As SPAAL continues to champion higher standards and smarter practices across Australia’s security industry, one emerging threat demands urgent attention: the rise of deepfake-enabled fraud and AI-driven impersonation.

What was once a fringe concern in digital media has rapidly evolved into a real-world risk for businesses, governments, and frontline security personnel. With generative AI now capable of producing convincing voice clones and video forgeries, the challenge is no longer just cyber—it’s human perception itself.

A Case in Point: The $25M Arup Deepfake Scam

In a recent (2024) high-profile incident, UK engineering firm Arup was defrauded of $25 million after an employee participated in a video call with what appeared to be senior executives. The employee routine transfer of the millions following the call. The catch? The entire meeting was a deepfake – AI-generated visuals and voices designed to mimic real people with chilling accuracy.

No systems were breached. No passwords stolen. Just a convincing illusion, and a moment of misplaced trust.

For more information about the Arup case including Rob Grieg (Arup’s Chief Information Officer) talking about the lesson learned: World Economic Forum Stories

Why This Matters to Australian Security Providers

  • Identity verification is no longer visual or vocal alone.
    Security teams must be trained to spot inconsistencies in digital interactions, especially in high-stakes environments.
  • AI-enhanced social engineering is on the rise.
    Attackers are combining psychological manipulation with cutting-edge tech to bypass traditional safeguards.
  • Remote work and virtual meetings increase exposure.
    With more interactions happening online, the risk of impersonation grows—especially in sectors handling sensitive assets or information.

What SPAAL Members Can Do

SPAAL encourages members to:

  • Review internal protocols for identity verification in virtual settings
  • Educate staff on emerging threats like voice cloning and video manipulation
  • Consider biometric or multi-factor authentication for high-risk transactions
  • Stay informed through industry updates and training initiatives

Security is no longer just about locks and alarms—it’s about vigilance in a world where even a face on a screen can’t be trusted.