Voice-clone scams
A short clip of your voice can be enough for someone to call “as you.”
Voice cloning uses AI to imitate a real person’s speech from a short sample — a social post, a voice note, a talk, or a voicemail greeting. Scammers then call or send a voice note that sounds like someone you trust, usually with an urgent request for money, codes, or silence.
What it is
Modern clone tools can work from a surprisingly small amount of audio. The result is often imperfect — odd pacing, missing family shorthand, a slightly “off” breath — but it can be good enough in a noisy room, on a bad line, or when the listener is scared.
The scam is old (imposter calls have been around for years). The new piece is that the voice can sound like the real person, not like a stranger doing an impression.
How the call usually goes
A parent, a child, a boss, or a colleague appears to be in trouble or in a hurry. They may ask you not to tell anyone else. They may ask for a bank transfer, a gift-card code, a one-time password, or for you to “just approve this.” The pressure is the point: you are not meant to have time to think.
- Family emergency: “I need you to send money right now. Don’t call Mum.”
- Work emergency: “I’m in a meeting with a client — pay this invoice today.”
- Secrecy: “This is confidential. Don’t loop in finance.”
A simple defence
A shared code word (or a short phrase) that you only use to prove who you are. If the caller cannot give it, you hang up and call back on a number already in your phone. Never send money, passwords, or one-time codes on the strength of a voice alone.
- Pick a word that is not a birthday, a pet’s name, or anything on social media.
- Share it in person or on a channel you already trust — not in the same chat that just asked for money.
- For teams, write this into the payment process: no new payee, no changed bank details, no urgent wire, without a second known-channel check.
- Walk through the ritual once so it feels normal, not awkward, when it matters.
- DeepfakesA fake video or photo can put words — or a face — where they never were.
- AI phishingThe typo is no longer a tell. The message can sound exactly like someone you work with.
- Data scrapingPublic pages and leaky forms can be vacuumed up and reused against you later.
- Business email compromiseSomeone posing as a boss or a vendor talks your team into sending money or data.