Singapore's deepfaked cabinet cost one victim S$4.9m, and the NDA did the real work

Detectability was never the control that failed here. The police release of the call annotates exactly the artefacts a careful viewer would catch, lips out of sync and audio that does not match ^[8]. Someone briefed to look for those things finds them. Someone who has signed a non-disclosure agreement and believes he is in a classified session about a funding emergency in the Strait of Hormuz is not a careful viewer, and was never intended to be ^[4][3].

The NDA is the load-bearing part of this fraud, and it was signed before the video call rather than after it ^[4]. There was no secret to keep. Its function was to void in advance the check that actually defeats impersonation, which is a second person hearing the story and finding it odd. The rest of the approach is dressing: a cabinet secretary's photograph on a WhatsApp profile, a forged letter of guarantee attached to an email sent through Proton ^[2][3].

The likeness supply is where the economics sit. CNA traced the fabricated officials back to genuine footage from 2022, apparently cut and recombined from separate legitimate sources ^[9]. That is about four years between raw material and police disclosure ^[14], and none of it required access to anything that was not already public. Fidelity scales with archive volume, so the people cheapest to counterfeit are the ones with the largest published video record.

Then the payment leg. Money left in multiple transactions to a corporate account the scammers had set up ^[6], which means at least two separate authorisations of a large sum to a brand-new payee ^[16]. Each was a chance to compare the instruction against a channel the instructing party did not control, and none of them was. The report frames the case as a stress test for know-your-customer processes, which were not designed for impersonation at this fidelity ^[12]. KYC is the wrong frame. It screens the party opening an account, and by the report's own account the scammers' shell entity cleared that screen without difficulty ^[13]. What failed was payment authorisation.

Singapore has been logging deepfake attempts against its own leaders since 2023 ^[10], roughly three years of notice before this loss became public ^[15], and the advisories that followed tell citizens to verify unusual official requests through independent channels ^[11]. That instruction is correct, and it carries a second half that is rarely stated: the verifying channel has to be one the requester never touched, and an instruction that forbids consultation is itself the finding.