Deepfake threats are escalating across the financial sector, with fraudsters increasingly using AI-generated images, audio, and videos to bypass security controls, impersonate executives, and spread false information. Recent incidents, including a case involving an Indonesian financial institution, highlight the growing risks to digital KYC processes, financial transactions, and brand reputation. To strengthen resilience, financial institutions should adopt layered defenses such as liveness detection, document verification, multi-factor authentication, deepfake detection tools, staff awareness training, and incident response protocols. Continuous monitoring, testing, and collaboration with regulators are also critical to mitigating emerging cyber risks associated with deepfakes.