British Prime Minister Andy Burnham exchanged messages with an individual posing as Susie Wiles, the White House chief of staff and one of U.S. President Donald Trump’s closest advisers. The incident has raised questions about the security and verification of communications at the highest political level between Britain and the United States.
Reports about the incident emerged on August 17, 2026. According to officials familiar with the matter, Burnham initially believed he was communicating with Wiles but became suspicious during the exchange and eventually stopped responding.
An important distinction is that there is no evidence that Burnham conducted formal political negotiations with the impostor. The contact consisted of a limited exchange of messages, and one person briefed on the communications described them as being “of no significance.”
The BBC reported that there was no telephone or verbal conversation between Burnham and the impersonator. What was discussed in the messages has not been publicly disclosed.
There is also no confirmed evidence that classified or sensitive government information was handed over. Downing Street has declined to provide details, saying it does not comment on matters involving national security.
The incident was nevertheless treated seriously enough for British officials to alert their American counterparts. The British Embassy in Washington raised the matter with the White House after concerns emerged about the identity of the person communicating with Burnham.
The White House has said that the incident was not caused by Susie Wiles’ devices being hacked. This is significant because Wiles had previously been targeted in a separate security incident involving people who received communications from someone impersonating her.
In 2025, U.S. authorities investigated a series of messages and calls sent to politicians, business executives and other prominent figures by an individual or individuals claiming to be Wiles. The FBI became involved in the investigation.
That earlier case raised concerns that information from Wiles’ personal contacts may have been compromised. The latest incident involving Burnham, however, is being treated separately, and the White House says Wiles’ devices were not breached in this case.
The problem extends beyond one White House official. U.S. authorities have previously warned that malicious actors are increasingly using artificial intelligence and other digital tools to impersonate senior government figures.
One prominent example involved U.S. Secretary of State Marco Rubio. An impostor attempted to contact senior officials while pretending to be Rubio, including at least three foreign ministers, a U.S. senator and a governor.
Such schemes can involve ordinary text messages, encrypted messaging applications and AI-generated audio. Voice-cloning technology can make an impersonation considerably more convincing because the recipient may hear what appears to be the voice of a person they know or recognise.
The Burnham incident is particularly sensitive because of its timing. He became British prime minister on July 20, 2026, succeeding Keir Starmer, and has been seeking to establish a working relationship with the Trump administration.
Reports indicate that the communication with the person claiming to be Wiles began before Burnham entered Downing Street and continued after he became prime minister.
Political transitions can create particularly attractive opportunities for impersonation attempts. New leaders and their teams establish large numbers of contacts with foreign governments, advisers and diplomatic representatives, making reliable identity verification increasingly important.
Wiles would be a particularly plausible identity for such an attempt. As White House chief of staff, she occupies one of the most powerful positions in the Trump administration and would naturally be involved in communication surrounding relations between the U.S. president and foreign leaders.
The case therefore raises a broader security question: how can governments reliably verify the identity of people communicating with senior political leaders when modern technology makes it increasingly easy to imitate names, writing styles, voices and potentially even video?
Britain has faced similar incidents before. In 2024, then-Foreign Secretary David Cameron exchanged messages and participated in a video call with someone claiming to be former Ukrainian President Petro Poroshenko. Cameron became suspicious, and the Foreign Office subsequently confirmed that the contact had been a hoax.
In 2015, an impostor claiming to be the head of Britain’s GCHQ intelligence agency managed to get through to then-Prime Minister David Cameron. Cameron ended the conversation after becoming suspicious because he did not recognise the caller’s voice.
These incidents demonstrate that impersonation attacks do not necessarily require hackers to penetrate highly protected government networks. Sometimes the objective is to persuade the target that the person on the other side of an ordinary communication channel is someone they trust.
That technique is a form of social engineering, and advances in artificial intelligence potentially make it more difficult to detect. A convincing message combined with accurate personal information and a cloned voice could be enough to deceive even experienced officials.
In Burnham’s case, the available evidence indicates that the deception was discovered before it developed into something more serious. There is currently no confirmed evidence of leaked state secrets or policy decisions being influenced by the false communications.
For that reason, describing the incident as formal “negotiations with a fake Trump adviser” would go beyond what has been established. What is confirmed is that Britain’s prime minister exchanged several messages with someone pretending to be the White House chief of staff before becoming suspicious.
Even so, the incident represents a significant warning for governments on both sides of the Atlantic. The central security challenge is increasingly not only protecting phones, servers and encrypted networks from hacking, but also proving that the person behind a message, call or video conversation is actually who they claim to be.
