TL;DR
AI-powered voice cloning and social engineering let fraudsters steal €95 million from Intesa Sanpaolo's private banking arm Fideuram, with €36 million still missing after conversion into cryptocurrency.
What happened
- February 2026: fraudsters sent Fideuram Chairman Paolo Molesini a WhatsApp message impersonating Intesa Sanpaolo CEO Carlo Messina, requesting urgent help with an overseas transaction.
- A follow-up phone call used AI voice cloning to replicate a senior law firm partner, adding a second layer of false authority to the instruction.
- Molesini authorized a series of wire transfers totaling €95 million, routed primarily to accounts in China and Hong Kong.
- Fideuram detected irregularities quickly; coordinated action by authorities in Italy, China, and Portugal recovered roughly €53 million.
- The remaining €36 million was laundered through overseas accounts and converted into cryptocurrencies, making recovery unlikely; Milan prosecutors have one foreign national under investigation for computer fraud.
Why it matters
- Scale sets a new benchmark: €95 million is among the largest single AI-assisted fraud losses ever reported at a financial institution, dwarfing prior European cases.
- The attack required no technical breach of banking systems: it exploited human trust and voice-cloning tools now accessible to sophisticated criminal groups.
- Molesini resigned as chairman in March, citing personal reasons, signaling reputational and governance fallout that extends beyond the financial loss.
- Cryptocurrency conversion of the residual €36 million illustrates how crypto off-ramps remain the critical weak link in cross-border fraud recovery.
- A near-identical 2025 Italian case (AI voice mimicking a government minister, targeting businessman Massimo Moratti for nearly €1 million) shows this is a repeating playbook, not a one-off.
What to watch next
- Whether Intesa Sanpaolo or Fideuram issue public guidance on new authentication protocols, which would signal industry-wide procedural change at major European banks.
- Progress of the Milan prosecutors' investigation into the foreign national suspect, and whether additional co-conspirators in China or Hong Kong are identified.
- Regulatory response from the Bank of Italy or European Banking Authority on mandatory voice-verification and out-of-band confirmation requirements for large transfers.
Originally published on Present of AI, a daily source-linked AI news timeline. Read the full timeline or browse the open dataset.