No ski masks, no getaway cars. The modern heist arrives as a Friday afternoon email with a familiar vendor name, a friendly greeting, and new wiring instructions at the bottom. In this episode's first true story, a Texas family business wires 150,000 dollars before lunch. The bank cannot reverse it, the FBI says the money has already crossed six borders, and the vendor still wants their check. The owner's defense was one Jessica hears constantly: "We're not a tech company, why would we need cyber coverage?" Her answer: you have an email address, and that is all hackers need.
Then the upgrade: an employee answers the office phone and hears the CEO's exact voice, same accent, same impatient laugh, asking for a 50,000 dollar wire before his flight lands. It was an AI voice clone trained on podcasts and voicemails. The numbers behind the trick are staggering: deepfake enabled scams cost companies nearly 900 million dollars globally in the first half of 2025, and one global engineering firm lost 25 million to a fake video call with a deepfake CFO.
The episode's back half is the clearest plain-English tour of cyber insurance you will find: first party coverage for business interruption, data recovery, ransomware, and notification costs; third party coverage for lawsuits and regulatory fines; and the piece that matters most right now, social engineering fraud coverage, which answers precisely for fake invoices and cloned voices and often must be requested by name. Just as important are the conditions precedent: multi-factor authentication, annual training, separate backups. Skip those and the policy can refuse to pay. The best firewall, Jessica reminds us, is still a human who pauses, calls a known number, and verifies.
Loading transcript…
Prefer audio elsewhere? This episode is on Apple Podcasts, Spotify, and Amazon Music.
