The US Federal Trade Commission reported that consumers lost more than 12.5 billion US dollars to fraud in 2024, about 25 percent more than in 2023, and imposter scams alone accounted for 2.95 billion US dollars. Those numbers predate the next wave: scammers who need only a short audio clip of a relative’s voice to run a convincing AI voice scam.
This guide explains how deepfake scam calls and voice cloning scams work, which red flags give them away, and a simple verification routine you can teach to parents and children before the phone rings. The goal is not to make you paranoid but to give you one habit that beats the technology: do not trust the voice, verify the story.
How Deepfake Scam Calls and Voice Cloning Scams Work
The FTC describes the family emergency scam: a caller poses as a relative in trouble, such as after a car crash or an arrest, and asks for money. With voice cloning, the caller sounds like the person you love, because the scammer needs only a short audio clip, which may come from online posts, and a voice-cloning program. The FBI’s Internet Crime Complaint Center adds a second use: criminals have used cloned audio to impersonate people and try to gain access to bank accounts.
The technology is not the only ingredient. The script still relies on panic, a story that is hard to check in the moment, and a request for payment that cannot be reversed. A cloned voice simply removes the instinctive check that used to protect people, which was whether the voice sounded wrong. Our report on how hackers use AI now explains why these tools are becoming cheaper and more accessible.
Red Flags in an AI Voice Scam
A real emergency rarely requires secrecy or a payment that cannot be traced. The FTC warns that scammers push payment methods that make it hard to get money back, and names wire transfers, cryptocurrency and gift cards, including requests to read out card numbers and PINs.
| Red flag | What it sounds like | What to do |
|---|---|---|
| Urgency | I need money right now, there is no time | Slow down; urgency is the tactic |
| Secrecy | Do not tell mum or dad | Tell someone; secrecy blocks the check that would expose the scam |
| Unusual payment | Buy gift cards, send crypto or wire it | Stop; these are hard to reverse, as the FTC warns |
| Unknown number or spoofed ID | I lost my phone, this is a new number | Hang up and call the saved number |
| Odd gaps or pacing | Slight delays, flat tone, stock phrases | Ask a question only the real person would know |
| Impersonating an authority | Bank, police or a company says your account is at risk | Hang up and call the organisation’s official number |
The Verification Routine: Five Steps That Beat a Cloned Voice
Step 1: Stop and do not act on the call
Any request for money or sensitive information is a reason to pause. You can say you will call back in two minutes. A real family member will understand, and a scammer will push harder.
Step 2: Hang up and call back on a known number
The FTC advises calling the person who supposedly contacted you on a number you already know is theirs. The FBI’s IC3 gives similar advice for organisations: hang up and call the organisation’s number directly, found through your own research, not the number the caller supplied.
Step 3: Use the family safe word
The IC3 recommends creating a secret word or phrase with your family to verify identity. Choose something that cannot be guessed from social media, such as a random pair of words, and agree that anyone asking for urgent money must say it. Practise it once so everyone remembers it.
Step 4: Check with another person
The FTC says that if you cannot reach the person, try other family members or their friends. Share the story you were told and see whether anyone can confirm it.
Step 5: Report it
The FTC asks consumers to report scams at ReportFraud.ftc.gov. If you sent money, contact your bank immediately, because speed gives you the best chance of stopping or recovering a transfer. Reports also help investigators spot patterns.
Protecting Your Voice and Your Family
The IC3 advises limiting online content of your image or voice and making social media accounts private, to reduce material that fraudsters can use to build convincing fake identities. You do not need to delete everything, but you can review which videos are public and who can see them. The FTC’s family emergency scam is also known as the grandparent scam, so a short conversation with older relatives about the safe word is one of the most useful things you can do this month.
Treat other channels the same way. Phishing messages, fake support chats and fake video calls follow the same pattern as the voice call, and our guide to AI-powered phishing attacks shows how convincing they have become. If a scam has already exposed your details, our data breach response guide lists the steps to take next.
For Businesses: Voice Cloning in Payment and Account Fraud
Finance teams, support desks and executive assistants are natural targets, because a convincing voice can authorise a payment or reset an account. Put a call-back rule in writing: any payment change, urgent transfer or credential reset requested by phone must be verified through a separate channel, using a contact detail already on file. Add a second approver for new payees, and train staff on the pattern, not just the technology. Our small business cybersecurity audit gives a checklist for the controls that cover these gaps.
