Payment authorisation failed at the top of the organisation, not the bottom. Fideuram’s fraudsters did not need to break into anything. In February 2026, someone sent a WhatsApp message to Paolo Molesini, then chairman of Fideuram, Intesa Sanpaolo’s private banking arm, that appeared to come from Carlo Messina, chief executive of the parent bank. The message asked for urgent help with an overseas transaction. A phone call followed, confirming the request, using an AI-cloned voice of a senior partner at a prominent law firm. Molesini, satisfied, instructed Fideuram’s finance department to move the money. By the time anyone questioned it, roughly €95 million had gone out, mostly to accounts in China and Hong Kong.
Two Channels, One Attacker
What matters most is not that the fraud used artificial intelligence. It is that Fideuram’s own confirmation process asked the same question twice and accepted two answers from the same source. The WhatsApp message established who was asking. The phone call, cloned voice and all, confirmed it. Both signals originated with the attacker. Nothing in that sequence checked the request against a channel the bank already held: a known internal number, a callback to a verified contact, a second approver with no relationship to the first request. Two confirmations that both answer who is asking are not independent verification. They are the same lie, told twice, in two different voices.
Fideuram did eventually catch the irregularity, raised the alarm with banks and authorities across several jurisdictions, and recovered more than half the money through cooperation between investigators in Italy, China and Portugal. Roughly €36 million was converted into cryptocurrency before it could be traced and remains missing. Milan prosecutors are now pursuing a foreign national, reportedly using a false identity, on suspicion of computer fraud. Neither Molesini, who resigned as chairman in March citing personal reasons, nor any other Fideuram executive is under investigation. Intesa Sanpaolo and Fideuram have declined to comment on the case.
The Payment Authorisation Gap Sits Above the Help Desk
Most AI fraud coverage points at the employee who clicked the wrong link, or the call centre agent who waved through a password reset. This case sits in a different place entirely. The target was the chairman of a major private bank, acting on what looked like a direct instruction from his own group chief executive, corroborated by a voice he had every reason to trust. Phishing awareness training is built for people whose judgement an organisation expects to test. It was never designed for the one person whose authority is least likely to be questioned.
Payment authorisation controls built for junior staff rarely extend upward with the same rigour. A request that arrives through the chairman, confirmed by what sounds like a trusted lawyer, tends to move faster through an organisation precisely because of who appears to be making it. Seniority became the bypass that let the whole sequence through.
What a PMO Actually Owns Here
A supportive PMO does not run fraud controls, and it should not try to. What it can own is making sure the organisation has a documented, board-level answer to a specific question: which payment instructions, at which value, require verification through a channel the organisation controlled before the request arrived, regardless of who is asking. That answer needs to exist in writing, before the next urgent WhatsApp message lands, not afterwards as a response to one that already did.
Fideuram’s recovery of more than half the money shows that detection and interbank cooperation can still limit the damage once something goes wrong. It does not excuse the absence of a rule that would have stopped the transfer from happening at all. Every organisation with a treasury function and a chairman has the same exposure Fideuram had in February, whether or not anyone has tested it yet.
Pick the last high-value payment your organisation authorised on a senior executive’s instruction alone. Ask who verified it through a channel that executive did not control, and whether anyone could have said no.
