Three Men Arrested in Spain and Britain Face Extradition to the United States
In a groundbreaking case involving advanced technology and large-scale fraud, three men have been arrested in Europe and are now facing extradition to the United States. These individuals are implicated in a scheme that reportedly utilized artificial intelligence-generated deepfakes to deceive corporate executives and misappropriate over $129 million from various companies around the globe.
The arrested suspects include Jacob Soall, 41, who has ties to both Spain and the United Kingdom, and Sharon Hazan, 54, an individual from Israel. They were apprehended in Spain on June 17 and August 5, respectively. Meanwhile, Guy Sheetrit, 42, who also holds citizenship in Israel and the United Arab Emirates, was taken into custody in the United Kingdom on September 7. Their arrests signal a significant effort by authorities to combat the rising threats of cybercrime powered by AI technologies.
Prosecutors allege that the trio employed sophisticated tactics to impersonate top executives from a wide range of companies through the use of AI-generated images and voice recordings. In their deception, they not only posed as CEOs but also assumed the identities of lawyers from prestigious international legal firms, hoping to lend more credibility to their fraudulent requests. Such impersonations are part of a disturbing trend where technology is increasingly being exploited to commit fraud on an unprecedented scale.
The defendants have been formally charged with a variety of crimes, including conspiracy to commit wire fraud, wire fraud, two counts of aggravated identity theft, and a money laundering conspiracy, among others. The ramifications for these offenses could be severe, with the maximum potential sentence for many of the charges set at 20 years.
“The alleged scheme orchestrated by Soall, Hazan, and Sheetrit demonstrates how the use of advanced technology can be exploited to commit large-scale fraud,” stated James C. Barnacle, Jr., the Federal Bureau of Investigation Assistant Director in Charge, in a press release announcing the arrests. He expressed concerns over how such technologies could pose risks not just to businesses, but also to consumers in an increasingly digital world.
U.S. Attorney Jamie McDonald added that businesses and individuals need to recognize the importance of implementing protections against the emerging threats of AI-enabled crime. With technology continually evolving, it becomes vital for organizations to be vigilant and proactive in mitigating the risks associated with cyber fraud.
According to an indictment that has recently been unsealed, the fraud scheme took place between 2024 and 2026, during which the suspects allegedly tricked executives into sending approximately $129 million. The criminal operation targeted a variety of organizations, including a New York investment bank, a Rhode Island-based financial institution, hospital systems in California and Missouri, a financial technology company in the U.K., a mutual fund firm in Massachusetts, and even a pet food business in Florida.
Funds from these fraudulent transactions were funneled into bank accounts under the control of the attackers in various countries such as the United States, Spain, Portugal, Greece, the United Arab Emirates, Singapore, Austria, Slovakia, and China. To obscure their financial trail, the money was subsequently converted into cryptocurrency, complicating efforts to trace and recover the stolen funds.
The operational tactics employed by the suspects involved initial phishing emails sent to employees at accounting departments through well-known electronic signature platforms like DocuSign. The emails often requested the signing of nondisclosure agreements related to important transactions, making the requests seem legitimate. Victims were then instructed to partake in what was described as a "compliance call" with an attorney, who was actually another co-conspirator impersonating a legitimate lawyer.
During these calls, the defendants purportedly used sophisticated AI technology to replicate the voice and sometimes even the image of the impersonated CEO, thereby convincing the victimized employees of the authenticity of the transaction. The impersonated CEO would instruct the employee to engage in discussions with the impersonated attorney, ultimately directing them to execute wire transfers as requested.
Soall was particularly noted for his role in impersonating real attorneys from target law firms in Europe, showcasing meticulous preparation with a handwritten script titled "Lawyer Call" designed to enhance the believability of his impersonations. Hazan and Sheetrit, on the other hand, were primarily engaged in the laundering of funds. Notably, Hazan had previously boasted about his extensive experience in money laundering, claiming to have laundered over $400 million within a three-year period and declaring himself to be a top figure in the field.
Hazan’s checkered history includes a prior conviction for conspiracy to commit bank fraud, further complicating his legal situation as he faces new charges.
With the gravity of the case and the ongoing evolution of technology in the context of fraud, authorities are keenly aware of the need for enhanced preventive measures. This incident serves as a wake-up call for organizations to remain vigilant and take proactive steps in safeguarding themselves against the emerging threats posed by AI and deepfake technologies. As the digital landscape continues to evolve, so too must the strategies employed by businesses to protect against increasingly sophisticated cyber threats.