Staff guide: deepfake voice and fake-boss calls

1 Warning signs

• Urgency: it has to happen now, before the end of the day.
• Secrecy: “don't tell anyone”, “it's a confidential deal”.
• Something new: a new account, a new supplier, gift cards, or a request outside the normal process.
• A good story: stuck abroad, a lawyer on the line, a deal that will fall through.
• Dodging checks: the caller won't let you call back, or gets angry when you try.
• A familiar number or voice. Both can be faked.

2 What to do

1. Don't act during the call or chat, however real it sounds.
2. Ask for the code word.
3. Say “I'll call you right back” and hang up.
4. Call back on a number you already had, never one they gave you.
5. Tell on .
6. Write down what happened: time, number, what was asked.

3 Phrases you can use

• “Company rule: I call back before any payment.”
• “I can't do this without a second approval.”
• “What's our word?”

4 The same goes for email and chat

Read the full sender address letter by letter. Lookalikes swap rn for m, add a letter, or change the ending of the domain. Never use the links or numbers in a message to verify it.

You will never be in trouble for checking. If you have already paid or shared a code, tell straight away. Speed matters more than blame.

Part of the free Excubo template kit. Reviewed 27 October 2026.