Finance receives a video that appears to show the mayor urgently ordering a wire to a ‘disaster relief’ account that city treasury does not recognize. What AI-enhanced attack vector should responders consider first?

Deepfake impersonation uses synthetic video or audio of trusted officials to induce urgent, high-impact actions such as wiring funds to unrecognized 'disaster relief' accounts outside city treasury controls. When finance receives a video that appears to show the mayor ordering such a transfer, responders should treat deepfake-enhanced fraud as a primary hypothesis until authentic channels confirm the directive. Live meeting avatar takeover used to drive fraudulent fund transfers involves hijacking a real-time meeting presence to push fraud, but it does not match a received video of the mayor ordering a wire transfer outside a live meeting. Cheapfake splice editing used to drive fraudulent fund transfers relies on basic cuts of real footage rather than AI-generated synthetic impersonation, and does not fit an AI-enhanced vector involving a synthetic mayor video ordering a wire. Model poisoning backdoor used to drive fraudulent fund transfers compromises an AI model during training to enable later abuse, not a synthetic executive video pushing treasury to bypass controls and wire funds. Exam caveat: AI-boosted fraud stems featuring fake mayor or executive media almost always map to deepfake impersonation, not live meeting avatar takeover, cheapfake splice editing, or model poisoning backdoor. Operational check: verify wires only through known treasury procedures and call-backs to published numbers, freeze unrecognized beneficiary accounts, preserve the media for analysis, and brief staff that urgency plus unfamiliar accounts is a stop-and-verify trigger.