Confirmed 5 Nov 2026 · Security A one-minute read

Prosecutors said 3 men used AI to impersonate CEOs and lawyers, stealing $129 million.

The Southern District of New York unsealed an indictment on November 5 charging 7 counts each. Caveat: the release never writes AI, saying super intelligence and SI throughout.

Until now

AI voice fraud was a warning in security reports and vendor demos.

Now

It is a federal indictment with named victims and 9-figure losses.

Why it matters

The victims are ordinary institutions, not technology firms: 2 hospital systems, a bank, a mutual fund company and a pet food company. The method was a phone call from a voice employees knew. Every company that approves payments by voice is now on notice, and so is its insurer.

Established

A sealed indictment was unsealed November 5 in the Southern District of New York.
The release itemises 6 victims, including 2 hospital systems and a bank.
All 3 were arrested abroad in 2026, and extradition requests are pending.

Not established

Guilt. These are accusations, and all 3 are presumed innocent.
The $129 million total. The release itemises about $31.9 million of losses.
Which tools were used. The release names no model, vendor or product.

The five-minute readThe record, the timeline, the weight and 4 sources

The record

Verified at the Justice Department's own release, number 26-317, read at justice.gov. Carded on its event date of November 5, not today: it surfaced late through weekend coverage. Editions 075 to 078 covered that date and none reached it.

We read the primary at justice.gov: US Attorney's Office, Southern District of New York, release 26-317, November 5, 2026, page updated November 6, headed Three Foreign Nationals Arrested And Charged With Scheme To Use Super Intelligence To Defraud Companies Of $129 Million. It unseals an indictment in that district's federal court, and uses "super intelligence" and "SI" throughout and never writes artificial intelligence or AI. Defendants, with ages and residences as listed: Jacob Soall, 41, of Marbella, Spain and the United Kingdom, also known as Seba Clarke and Rocky Balboa; Sharon Hazan, 54, of Israel, also known as Superman Cash, Impossible Mission, Fat Boy and Ron; Guy Sheetrit, 42, of Israel and the United Arab Emirates. Arrests: Soall June 17, 2026 in Spain; Hazan August 5, 2026 in Spain; Sheetrit September 7, 2026 in the United Kingdom. Extradition requests for all 3 are pending. Conduct alleged: between 2024 and 2026. Each faces 7 counts: wire fraud conspiracy, 20 years; wire fraud, 20 years; 2 counts of aggravated identity theft, 2 years each; money laundering conspiracy, 20 years; 2 counts of money laundering, 20 years each. Congress sets those maximums. The scheme alleged: SI used to impersonate executives and lawyers, approaching employees first as the chief executive and then as lawyers at large international firms, to obtain wire transfers to controlled accounts, proceeds moved into cryptocurrency. Soall allegedly impersonated British lawyers from a written script; Hazan and Sheetrit allegedly laundered; Hazan allegedly boasted of laundering more than $400 million in 3 years. The headline says $129 million, the body more than $100 million. 6 victims are itemised, $31.9 million: $4,829,580, a Missouri hospital system; $2,684,580, a Rhode Island bank; $2,968,497, a California hospital system; $11,578,474, a British financial technology company; $4,639,918, a Massachusetts mutual fund company; $5,242,747, a Florida pet food company. The remainder is not itemised. Hazan was convicted here in 2008 of bank fraud conspiracy. US Attorney Jamie McDonald: "SI technology offers tremendous potential." FBI Assistant Director in Charge James C. Barnacle, Jr. is quoted on criminals weaponizing emerging technologies. Credited: the FBI, Spain's Policia Nacional, Britain's National Crime Agency, the Complex Frauds and Cybercrime Unit, and Assistant US Attorneys Kevin Mead, Brandon C. Thompson and Jackie Delligatti. The charges are accusations. Not established: which models or vendors, how the voices were made, or the victim count.

How it got here

Oct 9
The White House Super Intelligence Force tells every AI company that reporting security incidents is no longer optional. Edition 046. The vocabulary this release uses was set by executive order.
Oct 26
Seoul police announce 7 arrests over AI-assisted hacking of 90 organizations and 8.2 million records. Edition 063. That case is intrusion; this one is persuasion, and the targets are finance staff.
Nov 5
The Education Department proposes striking artificial intelligence from its grant rules and writing Super Intelligence. Edition 075. The same day, a criminal indictment arrives written entirely in that vocabulary.
Nov 5
The Southern District of New York unseals the 7-count indictment and names 6 victims. The arrests had already happened in Spain and the United Kingdom between June 17 and September 7, 2026.
Nov 6
The Associated Press reports the case, adding that the scheme mimicked the voice and sometimes the image of chief executives on phone and video calls. That detail is not in the release.

Who has to react

The named victim sectors, 2 hospital systems, a bank, a mutual fund company and a pet food company, and every finance team that approves wires by voice; Spanish and British authorities holding the defendants while extradition runs; commercial crime insurers writing social engineering cover; bank fraud teams; and boards with no out of band payment check.

What to watch

Would strengthen itA second United States federal indictment alleging AI-assisted impersonation losses above $50 million is unsealed, by June 30, 2027.
Would weaken itThe itemised loss figure in a superseding indictment, plea or verdict falls below $50 million, or the case is dismissed, by December 31, 2027.
Would strengthen itA federal banking or securities regulator issues guidance requiring out of band verification of payment instructions, citing AI impersonation, by December 31, 2027.

Why it weighs this much

Signal strength

CostHigh

CommitmentHigh

ReversibilityLow

PersistenceYear

Cost is high: 3 arrests across 2 countries over 3 months, 3 named prosecutors, a grand jury, and the cooperation of Spain's and Britain's national police forces. That is years of investigator time, not a press release. Commitment is high because an unsealed indictment cannot be withdrawn quietly, and the government has tied its new vocabulary to a case it must prove. Reversibility is low for the same reason. Persistence is a year: the prosecution runs through 2027, but one case does not change how companies authorise payments.

The words

Super intelligence: The United States government's official term for AI since a September 2026 executive order directed agencies to write it instead.
Aggravated identity theft: Using a real person's identity while committing another felony. It adds a mandatory sentence on top of the underlying crime.
Unsealing an indictment: Making public a grand jury charge filed in secret, usually once defendants are held. It is an accusation, not a finding of guilt.
Business email compromise: Fraud in which an attacker poses as a trusted executive or supplier to redirect a payment.

Sources

Your call

Which explanation do you believe?

A call is final. Other people's calls show after yours.