Fake CEO Text Employee Scam via SMS
How a text message impersonating a company's CEO pressures an employee into an urgent, confidential wire transfer or sensitive action, exploiting corporate authority and the informal, immediate feel of SMS.
Part of: Fake CEO Text Employee Scam
Last reviewed: 13 July 2026
SMS carries a sense of immediacy and personal directness that email doesn't always have, and fraudsters impersonating a CEO exploit exactly that. A text message feels like a quick, informal, one-to-one request from someone busy and important, which discourages the kind of scrutiny an employee might apply to a formal email, even though setting up a display name or a similar-looking number to impersonate an executive over SMS is straightforward.
The request typically frames a wire transfer, a sensitive document, or account access as urgent and confidential, explicitly discouraging the employee from mentioning it to colleagues or calling to confirm because the 'CEO' is unreachable, in a meeting, or dealing with a deal that cannot be discussed openly yet. The combination of authority, urgency, and secrecy is designed to get the employee to act before anyone else in the organization can catch the request.
How this scam works on SMS
An employee, often someone in finance, HR, or an executive assistant role, receives an unexpected text message that appears to come from the CEO or another senior executive, sometimes using a real name known within the company. The message describes an urgent, confidential situation, a pending acquisition, an unexpected vendor payment, a sensitive personnel matter, and asks the employee to initiate a wire transfer or share sensitive information right away. The sender claims to be unreachable by phone or email due to travel, a meeting, or the sensitivity of the matter, and explicitly asks the employee to keep the request confidential from other staff. If the employee complies, follow-up messages may request additional transfers or further sensitive actions before the impersonation is discovered.
Common red flags
- An unexpected text message claiming to be from your CEO or a senior executive requests an urgent wire transfer or sensitive action
- The sender explicitly asks you to keep the request confidential and not mention it to colleagues
- The phone number doesn't match any number you have previously used to reach that executive
- The sender claims to be unreachable by phone or email and discourages verification through other channels
- The request bypasses your company's normal approval or purchase order process
- Urgency is used to prevent you from taking time to verify through a separate, trusted channel
How to protect yourself
- Verify any unusual request by contacting the executive directly through a known, separate channel, not the number that texted you
- Follow your company's standard approval process for wire transfers regardless of who appears to be asking
- Treat any request for secrecy from colleagues as a significant warning sign, not a reasonable business practice
- Confirm the sender's phone number against any previously verified contact details for that executive
- Establish a company policy requiring a second, independent approval for any wire transfer request received only by text
- Report suspicious executive impersonation attempts to IT security immediately, even if you didn't act on them
How to report it
- Report the incident to your company's IT security and finance departments immediately
- Contact your bank right away if a wire transfer was already initiated, to ask about recalling it
- File a report with the FBI's Internet Crime Complaint Center (IC3), which tracks business email and executive impersonation compromise
- Report the number to your mobile carrier and consider blocking it
Frequently asked questions
How can I verify a text claiming to be from my CEO is real?
Contact the executive directly using a phone number or email address you already have on file, not the number that sent the text, and check with a colleague through a separate channel if you're still unsure.
Why do scammers specifically ask for secrecy in these messages?
Keeping the request confidential prevents colleagues from cross-checking the story or recognizing the scam pattern, which is exactly the kind of internal check that would normally catch this type of fraud before money moves.
Can a wire transfer be recovered if I already sent one based on a fake CEO text?
Whether recovery is possible may depend on the payment method and timing — contact your bank immediately to ask about recalling the transfer, and report to the FBI's IC3 as soon as possible, since speed significantly affects the chance of any recovery.
Is it normal for executives to request wire transfers by text message?
Legitimate financial requests typically go through established approval processes rather than an unexpected personal text asking for secrecy and immediate action. A request that bypasses normal procedure is itself a warning sign.
What should my company do to prevent this scam?
Require a second, independent verification step for any financial request received only by text or email, particularly one involving urgency or confidentiality, and train staff to recognize and report executive impersonation attempts.