Deepfake voice scams: how to verify a panicked call from family
Industry / situation. Updated 2026-09-13. About 5 minutes to read.
Agree a family code word today, and if a loved one calls in a panic asking for money, hang up and call them back on the number saved in your phone.
A voice clone needs only a short clip of someone speaking, the kind posted in a social media video or left in a voicemail greeting. Scammers pair it with a spoofed number and a crisis, and the call sounds exactly like your child, grandchild, partner or boss.
You do not need to be able to hear the difference. The FBI says to create a secret word or phrase with your family and to hang up and call the person directly. The FBI tagged 22,364 complaints as AI-related in 2025, with 893 million dollars lost, and 352 million of that came from people aged 60 and over.
How a cloned voice call unfolds
Collection: the scammer finds a clip of the person's voice on social media, a video, a podcast or a voicemail greeting.
Setup: they learn names, schools and travel plans from public profiles, then spoof the person's number or use a new one.
The call: a few seconds of the cloned voice crying or panicking, such as an accident, an arrest or a kidnapping.
The handoff: a 'police officer', 'lawyer' or 'kidnapper' takes over so the cloned voice does not have to hold a long conversation.
Urgency and secrecy: bail, a hospital deposit or a ransom is needed now, and you must not call anyone else.
Payment: a wire transfer, crypto, gift cards, a payment app, or cash handed to a courier who comes to your door.
What gives the call away
'Mum, it's me, I'm in trouble, please don't hang up.'
'I can't talk long, here's the officer.'
'Please don't tell Dad, I'm so embarrassed.'
'My phone is broken, don't call my number.'
'Bail has to be paid today, a courier will collect the cash.'
'If you hang up or call the police, you'll never see her again.'
Short, emotional bursts of speech, avoidance of questions only the real person could answer, and a rush to hand the phone to someone else.
Do not rely on spotting a robotic voice. Clones can sound nearly identical to the real person. Verification, not listening, is what protects you.
Set up a family code word today
Choose a word or short phrase that is easy to remember but not guessable from social media, such as a made-up word, not a pet's name.
Share it in person or on a call, never in a group chat or post.
Agree the rule: anyone asking for money or help in an emergency must say the code word.
Practise once with older relatives so they feel comfortable asking for it under pressure.
Change the word if you think it has been shared outside the family.
Verify while the pressure is on
Ask for the code word. If the caller cannot give it or changes the subject, end the call.
Hang up and call the person on the number saved in your contacts, not the number that called you.
If they do not answer, call another family member, their partner, school or workplace.
For a call from your boss or a government official, hang up and call back through the organisation's switchboard or website.
Never send money, gift cards or crypto while you are still unsure. A real emergency survives a five-minute check.
The same trick at work and in politics
Cloned voices are not only used on families. Finance staff receive calls or voice notes from a 'chief executive' asking for an urgent, confidential transfer. The FBI has warned that since April 2025 criminals have sent text and AI-generated voice messages impersonating senior US officials to build trust before asking targets to move to another platform or share access.
The defence is the same: a payment or access request that arrives by voice alone is verified through a second, known channel before anyone acts. Businesses should write that rule into their payment process so staff are never judged for calling back.
Reduce how much of your voice is available
Set social media accounts to private and limit followers to people you know, which the FBI recommends.
Replace a personal voicemail greeting with the phone's default message.
Avoid long conversations with unknown callers, who may be recording to capture your voice.
Ask your bank whether it uses voice recognition to identify you, and choose another method if you are uneasy about it.
Talk to teenagers about public videos that combine their voice, full name and school.
If you already paid
Call the person you thought you were helping to confirm they are safe.
Call your bank on the number on your card and ask for the payment to be stopped or recalled. For gift cards, call the card company.
Save the call log, the number, any voicemail and payment receipts.
Report it. US: ReportFraud.ftc.gov and ic3.gov. Australia: ReportCyber at cyber.gov.au and Scamwatch. England, Wales and Northern Ireland: Report Fraud on 0300 123 2040, or Police Scotland on 101. Canada: the Canadian Anti-Fraud Centre on 1-888-495-8501.
If a courier collected cash, call the police, because couriers often return for a second collection.
Frequently asked questions
How much audio does a scammer need to clone a voice?
The FTC says a short audio clip is enough, the kind that can be taken from a video posted online. That is why verification matters more than trying to spot the fake.
Can a deepfake voice hold a real conversation?
Increasingly, yes, but scammers still keep the cloned voice brief and hand the call to a second person. Asking a personal question or for your code word usually breaks the script.
The call came from my daughter's real number. Does that mean it was her?
No. Caller ID can be spoofed to show any number. Hang up and call her back yourself, which connects to the real phone.
Are voice clone scams used against businesses too?
Yes. Scammers imitate executives to request urgent transfers, and the FBI has warned about AI-generated voice messages impersonating senior US officials. Businesses should require call-back verification for payment changes.
What should the family code word be?
Something short, memorable and not findable online. Avoid names of pets, streets or schools. A random pair of words works well.