SEBI Warns Companies Over Rise in AI-Powered 'Boss Scams'

The Securities and Exchange Board of India (SEBI) has issued a formal warning to corporate entities regarding a surge in sophisticated cyber-fraud known as the Boss Scam. This fraudulent activity involves bad actors using AI-powered tools to impersonate high-ranking C-suite executives via WhatsApp. By utilizing stolen executive photos, forged credentials, and deceptive zip files, scammers are successfully tricking employees into performing unauthorized financial transfers, resulting in significant losses for businesses across the country.

Scammers typically establish initial contact through messaging platforms, creating an illusion of urgency or secrecy characteristic of a high-level corporate directive. These operations often bypass standard corporate verification protocols by leveraging the trust associated with top leadership. Recent reports confirm that such attacks have resulted in losses as high as ₹10 crore in isolated incidents, highlighting the critical vulnerability of internal communication channels and the potential for AI-generated impersonations to deceive staff effectively.

The rise of these scams underscores the immediate need for robust cybersecurity awareness and the implementation of multi-factor authentication for financial authorizations. SEBI’s intervention seeks to curb the impact of these AI-driven threats by urging companies to tighten their internal governance and oversight mechanisms. As these scams evolve in complexity, Indian corporations face the urgent task of training staff to verify communication authenticity, as reliance on traditional trust-based hierarchies is no longer sufficient to mitigate the risks posed by modern cyber adversaries.