Someone called your boss. It sounded exactly like your boss. It wasn't your boss. That unsettling scenario is now playing out across Wall Street's most powerful firms. Two Sigma Investments, Citadel, and Point72 Asset Management all fell victim to a wave of AI-powered voice phishing attacks this summer. The attackers used advanced voice-cloning technology to impersonate executives and trusted colleagues, attempting to trick employees into handing over sensitive data or granting network access.

Two Sigma, which manages roughly $75 billion in assets, confirmed it successfully blocked the attack with no data compromise or system impact. Citadel and Point72 declined to comment on their incidents. The three firms collectively oversee hundreds of billions in capital, making them prime targets for sophisticated cybercriminals willing to invest in cutting-edge AI tools.

How the Scam Works

The technical barrier to entry has collapsed. Training a convincing voice model now requires only a few minutes of publicly available audio, the kind executives casually generate during earnings calls, conference panels, podcast appearances, and media interviews. A sophisticated attacker can pull samples from a target's YouTube video or investor presentations, feed them into a generative AI tool, and produce a near-perfect synthetic voice within hours. The synthetic voices were then deployed through phone calls and audio messages designed to manipulate employees into compliance.

The financial stakes are staggering. In 2025, a multinational firm lost nearly $25 million after employees fell for an AI-cloned CEO voicemail. A UK energy company was duped out of $243,000 in a similar CEO voice-cloning scam. No successful breaches have been reported from the Wall Street incidents, but the attempts themselves signal a shift in attack sophistication.

Industry projections paint an alarming picture. AI-enabled fraud incidents surged dramatically in 2025, and analysts estimate that generative AI fraud losses could reach $40 billion annually by 2027. Voice cloning is just one vector. As these tools become cheaper and easier to deploy, the attack surface expands across every sector that relies on voice communication for sensitive decisions.

This article is for informational purposes only and does not constitute financial or investment advice.