{"id":3499,"date":"2026-03-10T09:11:56","date_gmt":"2026-03-10T09:11:56","guid":{"rendered":"https:\/\/alphasixtest2.com\/cs\/?p=3499"},"modified":"2026-03-10T09:51:15","modified_gmt":"2026-03-10T09:51:15","slug":"beyond-technology-mass-deepfake-guidelines-and-the-human-side-of-fraud-prevention","status":"publish","type":"post","link":"https:\/\/alphasixtest2.com\/cs\/beyond-technology-mass-deepfake-guidelines-and-the-human-side-of-fraud-prevention\/","title":{"rendered":"Beyond Technology: MAS\u2019s Deepfake Guidelines and the Human Side of Fraud Prevention"},"content":{"rendered":"<h2>Introduction<\/h2>\n<p><span style=\"font-weight: 400;\">When the Monetary Authority of Singapore (MAS) issued its September 2025 circular on deepfake risks, it marked a turning point for financial <\/span><b>institutions<\/b><span style=\"font-weight: 400;\"> and businesses. The guidance followed a series of documented incidents \u2014 from the <\/span><b>HK$200M Hong Kong CFO impersonation scam<\/b><span style=\"font-weight: 400;\"> (<\/span><a href=\"https:\/\/www.theguardian.com\/world\/2024\/feb\/05\/hong-kong-company-deepfake-video-conference-call-scam\"><span style=\"font-weight: 400;\">The Guardian<\/span><\/a><span style=\"font-weight: 400;\">) to a <\/span><b>\u20ac20M cryptocurrency fraud in Spain<\/b><span style=\"font-weight: 400;\"> (<\/span><a href=\"https:\/\/www.panewslab.com\/en\/articles\/ilxf4d5o\"><span style=\"font-weight: 400;\">PANews Lab<\/span><\/a><span style=\"font-weight: 400;\">) and a <\/span><b>crypto scam in Hong Kong using AI-generated personas<\/b><span style=\"font-weight: 400;\"> (<\/span><a href=\"https:\/\/protos.com\/hong-kong-busts-crypto-scam-that-used-ai-deepfakes-to-create-superior-women\"><span style=\"font-weight: 400;\">Protos<\/span><\/a><span style=\"font-weight: 400;\">). Even Singapore has seen close calls \u2014 including a <\/span><b>$499K near-miss prevented in March 2025<\/b><span style=\"font-weight: 400;\"> (<\/span><a href=\"https:\/\/www.mas.gov.sg\"><span style=\"font-weight: 400;\">MAS<\/span><\/a><span style=\"font-weight: 400;\">).<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The circular shows that MAS understands the scale of the problem. It does not just prescribe technology like liveness detection or endpoint detection tools. It emphasises the <\/span><b>human side of fraud prevention<\/b><span style=\"font-weight: 400;\">: training <\/span><b>employees<\/b><span style=\"font-weight: 400;\">, building stronger verification processes, and reinforcing separation of duties for high-risk <\/span><b>transactions<\/b><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For <\/span><b>companies<\/b><span style=\"font-weight: 400;\">, the lesson is clear: fraud is not just a technical problem. It is a verification problem that spans people, process, and tools.<\/span><\/p>\n<h2>The $67.4M Wake-Up Call<\/h2>\n<h3>Hong Kong CFO Scam (HK$200M \/ $25M)<\/h3>\n<p><span style=\"font-weight: 400;\">In February 2024, a Hong Kong employee was tricked into authorising HK$200M in <\/span><b>fund transfers<\/b><span style=\"font-weight: 400;\"> after attending a <\/span><b>video call where fraudsters used deepfakes of colleagues and the CFO<\/b><span style=\"font-weight: 400;\"> (<\/span><a href=\"https:\/\/www.theguardian.com\/world\/2024\/feb\/05\/hong-kong-company-deepfake-video-conference-call-scam\"><span style=\"font-weight: 400;\">The Guardian<\/span><\/a><span style=\"font-weight: 400;\">).<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The scam worked because the criminals controlled the conversation, eliminated doubt by having multiple \u201cparticipants,\u201d and applied pressure with fake urgency. The lack of a secondary <\/span><b>verification process<\/b><span style=\"font-weight: 400;\"> meant one employee\u2019s actions led directly to multimillion-dollar <\/span><b>losses<\/b><span style=\"font-weight: 400;\">.<\/span><\/p>\n<h3>Spanish Crypto Scam (\u20ac20M \/ $21M)<\/h3>\n<p><span style=\"font-weight: 400;\">In April 2025, Spanish <\/span><b>authorities<\/b><span style=\"font-weight: 400;\"> investigated a deepfake-driven cryptocurrency fraud that cost investors \u20ac20M. Fraudsters used manipulated video <\/span><b>content<\/b><span style=\"font-weight: 400;\"> and fabricated endorsements to convince victims that the scheme was legitimate (<\/span><a href=\"https:\/\/www.panewslab.com\/en\/articles\/ilxf4d5o\"><span style=\"font-weight: 400;\">PANews Lab<\/span><\/a><span style=\"font-weight: 400;\">).<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Unlike older scams, this case showed that <\/span><b>deepfakes<\/b><span style=\"font-weight: 400;\"> can be combined with polished marketing and credible <\/span><b>details<\/b><span style=\"font-weight: 400;\"> to bypass even cautious investors\u2019 judgement.<\/span><\/p>\n<h3>Hong Kong \u201cSuperior Women\u201d Crypto Scam<\/h3>\n<p><span style=\"font-weight: 400;\">In October 2024, Hong Kong police broke up a fraud ring that used <\/span><b>AI deepfakes of women<\/b><span style=\"font-weight: 400;\"> \u2014 marketed as \u201csuperior women\u201d \u2014 to lure victims into false relationships before convincing them to transfer money into crypto wallets. Losses reached tens of millions of dollars (<\/span><a href=\"https:\/\/protos.com\/hong-kong-busts-crypto-scam-that-used-ai-deepfakes-to-create-superior-women\"><span style=\"font-weight: 400;\">Protos<\/span><\/a><span style=\"font-weight: 400;\">).<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This incident highlighted how <\/span><b>fraud tactics<\/b><span style=\"font-weight: 400;\"> prey on trust and personal connection, not just corporate processes. It demonstrated that both <\/span><b>executives<\/b><span style=\"font-weight: 400;\"> and ordinary <\/span><b>employees<\/b><span style=\"font-weight: 400;\"> can be victims of scams.<\/span><\/p>\n<h3>Singapore Near-Miss ($499K)<\/h3>\n<p><span style=\"font-weight: 400;\">In March 2025, MAS and police intervened to prevent a <\/span><b>$499,000 fraudulent transfer<\/b><span style=\"font-weight: 400;\">, citing it as a near miss for Singaporean <\/span><b>businesses<\/b><span style=\"font-weight: 400;\"> (<\/span><a href=\"https:\/\/www.mas.gov.sg\"><span style=\"font-weight: 400;\">MAS<\/span><\/a><span style=\"font-weight: 400;\">). The incident showed that local verification processes can fail under pressure, but also that rapid coordination with <\/span><b>authorities<\/b><span style=\"font-weight: 400;\"> can stop the fraud in time.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Together, these examples show why MAS has escalated its focus on corporate verification.<\/span><\/p>\n<h2>What Is at Stake for Businesses?<\/h2>\n<p><span style=\"font-weight: 400;\">For <\/span><b>companies<\/b><span style=\"font-weight: 400;\"> and financial institutions, the implications are wide-ranging:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Fraud is escalating<\/b><span style=\"font-weight: 400;\"> \u2014 attacks that once relied on crude phishing emails now use AI deepfakes.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>CEO fraud and business email compromise are evolving<\/b><span style=\"font-weight: 400;\"> \u2014 video impersonation is the new frontier.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Verification failures undermine trust<\/b><span style=\"font-weight: 400;\"> \u2014 <\/span><b>employees<\/b><span style=\"font-weight: 400;\"> and <\/span><b>customers<\/b><span style=\"font-weight: 400;\"> alike struggle to distinguish authentic communications.<\/span>&nbsp;<\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">The consequence is not only monetary <\/span><b>losses<\/b><span style=\"font-weight: 400;\">. Regulatory fines, reputational harm, and loss of investor confidence can all follow when a <\/span><b>company<\/b><span style=\"font-weight: 400;\"> fails to address verification risks.<\/span><\/p>\n<h2>Why Corporate Verification Fails<\/h2>\n<h3>Biometric Authentication Defeat<\/h3>\n<p><span style=\"font-weight: 400;\">In August 2024, an Indonesian financial institution reported a <\/span><b>KYC bypass using deepfake photos<\/b><span style=\"font-weight: 400;\"> \u2014 proving that static <\/span><b>identity verification<\/b><span style=\"font-weight: 400;\"> is not enough (<\/span><a href=\"https:\/\/www.mas.gov.sg\"><span style=\"font-weight: 400;\">MAS Circular, 2025<\/span><\/a><span style=\"font-weight: 400;\">).<\/span><\/p>\n<h3>Social Engineering via Fake CEO Calls<\/h3>\n<p><span style=\"font-weight: 400;\">Fraudsters impersonate <\/span><b>executives<\/b><span style=\"font-weight: 400;\"> on video calls, pressuring <\/span><b>employees<\/b><span style=\"font-weight: 400;\"> to approve fraudulent <\/span><b>transactions<\/b><span style=\"font-weight: 400;\">. The psychological manipulation is as powerful as the technical deception.<\/span><\/p>\n<h3>Trust Breakdown Inside Companies<\/h3>\n<p><b>Employees<\/b><span style=\"font-weight: 400;\"> are conditioned to respect hierarchy. Without escalation <\/span><b>processes<\/b><span style=\"font-weight: 400;\">, they may act on instructions from fraudulent <\/span><b>CEOs<\/b><span style=\"font-weight: 400;\"> without question.<\/span><\/p>\n<h2>Fraud Tactics MAS Has Highlighted<\/h2>\n<p><span style=\"font-weight: 400;\">MAS emphasised that <\/span><b>fraudsters<\/b><span style=\"font-weight: 400;\"> now combine <\/span><b>AI<\/b><span style=\"font-weight: 400;\"> with proven <\/span><b>fraud tactics<\/b><span style=\"font-weight: 400;\">:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Phishing emails<\/b><span style=\"font-weight: 400;\"> enhanced with AI-generated wording.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Business email compromise<\/b><span style=\"font-weight: 400;\"> evolving into deepfake-enabled impersonation.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Fund transfers<\/b><span style=\"font-weight: 400;\"> manipulated by fake authorisation.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Account creation<\/b><span style=\"font-weight: 400;\"> with falsified documents and synthetic <\/span><b>data<\/b><span style=\"font-weight: 400;\">.<\/span>&nbsp;<\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">This hybridisation makes fraud both harder to detect and more convincing.<\/span><\/p>\n<h2>MAS\u2019s Regulatory Response<\/h2>\n<h3>MAS Deepfake Compliance Singapore Explained<\/h3>\n<p><span style=\"font-weight: 400;\">On 18 September 2025, MAS issued its circular mandating a comprehensive approach to <\/span><b>fraud prevention<\/b><span style=\"font-weight: 400;\">. It stresses that controls must be both technical and human-centred.<\/span><\/p>\n<h3>Key MAS Mitigation Requirements<\/h3>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Biometric liveness detection<\/b><span style=\"font-weight: 400;\"> for onboarding and <\/span><b>identity verification<\/b><span style=\"font-weight: 400;\">.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Separation of duties<\/b><span style=\"font-weight: 400;\"> for high-value <\/span><b>transactions<\/b><span style=\"font-weight: 400;\">.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Multi-factor authentication<\/b><span style=\"font-weight: 400;\"> for privileged <\/span><b>accounts<\/b><span style=\"font-weight: 400;\">.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Employee security awareness training<\/b><span style=\"font-weight: 400;\"> on deepfakes and <\/span><b>fraud tactics<\/b><span style=\"font-weight: 400;\">.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Endpoint deepfake detection tools<\/b><span style=\"font-weight: 400;\"> to stop manipulation before <\/span><b>funds<\/b><span style=\"font-weight: 400;\"> are moved.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Regular <\/span><b>fraud detection<\/b><span style=\"font-weight: 400;\"> tests and vulnerability assessments.<\/span>&nbsp;<\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">These requirements reflect lessons from the cases: single points of failure, weak <\/span><b>processes<\/b><span style=\"font-weight: 400;\">, and untrained <\/span><b>employees<\/b><span style=\"font-weight: 400;\"> make fraud easier.<\/span><\/p>\n<h2>Why MAS\u2019s Controls Matter in Practice<\/h2>\n<p><span style=\"font-weight: 400;\">Each MAS guideline addresses a real vulnerability:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Liveness detection<\/b><span style=\"font-weight: 400;\"> thwarts fraudsters using fake photos for <\/span><b>account creation<\/b><span style=\"font-weight: 400;\">.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Separation of duties<\/b><span style=\"font-weight: 400;\"> prevents a lone <\/span><b>employee<\/b><span style=\"font-weight: 400;\"> from moving millions without oversight.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Multi-factor authentication<\/b><span style=\"font-weight: 400;\"> ensures even stolen credentials cannot authorise high-value <\/span><b>transactions<\/b><span style=\"font-weight: 400;\">.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Employee training<\/b><span style=\"font-weight: 400;\"> builds resilience, helping staff spot suspicious video calls or manipulated <\/span><b>details<\/b><span style=\"font-weight: 400;\">.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Endpoint detection tools<\/b><span style=\"font-weight: 400;\"> catch deepfake <\/span><b>content<\/b><span style=\"font-weight: 400;\"> before it is used in fraud.<\/span>&nbsp;<\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">In short, MAS is closing the gap between technical solutions and human fallibility.<\/span><\/p>\n<h2>What Are the Key Risks for Companies?<\/h2>\n<p><span style=\"font-weight: 400;\">MAS listed five categories of risk:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Market risk<\/b><span style=\"font-weight: 400;\"> \u2014 false signals or fabricated news moving markets.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Cyber risk<\/b><span style=\"font-weight: 400;\"> \u2014 social engineering combined with AI.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Fraud risk<\/b><span style=\"font-weight: 400;\"> \u2014 CEO fraud, falsified <\/span><b>accounts<\/b><span style=\"font-weight: 400;\">, fraudulent <\/span><b>transactions<\/b><span style=\"font-weight: 400;\">.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Regulatory risk<\/b><span style=\"font-weight: 400;\"> \u2014 penalties for failing to prevent fraud.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Reputational risk<\/b><span style=\"font-weight: 400;\"> \u2014 erosion of trust in <\/span><b>executives<\/b><span style=\"font-weight: 400;\"> and <\/span><b>businesses<\/b><span style=\"font-weight: 400;\">.<\/span>&nbsp;<\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Each risk has measurable impact: loss of <\/span><b>money<\/b><span style=\"font-weight: 400;\">, erosion of shareholder confidence, or regulatory censure.<\/span><\/p>\n<h2>Global Context: Deepfakes Beyond Singapore<\/h2>\n<p><span style=\"font-weight: 400;\">The <\/span><b>FBI<\/b><span style=\"font-weight: 400;\"> has warned of similar patterns in the U.S. In 2023, companies reported <\/span><b>business email compromise<\/b><span style=\"font-weight: 400;\"> losses exceeding $2.9B, often involving <\/span><b>CEO fraud<\/b><span style=\"font-weight: 400;\"> layered with new AI techniques (<\/span><a href=\"https:\/\/www.ic3.gov\"><span style=\"font-weight: 400;\">IC3.gov<\/span><\/a><span style=\"font-weight: 400;\">).<\/span><\/p>\n<p><b>What is clear<\/b><span style=\"font-weight: 400;\">: MAS\u2019s guidance is not an isolated directive. It is part of a global trend recognising that <\/span><b>deepfake threats<\/b><span style=\"font-weight: 400;\"> are now embedded in corporate fraud. For multinational <\/span><b>companies<\/b><span style=\"font-weight: 400;\">, aligning with MAS requirements is a way to raise global standards of resilience.<\/span><\/p>\n<h2>How to Strengthen Corporate Verification<\/h2>\n<h3><b>How to Prevent CEO Fraud<\/b><\/h3>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Use multi-channel verification for <\/span><b>fund transfers<\/b><span style=\"font-weight: 400;\">: phone confirmation, secondary approvals, or callbacks.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Train <\/span><b>employees<\/b><span style=\"font-weight: 400;\"> to pause and escalate if instructions seem unusual.<\/span>&nbsp;<\/li>\n<\/ul>\n<h3>How to Strengthen Account Verification<\/h3>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Introduce layered <\/span><b>identity verification<\/b><span style=\"font-weight: 400;\"> with biometric liveness checks.<\/span>&nbsp;<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Audit <\/span><b>accounts<\/b><span style=\"font-weight: 400;\"> regularly for anomalies or suspicious <\/span><b>account creation<\/b><span style=\"font-weight: 400;\"> attempts.<\/span>&nbsp;<\/li>\n<\/ul>\n<h3>How to Improve Employee Awareness<\/h3>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Run simulations of deepfake-enabled <\/span><b>scams<\/b><span style=\"font-weight: 400;\">.<\/span>&nbsp;<\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Provide <\/span><b>employees<\/b><span style=\"font-weight: 400;\"> with toolkits to verify <\/span><b>executives\u2019<\/b><span style=\"font-weight: 400;\"> communications.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Introduction When the Monetary Authority of Singapore (MAS) issued its September 2025 circular on deepfake risks, it marked a turning point for financial institutions and businesses. The guidance followed a series of documented incidents \u2014 from the HK$200M Hong Kong CFO impersonation scam (The Guardian) to a \u20ac20M cryptocurrency fraud in Spain (PANews Lab) and [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":2669,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3499","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/alphasixtest2.com\/cs\/wp-json\/wp\/v2\/posts\/3499","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/alphasixtest2.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/alphasixtest2.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/alphasixtest2.com\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/alphasixtest2.com\/cs\/wp-json\/wp\/v2\/comments?post=3499"}],"version-history":[{"count":3,"href":"https:\/\/alphasixtest2.com\/cs\/wp-json\/wp\/v2\/posts\/3499\/revisions"}],"predecessor-version":[{"id":3506,"href":"https:\/\/alphasixtest2.com\/cs\/wp-json\/wp\/v2\/posts\/3499\/revisions\/3506"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/alphasixtest2.com\/cs\/wp-json\/wp\/v2\/media\/2669"}],"wp:attachment":[{"href":"https:\/\/alphasixtest2.com\/cs\/wp-json\/wp\/v2\/media?parent=3499"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/alphasixtest2.com\/cs\/wp-json\/wp\/v2\/categories?post=3499"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/alphasixtest2.com\/cs\/wp-json\/wp\/v2\/tags?post=3499"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}