An international hunt is underway for a hoaxer who successfully impersonated a senior White House official to exchange messages with the Prime Minister, raising security concerns. The imposter posed as Susie Wiles, described as Donald Trump's chief of staff and "enforcer," engaging in message exchanges with the Prime Minister in the days before and after he assumed office last month.
The breach of security protocols prompted the British embassy in Washington to alert the White House, with U.S. officials reportedly stating the incident left the Prime Minister "looking like a chump." Downing Street has declined to comment on national security matters, citing the ease with which security protocols were circumvented.
Security experts suggest the tactic may have been inspired by methods used by Iran, although Whitehall sources indicate the operation was orchestrated within the United States. Concerns were raised about why security protocols were not more stringent, particularly given that Wiles's devices had previously been targeted by Iran. A spokesman for Downing Street stated, "We do not comment on national security matters."
Sources close to the incident insist that only a few messages of minor significance were exchanged, and no phone conversations took place. The incident was reportedly flagged to authorities quickly after it was identified. A source familiar with White House communications noted that traditionally, a trusted chain of communication exists between British and U.S. officials to ensure secure and formal exchanges.
Professor Anthony Glees, a security and intelligence expert from the University of Buckingham, described the incident as a "bullseye as far as an attack is concerned" and a "very serious" matter, not a laughing one. He emphasized the significance of exchanging messages over several days with someone believed to be Trump's chief of staff during a critical transition period of power. He also pointed out that Wiles's phone had been previously hacked, and questioned why those responsible for the Prime Minister's security were not aware of this vulnerability.
Susie Wiles's phone was reportedly hacked by an impersonator last May, who used her contacts to message other top American officials and, utilizing AI, mimicked her voice in calls with prominent Republicans. The key aide was also targeted by a cyber espionage unit linked to Iran's Revolutionary Guards in 2024, with hackers infiltrating her emails before the 2024 election and threatening to release further information.
The White House stated that the incident had "nothing to do with the chief of staff's devices being hacked." President Trump, when questioned about the Prime Minister's judgment during an Oval Office press conference, dismissed it as a "miscommunication."
Following the hack last year, Ms. Wiles is understood to have changed her phone number and email address, and security measures were enhanced during an FBI investigation that has not yet identified the culprit. Reports have also emerged that personal mobile phone numbers for at least three British Cabinet ministers, including the Defence Secretary, were found online and subsequently removed after being flagged.
Former defense secretary Ben Wallace, who was himself a victim of a hoax call in 2022, commented that the incident demonstrates adversaries are constantly seeking communication vulnerabilities. He advised government ministers to "always, always assume your mobile phone is compromised."
Prerana Joshi of the RUSI think-tank warned that exposed phone numbers could be exploited by a range of malicious actors. Andrew Bud, founder of iProov, an organization specializing in identity verification, noted that AI's ability to easily copy faces and voices means that familiar calls or videos are no longer a reliable indicator of identity, making individuals from the Prime Minister to family members potential targets.
This incident echoes previous instances where high-profile figures have fallen victim to hoax calls. In 2022, then-Foreign Secretary David Cameron was tricked into video calls and text exchanges with an imposter posing as the former president of Ukraine. In 2015, then-Prime Minister David Cameron had his security reviewed after a scammer posing as the head of GCHQ was connected to him. Prince Harry was also famously duped in 2020 by Russian hoaxers impersonating Greta Thunberg, discussing his relationship with the Royal Family and commenting on President Trump's policies. Former Prime Minister Tony Blair was once called by an impressionist pretending to be opposition leader William Hague, and Sarah Palin, former U.S. Republican vice-president candidate, was pranked in 2008 by Canadian comedians impersonating French President Nicolas Sarkozy.