In whaling, fraudsters target the ”big fish” – the CEO, the CFO and other members of senior management. They gather targeted information about managers in advance and later pretend to be them.
21.04.2026 –Whaling combines CEO fraud, spear phishing and social engineering – often with major financial loss. Criminals collect snippets of information about potential victims on all kinds of platforms across the internet. Employees with access to payment or card data are then asked to make large transfers under time pressure. This often involves the use of sophisticated AI voice cloning.
How to prevent whaling:
- Do not disclose sensitive and personal information to strangers
- Be cautious when sharing information on social networks such as LinkedIn
- Train employees regularly on phishing (incl. simulations)
- Use multi-factor authentication
- Define clear processes for cash transactions
- Publish as little personal information about managers as possible
- Keep IT security up to date (VPN, antivirus protection, etc.)
Awareness is the best protection.
Read more News
Check before clicking
Thanks to AI, fraudulent messages now look deceptively real –often with serious consequences for… Read more
#watchout – even at the kitchen table!
The email from the online shop reads ”Parcel at customs”. If you don’t watch out, you can lose a… Read more
Last chance: A mammoth competition!
Protect yourself against phishing and win a prize! Don’t miss Card Security's mammoth… Read more
#watchout – even on public transport!
The message on the mobile phone display reads “Confirm payment.” If you don’t watch out, you can… Read more