabilities to identify, investigate and disrupt those who seek to harm New Yorkers and businesses operating in our communities,” he said in a statement.

If convicted, the defendants face a maximum sentence of 20 years, except for aggravated identity theft, which has a maximum sentence of two years, according to the attorney’s office.