The phone rings. It is your daughter, crying, saying she has been in an accident and needs money right now. It sounds exactly like her. But she is safe at home, and the voice was generated by software. This is a voice-cloning scam. A companion to our guide on spotting deepfakes, this article focuses on phone-based fraud. We compared advice from the US Federal Trade Commission, Los Angeles County's consumer affairs office, a regional internet provider and a credit union, plus the FBI-ABA deepfake advisory. Some of these pages quote statistics without sources, so we left those out.
Key takeaways
- Scammers can clone a voice from a short clip, such as a social media video or a voicemail greeting.
- The classic script is urgency, secrecy and payment by wire, cryptocurrency or gift card.
- Do not rely on recognising the voice. Hang up, call back on a number you already have and use a family code word.
How the Scam Works
- Collect audio. The FTC explains that scammers copy a family member's voice from a short clip, often from content posted online. CityNet lists social media, voicemail greetings and podcasts as sources.
- Learn the family. Public posts reveal names and relationships that make the call believable.
- Call with an emergency. A grandchild arrested, a car crash, a hospital bill. The cloned voice can now be generated live during a call.
- Add pressure. CityNet describes a second "authority" caller, such as a lawyer or bail bondsman, joining to make it seem official, and instructions to keep the call secret.
- Demand hard-to-recover payment. Wire transfers, cryptocurrency, gift cards or cash pickup.
Common Scenarios
- "Grandparent" or family emergency: arrest, accident or medical bills.
- Boss impersonation: an "executive" asks an employee to wire money or share codes. The FBI-ABA advisory lists impersonation of loved ones, officials and celebrities among deepfake tactics.
- Bank or support impersonation: a cloned voice asks you to "verify" a login code.
- Supplier fraud: a familiar contact says their bank details have changed.
Red Flags
- Extreme urgency and pressure to stay on the line.
- A request for secrecy: "Don't tell Mum."
- Payment by wire, cryptocurrency or gift card, or requests for account numbers and personal details.
- A call from an unknown number or "a new phone".
- An extra "official" voice that suddenly joins the call.
- A voice that sounds exactly right. The credit union's advice is blunt: that alone does not prove the caller is genuine.
7 Steps to Stay Safe
- Agree a family code word that only your family knows, and ask for it before doing anything else. The Los Angeles County office, CityNet and the FBI-ABA advisory all recommend it. Never post it online.
- Hang up and call back on a number you already know is theirs.
- Check the story with another relative or a friend who might know where the person is.
- Be wary of payment requests by wire transfer, cryptocurrency or gift card. They are hard to undo.
- Never share one-time codes or account details with someone who called you.
- Limit public voice exposure. The FTC advises caution about posting recordings and personal details online; review privacy settings and voicemail greetings.
- Secure your accounts with two-factor authentication or passkeys so stolen information does less damage.
For Businesses
The same habits apply at work. Require two people to approve transfers and changes to bank details, verify requests from "executives" through a separate channel and train staff on AI impersonation. Our guide to ransomware protection covers other controls that belong in the same policy.
What If You Already Sent Money?
- Contact your bank or card issuer immediately and ask them to stop or recall the transfer.
- Report the fraud to the FTC at ReportFraud.ftc.gov and the FBI's IC3 at ic3.gov, and file a police report. The FBI-ABA advisory also lists your bank and local law enforcement.
- Change passwords on affected accounts and watch for unusual activity; set up alerts in online banking.
- Warn the real person whose voice was used.
Talk About It
The most effective protection is awareness. Share this with parents, grandparents and your team. For businesses looking to tighten security around payments and internal systems, Node-devs builds custom approval workflows and secure applications.
References and further reading
This guide was compiled from the sources below. We compared them, kept the points they agree on and wrote the article in our own words. Check the originals for more detail.
- Scammers use AI to enhance their family emergency schemes (US Federal Trade Commission)
- Scammers use AI to enhance family emergency scams (Los Angeles County Department of Consumer and Business Affairs)
- AI voice cloning scams: how to protect yourself and your family (CityNet)
- AI voice cloning scams: when familiar voices can't be trusted (Broadview Federal Credit Union)
- FBI issues guidance for avoiding deepfake scams (KnowBe4)
