In February 2026, the U.S. Department of the Treasury released a new AI Risk Management Framework specifically for financial institutions. The framework aims to help banks govern the growing threat of AI-enabled fraud. The timing was not accidental. The clients most at risk are wealthy families whose names, faces, and financial relationships are searchable, visible, and exploitable.
Deloitte’s Center for Financial Services projects that AI-enabled fraud losses will reach $40 billion annually by 2027, up from $12.3 billion in 2023, a compound annual growth rate of 32%. In North America alone, losses from deepfake fraud exceeded $200 million in the first quarter of 2025.
Who the Criminals Are Targeting
High-net-worth individuals have become the most valuable targets in the fraud economy. They are visible on LinkedIn and in the press. Their advisors and family members are often publicly known. Their wealth is liquid and concentrated. AI tools can now clone a human voice using as few as three seconds of audio. A convincing deepfake video call, including multiple synthetic participants, can be assembled in under an hour using freely available software.
The attack pattern has grown more targeted. Cybercriminals scrape public data to build profiles on wealthy individuals, then impersonate their bankers, their accountants, or their adult children with near-perfect accuracy. Cybersecurity firm DeepStrike estimates that deepfake incidents online grew from roughly 500,000 in 2023 to approximately 8 million in 2025, with annual growth nearing 900%. Research from Gartner found that by 2026, 30% of enterprises would no longer consider standalone identity verification solutions reliable in isolation.
For private banking clients specifically, the threat is amplified by the nature of the relationships themselves. These clients receive calls directly from advisors they have known for years. That trust, cultivated through decades of personal relationship-building, is now the target.
“What I’ve seen is that the strength of the relationship has actually become the target,” said Justin Nelson, Managing Director and Head of the Asset Management and Financial Principals Coverage Team at J.P. Morgan Private Bank in Connecticut. “Criminals know that a longtime client is less likely to verify a request from someone who sounds exactly like their banker of 20 years. The closeness that is the pillar of our relationships is the same thing bad actors are trying to exploit.”
Nelson oversees more than $15 billion in assets and leads a team of 20 professionals advising clients across the hedge fund, private equity, and real estate industries in New York and Connecticut.
Why the Advisor Relationship Is the Strongest Checkpoint
When the Treasury released its Financial Services AI Risk Management Framework this February, one stated priority was fraud and digital identity. The framework includes 230 control objectives designed to help banks manage AI risk at scale. But for private banking clients, institutional controls only go so far.
The human relationship remains the most reliable checkpoint. An advisor who has spent years managing a family’s wealth across generations knows when a request sounds off, which family members handle decisions, and what an unusual ask looks like. No algorithm catches what a trusted advisor catches through context.
That is worth keeping in mind: human detection rates for high-quality deepfake video hover around 24.5%, meaning trained observers correctly identify synthetic video less than a quarter of the time.
“We’re having more conversations with clients about verification protocols than ever before,” Nelson said. “It’s not enough to recognize a voice or a face anymore. Families need agreed-upon procedures: code words, call-back requirements, secondary confirmations for any transfer request that comes through an unexpected channel. The families who are protected are the ones who set those protocols before they ever need them.”
A New Standard for Client Protection
The fraud threat has changed the job description of private bankers in ways not anticipated even five years ago. Nelson and advisors like him are now part of a broader client protection layer, one that goes well beyond investment performance.
“Our clients don’t just need someone who understands their portfolio,” Nelson said. “They need an advisor who knows their family well enough to flag when something doesn’t feel right, and who has built the kind of communication framework that bad actors can’t easily replicate. That is the practical value of a long-term advisory relationship in 2026.”
Treasury’s new framework is a necessary step. Institutions need scalable tools to defend the financial system at large. But for the clients that Justin Nelson and J.P. Morgan serve, the most credible checkpoint has always been the person on the other end of the phone who actually knows them.
That has never mattered more than it does now.
