Microsoft tracks AI-assisted CEO impersonation emails seeking $50,000 from finance teams

What Microsoft observed

Microsoft Threat Intelligence described on 10 September 2026 a financial fraud campaign that sent more than a million emails to enterprise users between 3 and 5 August 2026. The attacker used several third-party email service accounts, and 87.7% of the messages went to users in the United States. IT services and business advisory firms and consumer goods companies were among the most targeted sectors.

Each email impersonated an executive of the targeted company, such as the CEO, CFO or president, in the sender name, the reply-to name and the signature. The body simply approved the invoice below and asked accounts payable staff to process an ACH payment of nearly $50,000. Under the signature sat a detailed but fabricated ServiceNow annual subscription invoice, personalised with the recipient company and executive name, followed by a fake forwarded exchange between the company's executive and ServiceNow's president.

Where generative AI comes in

Microsoft says the email templates showed several signs consistent with AI-assisted development: verbose HTML comments describing each section, structured section labels, uniform construction and banner lines of equals signs. It also lists heavy use of long dashes as an indicator now associated with AI writing. Invoice numbers and the narrative stayed largely the same across samples while company details changed, which suggests template-based generation.

Microsoft is careful about the limits of this evidence. It says the indicators suggest generative AI involvement but do not by themselves establish how much of the content AI produced. The blog describes no synthetic voice or video; the fakery was in text, branding and documents. The actor registered a ServiceNow lookalike domain, service-nowinc.com, on 31 July, along with a second domain for reply-to addresses. Microsoft found no evidence that ServiceNow or the other organisations named in the lures were compromised.

Who is affected and how to defend

Finance and accounts payable teams are the direct targets. Microsoft points to tells that remain visible: forwarded messages missing normal headers, left-aligned rather than nested earlier replies, display names that do not match sender addresses, typos in subjects such as ACH Parment, and a CEO who asks not to be copied yet sends the approval from the same address. It recommends SPF, DKIM and DMARC, spoof protection, zero-hour auto purge in Office 365 and automatic attack disruption in Defender XDR. More on AI-enabled fraud is under Cybersecurity.

What to watch next

The blog does not say how many payments were made or how much money was lost, and it does not attribute the campaign to a named group. The next questions are whether the same templates reappear against other software vendors' branding and whether payment verification steps catch them.

Questions people ask

How much money did the scam ask for?

Each email asked the finance team to process an ACH payment of nearly $50,000 to an attacker-controlled bank account. Microsoft does not state how many payments were made.

Was ServiceNow hacked?

No. Microsoft says it found no evidence that ServiceNow or the other impersonated organisations were compromised. The attacker used a lookalike domain and a fabricated invoice.

How does Microsoft know AI was used?

It points to verbose HTML comments, structured section labels, uniform templates and other stylistic markers. Microsoft says these suggest AI involvement but do not prove how much content AI generated.

Sources

1. Protecting organizations from AI-assisted executive impersonation and invoice fraud (Microsoft Security Blog (Microsoft Threat Intelligence), 10 Sep 2026)