AI voice cloning lets a scammer imitate someone you love from a short recording of their voice, often taken from a video they posted online. The typical scam is a panicked call: your child, grandchild or partner says they’ve been arrested or hurt and need money right now. The defense is simple and it works: don’t trust the voice. Hang up, call the person back on a number you already know, and agree on a family code word that a scammer can’t know.
How does an AI voice cloning scam work? #
The U.S. Federal Trade Commission described the pattern in a consumer alert: the scammer needs only “a short audio clip of your family member’s voice — which he could get from content posted online — and a voice-cloning program.”
A typical call goes like this:
- The scammer finds a voice sample, from social media videos, a podcast, a voicemail greeting or a recorded video call.
- They clone it with widely available voice software.
- They call a relative, often an older one, with an emergency: an accident, an arrest, a kidnapping, a stranded trip.
- A second person takes over, posing as a lawyer, police officer or hospital worker, to explain how to pay.
- They push urgency and secrecy: “Don’t tell Mom,” “You have one hour,” “Don’t hang up.”
- They ask for payment that’s hard to reverse: wire transfers, cryptocurrency, gift cards or cash handed to a courier.
The cloned voice may only be on the line for a few seconds, sobbing or speaking in fragments, which hides any imperfections.
Warning signs of a voice cloning scam #
- A sudden emergency from a family member, with a request for money
- Pressure to act immediately and not hang up
- A request to keep it secret from other family members
- Payment by wire, cryptocurrency, gift cards or a courier picking up cash; the FTC flags these specifically
- A caller ID you don’t recognize, or one that’s been spoofed to look familiar
- A second “official” who does most of the talking
- Details that are slightly off, or answers that dodge personal questions
What to do during a suspicious call #
- Stay calm and don’t agree to anything. Real emergencies can wait the two minutes it takes to check.
- Ask a question only the real person would know, or ask for your family code word.
- Hang up. You don’t need to be polite.
- Call the person back on a number you know is theirs, as the FTC advises: “Don’t trust the voice. Call the person who supposedly contacted you and verify the story.”
- If you can’t reach them, call someone who’s with them or another family member.
- Never pay with gift cards, crypto or a wire transfer to someone who called you.
Set up a family code word #
A code word defeats voice cloning completely, because the scammer can copy the voice but not the secret.
- Pick a word or phrase that isn’t guessable from social media: not a pet’s name, not a street.
- Share it in person or on a call you started, never in a group chat or post.
- Make sure grandparents and teenagers know it. They’re the most frequent targets and callers.
- Agree that anyone asking for emergency money must give it, no exceptions.
- Change it if it’s ever used or shared.
Make your voice harder to clone #
You can’t hide your voice entirely, but you can reduce the easy samples:
- Set social media accounts with a lot of video of you talking to private or friends-only.
- Consider a generic voicemail greeting instead of one recorded in your own voice.
- Be wary of unexpected calls that keep you talking with no clear purpose.
- If a bank or service uses your voice to verify you, ask whether a stronger option is available.
What to do if you already paid #
Act fast. Money is easier to stop in the first hours.
- Contact your bank or payment provider immediately and report fraud.
- For gift cards, contact the card company with the card numbers and receipt.
- For crypto or wire transfers, contact the service you used right away.
- Report it at ReportFraud.ftc.gov in the U.S., or to your national fraud agency elsewhere, and to local police.
- Warn your family, since scammers often try again.
Checking scam texts and messages privately #
Voice scams are often followed by texts or emails “confirming” the story or giving payment details. If something feels off, it helps to have a second opinion that doesn’t involve forwarding the message to a stranger or a company. Personal LLM runs an AI model entirely on your phone, so you can paste a suspicious message and ask whether it has the hallmarks of a scam without it leaving the device. It doesn’t use your microphone at all. It can’t verify who sent something, so treat it as a sanity check, not proof. Our guide to checking whether a text is a scam with AI covers the red flags.
If you’re thinking about how much of your voice other services collect in general, see private voice assistants that keep your voice on device and voice assistant privacy settings.
Frequently asked questions #
How much audio does a scammer need to clone a voice? #
Not much. The FTC says a short clip, the kind that’s easy to find in videos posted online, can be enough with a voice-cloning program.
Can you tell if a voice is AI-generated? #
Sometimes, from odd pauses, flat emotion or strange pronunciation, but good clones are hard to spot, especially in a short, emotional call. Don’t rely on your ear. Verify by calling back on a known number.
What is a family safe word? #
A private word or phrase your family agrees on to confirm identity in an emergency. If a caller claiming to be a relative can’t give it, hang up and call the real person.
Are older people more likely to be targeted? #
Grandparents are frequent targets of “family emergency” scams, but anyone can be. Make sure everyone in the family knows the code word and the call-back rule.
Where do I report an AI voice scam? #
In the U.S., report it to the FTC at ReportFraud.ftc.gov and to local police. Also tell your bank or payment provider right away if you sent money.