AI Voice Fraud Exposes Costa Rica’s Trust Gap

Social engineering has become a key concern in such companies, where the budget is often tight for mandatory compliance training, and internal governance runs on personal trust and informal hierarchy. “In that culture, questioning a request from the owner or the CEO is not just unusual; it feels disloyal. Attackers know this. They exploit it deliberately,” Mauricio París, a leading expert in arbitration and digital law in Costa Rica and partner at ECIJA, one of the largest law firms in Spain, told Nearshore Americas.

Under Costa Rican law, liability in such cases is genuinely unsettled. The legal gap is specific: there is no regulatory standard that mandates what a voice-verification protocol must look like for financial transactions. The attacker is obviously liable criminally, but they are rarely identified because they often operate from other jurisdictions.

Continue reading here