Singapore Businessman Loses S$4.9 Million to Deepfake Zoom Call Impersonating PM Lawrence Wong

What Happened

A Singaporean businessman with prior interactions with government officials was drawn into an elaborate impersonation scam that used deepfake AI to fabricate an entire Zoom video conference appearing to feature Prime Minister Lawrence Wong, President Tharman Shanmugaratnam, Minister Indranee Rajah, Monetary Authority of Singapore representatives, foreign officials (Canada's foreign minister, the UAE president's senior diplomatic adviser), and private-sector names (BlackRock, Dubai International Financial Centre). The pretext was a request for "urgent funding assistance" tied to the real-world Strait of Hormuz crisis. After being lured via WhatsApp and a spoofed email, signing a fake NDA, and attending the deepfake video conference, which closed with a fabricated PM Wong personally thanking him for attending, the victim was contacted again and induced to wire at least S$4.9 million (~US$3.8 million) in multiple transactions to a corporate bank account supplied by the scammers. The Singapore Police Force disclosed the case in a 14 May 2026 news release and published recovered footage with forensic deepfake analysis on 16 May 2026.

How the Attack Worked

The scam unfolded in stages combining messaging-app impersonation, spoofed email, forged documents, and a fabricated video conference. (1) Initial contact: the victim received a WhatsApp message from a profile using the photo and name of Secretary to the Cabinet Wong Hong Kuan, instructing him to attend a meeting with PM Lawrence Wong. (2) Email lure: he then received an email from WongHongKuan.secretarycabinet@proton.me (a Proton Mail address, not a genuine government domain) purportedly from the Cabinet Secretary, requesting "urgent funding assistance" tied to the Strait of Hormuz crisis, with an attached fake government "letter of guarantee" bearing a reproduction of PM Wong's signature promising reimbursement within 15 business days. (3) Control/legitimacy steps: the victim was told to sign a non-disclosure agreement and provide a copy of his identification card, both of which added a veneer of official process and discouraged him from discussing the "meeting" with others. (4) The deepfake meeting: after signing the NDA, he was invited to a Zoom video conference that appeared to include PM Wong, President Tharman Shanmugaratnam, Minister Indranee Rajah, representatives of the Monetary Authority of Singapore, Canada's foreign minister, the UAE president's senior diplomatic adviser, and private-sector figures from BlackRock and the Dubai International Financial Centre. He was introduced as a private-sector participant; the meeting proceeded with a briefing on the Strait of Hormuz situation and closed with a deepfake PM Wong personally acknowledging the victim's attendance. In reality every official in the call had been fabricated with deepfake AI. (5) Extraction: after the call, a scammer posing as a lawyer contacted the victim by WhatsApp and induced him to wire funds in multiple transactions to a corporate bank account supplied by the scammers. He grew suspicious afterward, contacted the real Cabinet Secretary, and only then learned he had been scammed.

The Lure & the Tell

The lure combined a personalized WhatsApp approach (using a real official's name and photo), a spoofed email from a Proton Mail address impersonating the Cabinet Secretary, a forged "letter of guarantee" carrying a fake reproduction of PM Wong's signature, an NDA to enforce secrecy, a geopolitical urgency hook (the real-world Strait of Hormuz crisis), and finally a full deepfake Zoom "meeting" populated with recognizable named officials and organizations (Singapore's president, PM, a minister, MAS, foreign ministers, BlackRock, DIFC) to manufacture social proof and authority at a scale far beyond a single spoofed voice call. The tell, per Singapore Police Force's forensic review of the recovered footage: (1) speech did not synchronize with the speakers' lips, indicating pre-recorded inauthentic audio; (2) all "speakers'" audio was broadcast from a single account rather than from each individual call participant; and (3) the video showed a distorted background and a partially obscured/misaligned Zoom logo, indicating AI manipulation of the footage.

Outcome

The Singapore Police Force disclosed the loss in a public advisory on 14 May 2026 warning that scammers were targeting business professionals with prior government interactions, then followed up on 16 May 2026 with a second release publishing recovered footage from the deepfake Zoom conference and a technical breakdown of the deepfake indicators. PM Lawrence Wong personally posted on Facebook the same day (14 May) warning the public that messages purporting to arrange meetings on his behalf via the "Cabinet Secretary" were scams. No arrests specific to this S$4.9 million case were publicly announced in the sources reviewed; police did note that three people had been arrested and charged on 9 May 2026 for suspected SIM-card offences connected to earlier cases using the same modus operandi (fake NDA-gated virtual meetings with impersonated senior officials), though it is not confirmed those arrests relate to this specific victim's loss.

Why It Matters

This is one of the most detailed publicly documented real-world cases of deepfake video technology being used not just to impersonate a single individual on a call, but to fabricate an entire multi-participant, multi-institution virtual meeting, convincingly simulating a head of government, a head of state, a cabinet minister, a central bank, foreign officials, and named global financial institutions simultaneously. It shows that deepfake social engineering has moved beyond one-on-one voice-clone "urgent boss" scams into large-scale, geopolitically-themed group deception capable of extracting multi-million-dollar sums from a single sophisticated victim. It also demonstrates that having genuine, prior legitimate contact with real officials does not protect a target: it can be actively exploited to make the impersonation more credible. The case prompted an unusual direct public rebuttal from the impersonated sitting Prime Minister and a national police advisory with technical deepfake-detection guidance, illustrating how governments are now treating deepfake impersonation of officials as an emerging national fraud-prevention priority.

Defenses

The Singapore Police Force's public advisory (14 and 16 May 2026) told the public that government officials will NEVER ask, over email, phone, or video call, to transfer money, disclose bank login details, install apps from unofficial app stores, or transfer a call to police/other officials; to never send funds or ID documents to unverified individuals; to independently verify any purported official request through official government channels; and to use the ScamShield app/website or the 24/7 ScamShield Helpline (1799) to check suspicious messages. SPF also published a "3A" detection approach and technical deepfake tells (see lure_and_tell) so the public can visually/aurally scrutinize video calls. For organizations, the case argues for treating any high-value fund-transfer instruction that arrives via a video call or messaging app, however convincing the participants look, as unverified until confirmed through an independent, previously-established channel (e.g., a callback to a known number, not one supplied in the suspicious message), and for building deepfake-detection awareness (lip-sync mismatch, single-source audio, artifact/background distortion) into finance and executive-facing staff training.