The concept of a computer perfectly mimicking a human voice was once a thing of science fiction, but that fiction has become reality. Voice cloning uses Artificial Intelligence (AI) to create a digital copy of a person’s voice from an audio sample like you might find in your own videos posted to social media. Voice cloning is a powerful tool that has graduated from engineering labs to public availability, bringing with it the potential for both tremendous good and terrible harm.
On the “light side,” this technology offers benefits like restoring natural sounding speech for individuals who have lost their voice due to chronic conditions like ALS, paralysis, or cancer; however, this technology also has a dark side. Malicious actors are weaponizing these capabilities to create sophisticated, emotionally manipulative scams. This post discusses these very attacks: what they are, how they work, and what you can do to reduce the risk that you fall victim to a voice cloning scam.
Attack of the Voice Clones
Understanding how these scams unfold is the first step toward defending against them. The attack is a form of “vishing” (voice phishing) and almost always begins with a phone call designed to hijack your emotions. A common scam premise involves urgent call from someone who sounds like and claims to be your child, spouse, or parent. They claim to be in trouble and involved in something traumatic like a car accident, an arrest, or even a kidnapping. The emotional appeal sets the trap and, once their victim is emotionally hooked, the scammer pivots toward their wallet.
These calls will inevitably result in a request to transfer money, often through unconventional means involving cryptocurrency or gift cards, so the victim’s loved one can avoid or limit the consequences from the fictional crisis the scammer has invented. This request often includes instructions not to involve anyone else. This preys on our most basic protective instincts: in that moment, you are motivated to assist the person you care about and you are less likely to interrupt them to get proof of their claims. The critical deception is that you are not speaking to your family member; you are interacting with an AI-driven fraudster (Federal Trade Commission, 2024).
To prepare for these attacks, scammers gather audio from online sources, including social media videos, podcasts, or personalized voicemail messages. They then use information from public sources, like social media, to identify family members and create a plausible, targeted narrative.
In a widely reported 2023 case, an Arizona mother received a call featuring the cloned, sobbing voice of her 15 year old daughter in a staged kidnapping. The daughter was ultimately found safe, but the event was incredibly disturbing and distressing for the family (ABC News, 2023). Law enforcement agencies nationwide have noted a significant increase in these AI-driven scams, highlighting the growing risk to the public (CBS News, 2024).
A New Hope: Countermeasures Against the Clone Threat
Fortunately, you can protect yourself from these types of phishing attacks without needing your own cyber security team to keep you safe. Much like in project management where we identify risks and develop mitigation plans, you can create a simple personal security plan for your family. The key is to establish one before one of these calls occurs.
Here are three effective techniques to protect yourself:
- Establish a Verbal “Safe Phrase.” Agree on a unique and memorable word or phrase with your family that would not happen in normal conversation. You will use this like a verbal password. If you receive a call from a loved one in distress, you can ask for the safe phrase. An AI clone will not know it, helping you to avoid falling for the vishing trap.
- Ask a Private Security Question. Asking a question whose answer is not publicly available on social media or elsewhere online can spare you a lot of trouble later. Avoid simple questions like a pet’s name. Instead, use a shared memory: “What was the name of that restaurant we went to on our anniversary?” You can also include a follow up question to gain more confidence: “We took a detour last summer while on a trip and it made us late; where were we going and why were we late?”
- Hang Up and Call Back Directly. Recommended by authorities like the Federal Communications Commission (FCC), this is often the most effective tactic. If you receive a frantic call, calmly tell the person you will call them right back. All you have to do is hang up and dial their number as it is saved in your contacts. These scammers will not be able to intercept your outbound call to the real number, which will allow you to verify whether the emergency is real.
Conclusion
Voice cloning technology is a remarkable innovation, but in the hands of criminals, it can be a power tool for fraud. The success of these scams hinges on the victim’s panic and immediate, emotional reaction. By establishing a simple plan with your family before you need it, you can create a mechanism to help you critically evaluate the situation and defeat the deception. A little preparation goes a long way, giving you what you need to protect your family and yourself.