deepfakes online went from about 500,000 in 2023 to an estimated 8 million this year. one of them is going to call your bookkeeper.

the volume moved from roughly 500,000 in 2023 to an estimated 8 million in 2026, and the version that reaches a company your size is not a political video, it is a thirty second phone call to whoever is authorized to move money. the condition underneath it is that a familiar voice has always functioned as identity inside your business, so an urgent request in that voice skips every control you have, because the controls were written for documents and logins. the cost is a same day wire your bank cannot recall after the cutoff, plus the part nobody prices, which is a controller who spends the next quarter second-guessing every legitimate request.

the fake fix is training people to listen for something off in the audio, and hearing the difference stopped being a human skill about a year ago.

do the version that holds: write one rule that any request to move money, change bank details, or send payroll data gets verified by calling back on a number already in your records, never a number offered during the call, apply it to yourself louder than you apply it to anyone else, and tell your team in writing that nobody gets penalized for making the boss wait ten minutes. it costs nothing and it is the only control that still works when the voice is perfect.