{^} Executive Deepfake Defense & Wire-Transfer Verification Playbook
For CFOs, controllers, treasury and accounts-payable teams — and the executive assistants who field the requests. If your job includes releasing a wire, approving an ACH change, or updating a supplier's bank details, this playbook was written for your desk.
The problem: a familiar voice on the phone or a face on a video call used to be treated as proof an executive approved a payment. Generative AI has broken that assumption — in the Arup case, a finance employee wired about US$25.6M after a video call where every other participant was a deepfake. A control that relies on seeing or hearing the requester is now the attacker's preferred channel.
The fix in this kit: a written, out-of-band verification procedure your team follows the same way every time — a callback rule using pre-registered numbers, dollar-based approval tiers, a printable authorization form, and a log that proves the steps happened. Everything runs offline on your own computer: no account, no server.
What you receive
-
Deepfake_Defense_Playbook.pdf— the 7-page playbook (186,557 bytes). -
Deepfake_Defense_Playbook.docx— the same playbook as an editable Word policy you can brand and adapt (50,422 bytes). -
Wire_Transfer_Verification_Log.xlsx— payment authorization log, pre-registered callback signer registry, and impersonation drill tracker (74,664 bytes). -
software/wire_gate_console.html— offline browser console that walks one wire through the callback steps and exports a SHA-256 memo and JSON receipt (9,459 bytes). -
software/p1_swift_seal_cli.py— zero-dependency Python 3 tool with --seal, --verify and --self-test (5,491 bytes). -
01_Deepfake_Defense_Cover.png— cover graphic (94,995 bytes). -
README_START_HERE.txt— quick start (2,643 bytes).
01_Executive_Deepfake_Defense_Playbook_Kit.zip — 274,997 bytes · 7 filesSHA-256:
7c5e903b6b7b4aa251debbc5ebf35b942641710d3d16349993c976193b2d29cf
Check the download yourself: shasum -a 256 <file>.zip on macOS/Linux or certutil -hashfile <file>.zip SHA256 on Windows.
Inside the 7 pages
- The AI-era impersonation threat brief (statistics cited to public sources: FBI IC3, FinCEN, NIST, and the Arup case reporting)
- Why video and voice approvals fail
- The out-of-band verification procedure, step by step
- High-risk action tiering matrix — suggested dollar thresholds your leadership sets
- Tri-Signature Executive Payment Authorization Form (printable)
- Suspected-deepfake incident response checklist
- Impersonation drill program, with the tracker in the workbook
Read a preview
From page 1, "How to read this playbook":
"All statistics are cited to public sources listed in the References. Nothing in this playbook reports results from a Protocol One trial. Fields your organization must fill in are shown as blank lines or [Your value], and any sample numbers are marked Example only. Dollar thresholds in the tiering matrix are suggested starting points to be set by your own finance and risk leadership. This playbook is an operational template, not legal, audit, or banking advice."
Formats & requirements
- Documents: PDF (print-ready), DOCX (editable in Word or compatible editors), XLSX workbook (Excel or compatible spreadsheet).
- Console: a single HTML file — open it in any modern browser, including from a local file; it works fully offline.
- Command-line tool: Python 3, zero dependencies, runs on Windows, macOS, or Linux.
- No account, no server, no internet connection needed after the download.
Licensing & support
- Licensed for internal use by the purchasing organization, for unlimited internal users. Do not resell or redistribute.
- Support is by email from the Standards Office: protocolonestandardsoffice@gmail.com. This is a small standards office, not a help desk — expect a considered reply, not an instant one.
Good to know
- It is a procedure and record-keeping kit, not a fraud detector. It does not stop fraud on its own and is not legal, banking or insurance advice.
- A seal shows whether a document has changed since it was sealed (tamper-evident). It does not prove that what the document says is true.
Instant .ZIP download on the order confirmation page, plus an email link (Shopify Digital Downloads). Covered by our 14-day refund policy. This kit is also part of the Complete Enterprise Bundle.
Protocol One — Standards Office, 3707 E Southern Ave, Suite 1023, Mesa, AZ 85206 · protocolonestandardsoffice@gmail.com