A Bank Chairman Lost $108 Million to a Fake Message and a Cloned Voice

We’ve all heard the same advice about scams. Slow down. Think it through. Don’t be the kind of person who falls for it.

Good advice. Right up until you hear what happened to one of the most experienced money people in Italy.

Because if this story proves anything, it’s that “just be smarter than the scammer” isn’t a plan. It’s a hope.

It Started With a WhatsApp Message

In February, Paolo Molesini was chairman of Fideuram, the part of Italy’s biggest bank that looks after very wealthy clients.

He got a WhatsApp message that appeared to come from Carlo Messina, the head of the entire banking group. It asked for urgent help with an overseas deal.

Then the phone rang. On the line was someone who sounded like a senior partner at a well-known law firm, calling to back up the request.

According to sources who spoke to Reuters, it wasn’t the lawyer at all. The criminals had used AI to copy his voice. (These tools can learn to imitate a person from recordings of them talking.)

Then the Money Started Moving

Molesini asked for a series of transfers to accounts overseas, mostly in China and Hong Kong. The total came to about €95 million, or roughly $108 million.

Let me say that one more time, slowly. One hundred and eight million dollars.

That’s not a stack of gift cards from the drugstore.

The Good News (and the Not-So-Good News)

To its credit, the bank spotted that something was off fairly quickly. It alerted authorities in several countries, and with help from Italy, Portugal and China, about €53 million came back.

The rest didn’t. Reuters reports that about €36 million (roughly $41 million) is still missing. It bounced through overseas accounts and was turned into cryptocurrency, a kind of digital money that’s very hard to trace once it moves.

Molesini stepped down in March, citing personal reasons. Neither he nor any other Fideuram executive is under investigation. Milan prosecutors are investigating a foreign national living outside Europe. The bank declined to comment.

How Does a Bank Chairman Fall for This?

Look at how it was built. It wasn’t one trick. It was three, stacked on top of each other:

1. A familiar name on a message that looked like it came from someone he knew.
2. A second person confirming the story, and a lawyer, no less. Exactly the kind of person you’d expect to be checking these things.
3. A voice that sounded right.

Each piece made the next one easier to believe.

If that sounds familiar, it should. It’s the same setup as the grandparent scam. A panicked call that sounds just like your grandson. Sometimes a second voice, a “lawyer” or a “police officer,” who gets on the line to back up the story.

The only real difference is the size of the prize. The people who went after the bank were aiming for millions. The ones calling you are hoping for a few thousand. Same trick, smaller target.

Which means even the chairman of a bank could have used someone in the room to ask, “Before we send $108 million… should somebody call Carlo?”

What This Means for You

The lesson here isn’t “be smarter.” Molesini ran a bank. Smart wasn’t the problem.

The lesson is that a voice isn’t proof anymore. Neither is caller ID, a familiar name on WhatsApp, or a message that looks exactly like the ones you usually get.

What still works is boring. That’s why it works:

1. Hang up and call back on a number you already have. Not the number in the message. Not the one the caller gives you. The one saved in your phone, or printed on the back of your bank card.
2. Check with a second person. If “your grandson” calls in trouble, call his mom. Or his sister. Someone who’d know where he really is.
3. Set up a family safe word or a private question. Agree on it in person, and don’t type it into texts or emails where someone could steal it. Treat it as one check, not the only one.
4. Treat urgency as the alarm bell. Anyone who says there’s no time to check is exactly the person to check on.

For the full step-by-step, see our guide on how to verify an urgent request from a grandkid.

The Last Word

The scammers didn’t have to break into anything. They just needed one person to believe a voice.

So the next time the phone rings and someone you love sounds scared, give yourself permission to do the one thing that might have saved a bank $108 million.

Hang up. Then call them back.