AI Agent Impersonation Execution

A subject commits an infringement by delegating impersonation activity to an artificial intelligence (AI) agent that autonomously or semi-autonomously executes deceptive communications within or outside the organization.

This behavior occurs when a subject configures or tasks an AI agent to replicate the identity, tone, authority, or communication style of another individual (such as an executive, HR representative, legal counsel, or trusted colleague) and the agent executes impersonation actions that result in material harm.

The AI agent may be directed to:

• Learn or replicate a specific identity based on internal communications.
• Generate context-aware communications dynamically.
• Automatically send or respond to messages.
• Adapt content based on recipient replies.
• Sustain multi-step interactions without direct manual drafting by the subject.

Unlike manual impersonation, this behavior involves delegated execution. The AI agent operates as the impersonation engine, producing and transmitting deceptive content at scale or with persistence beyond what the subject could realistically maintain manually.

Examples include:

• An AI agent generating and dispatching executive-style requests for financial transfers.
• Automated conversations designed to solicit credentials or sensitive documents.
• AI-driven responses to follow-up questions that maintain the credibility of a fabricated identity.
• Persistent impersonation campaigns targeting internal departments or external partners.

The infringement is established when the AI agent executes deceptive communications that result in fraud, credential compromise, unauthorized disclosure, reputational harm, or operational disruption.

The defining characteristic is the autonomous execution of impersonation through an AI agent acting under the subject’s direction.

The subject remains fully accountable for the deception and resulting harm. The AI agent amplifies realism, adaptability, and scale, significantly increasing the effectiveness and persistence of impersonation-based misconduct.