AI voice cloning scams: how they work and how to stop them
Scammers can now clone your voice from a 10 second clip of you talking, then call your family pretending to be you in trouble. This is not a future problem. It is happening right now in Santa Cruz County and everywhere else. The good news: there is a simple defense that works every time.
What to do right now
- Pick a family safe word (one random word everyone agrees on). Today. While reading this.
- Share it with everyone in your family in person or via text. Do not post it anywhere online.
- If anyone ever calls in an "emergency" asking for money, ask for the safe word before you do anything.
- Real you knows the word. The scammer does not. Conversation ends.
How AI voice cloning scams work
- Scammer finds a short clip of your voice. Sources: a TikTok video, an Instagram reel, your voicemail greeting, a YouTube video, even a podcast appearance. They need as little as 3 to 10 seconds.
- They run it through an AI voice cloning tool. Several free or cheap tools exist. The result sounds like you, including your accent, pacing, and breathing patterns.
- They look up your family. Facebook, LinkedIn, even old obituaries reveal who is related to you.
- They call a relative, sounding like you, in a panic. "Mom, I had an accident, I need bail money, please don't tell Dad." The voice is convincing.
- They demand fast payment. Wire transfer, gift cards, cryptocurrency, or cash drop. The urgency is the whole game.
Real examples this year
- An Arizona mother got a call from her "daughter" sobbing and a man's voice demanding $1 million. Daughter was safe. The voice was AI.
- A grandparent in California sent $35,000 in gift cards after a "grandson" called asking for bail money. The grandson never called.
- A CEO in Hong Kong was tricked into wiring $25 million after a video call with what looked like his CFO. Both voice and face were AI.
- Multiple cases of scammers cloning a child's voice and calling parents for kidnap ransom. The children were safe at school.
The FTC reported over 850,000 imposter scam complaints in 2024 with losses over $2.7 billion. AI voice cloning is one of the fastest growing types.
The family safe word: your best defense
A safe word is a single agreed-upon word your family uses to verify identity over the phone. It costs nothing, takes 60 seconds to set up, and stops every voice cloning scam cold.
How to pick one
- One unusual word everyone in your immediate family can remember.
- Not on any social media (not your pet's name, kid's middle name, hometown, high school, or favorite team).
- Not too short or common ("tree," "blue" are guessable).
- Funny / memorable beats clever. The point is to remember it under stress.
Examples that work: "Brontosaurus." "Wallpaper." "Cilantro." "Tugboat." Pick one tonight.
How to share it
- In person at the next family gathering.
- In a group text. Once it is sent, delete the message from your phone.
- On the phone where you trust the call.
- Never via email or social media post.
How to use it
If anyone in your family calls in an "emergency" or asks for money, even sounding exactly like themselves, say: "What's the safe word?"
- Real them: knows it, says it, you proceed.
- Scammer: hesitates, says they cannot remember, says "Mom, just trust me." Hang up.
Other red flags to listen for
Even without a safe word, these signs suggest you are being scammed:
- Sudden secrecy: "Don't tell Dad," "Don't call the police," "Don't tell anyone." Real emergencies do not need secrecy.
- Wire transfer, gift cards, or crypto demanded. No legitimate emergency uses these. Bail bondsmen take cards or check. Hospitals bill later.
- You can't call them back. "My phone is dead, use this number." Always try the real number you have stored.
- The story has gaps. Real emergencies have boring detail (which hospital, which highway). Scammers stay vague.
- Background noise is too quiet or too loud in a weird way. AI voices sometimes get the background wrong.
- Pacing feels off. Slight pauses, robotic timing, oddly formal phrasing.
- You feel pressured to act fast. Urgency is the scammer's weapon.
The "hang up and call back" rule
If you get any unexpected emergency call, even one that sounds real:
- Stay calm. Real emergencies do not require panic decisions in 30 seconds.
- Tell the caller you'll call right back.
- Hang up.
- Call the real number for that person from your contacts. Or call another family member who would know.
- If the original "emergency" was real, you reach the person fine. If it was a scam, you discover that quickly.
A scammer will try to keep you on the phone. They know hanging up breaks the spell. Hang up anyway.
Reduce how much voice you have online
You cannot remove every clip of yourself from the internet, but you can reduce easy targets:
- Set Facebook, Instagram, TikTok videos to "Friends only" or private.
- Change your voicemail greeting to a generic robot voice ("Leave a message after the tone") instead of a personal greeting.
- Be cautious about long voice memos in public groups or chats.
- Public figures (teachers, business owners, podcasters) have less control here. Use the safe word system instead.
Video calls are next
Voice is the current problem. Video deepfakes are the next one. As of 2026, real-time deepfake video calls are starting to appear in business email compromise scams. Same defenses apply:
- For high-stakes requests over video, end the call and call back on a known number.
- Watch for unnatural blinking, lighting that does not match the background, slight delays between mouth movement and audio.
- For business: require a phone callback on a known number before any wire over a certain threshold.
If you fell for a scam
Act fast. The first 24 hours matter most.
- Stop sending any more money. Hang up if you are still on the call.
- Contact your bank or card company. Ask if they can reverse the transfer. Sometimes possible with wire transfers if caught early.
- If you sent gift cards, call the card company. Some can freeze the card if the money has not been spent yet.
- If you sent crypto, the money is almost certainly gone, but report it to law enforcement anyway.
- File a report at reportfraud.ftc.gov (FTC).
- File a report with the FBI's Internet Crime Complaint Center: ic3.gov.
- Call your local police non-emergency line. Get a report number for any insurance claims.
- Watch your bank and credit accounts for further fraud. Freeze your credit at all three bureaus: Equifax, Experian, TransUnion.
See our full emergency action plan for the broader checklist.
Talk to family today
This works best when everyone knows the system before the scam happens. Five minutes at the next family dinner:
- "Voice cloning scams are real. They can sound exactly like me on a phone call."
- "If you ever get an emergency call from me asking for money, ask for [our safe word]."
- "If I cannot give it, hang up and call me back at my real number."
- "That's it. Don't worry about hurting my feelings. I will be glad you checked."
Include grandparents, parents, kids over 12, and trusted close friends. The bigger the safety net, the harder it is to get fooled.
Worried about a recent call?
If you got a call that felt off and you are not sure, Isaac can talk through it with you. Better to take 15 minutes to verify than to lose savings to a scam.