How to Spot AI Voice-Clone and Deepfake Scam Calls

This is part of our security guides. It’s written to be shared with parents and grandparents, who are the people these calls target most.

How an AI voice scam works

The scam is an old one with a new tool. For years, criminals have called pretending to be a grandchild in trouble. What has changed is that voice-cloning software can now copy how a real person sounds from a short recording, so the caller doesn’t just claim to be your son or granddaughter. They can sound like them.

The FTC describes the pattern clearly: the scammer finds a short audio clip of your family member, often from videos posted online, runs it through a voice-cloning program, and then calls you with a story about a car accident, an arrest or another crisis. The goal is to make you pay before you have time to think.

The FBI has warned about the same thing. Its December 2024 public service announcement says criminals use AI-generated audio of a loved one in a crisis to ask for immediate money or a ransom. In 2025, the FTC received more than 1 million reports about imposter scams, with reported losses of nearly $3.5 billion. Not all of those involved cloned voices, but this is the family of scams they belong to.

Common versions of the call

• The family emergency. “Mom, I crashed the car and I’m in trouble. Please don’t tell Dad.” Then a “lawyer” or “officer” takes the phone to explain the bail or fee.
• The virtual kidnapping. A caller claims to be holding your relative and plays a few seconds of their voice crying for help. In December 2025 the FBI also warned about altered “proof of life” photos sent in these schemes.
• The boss or official. A cloned voice of a manager, company executive or government official asks for an urgent payment, gift cards, or login details. The FBI has repeatedly warned about AI-generated voice messages that impersonate senior officials.
• The voicemail. A short, panicked message in a familiar voice, followed by a text from “a friend” with payment instructions.

Red flags of an AI voice-cloning scam call

You don’t need to be able to hear that a voice is fake. The FBI itself says AI audio can sound nearly identical to the real person. Instead, watch the shape of the call. Scammers have to follow the same script because the script is what makes people pay.

• Extreme urgency. “I need it right now” or “they’ll only wait an hour.”
• Secrecy. “Don’t tell anyone” or “don’t call Mom, she’ll freak out.” Real emergencies don’t come with orders to keep quiet.
• Unusual payment. Gift cards (read the numbers and PIN over the phone), wire transfers, cryptocurrency, a payment app, or a courier who comes to collect cash. The FTC points out that these methods make it hard to get your money back.
• A hand-off. The “family member” talks briefly, then a “lawyer”, “police officer” or “bail agent” takes over.
• Short, emotional lines. Crying, a bad line, or “I can’t talk long”. Short clips are easier to fake and harder to question.
• Avoided questions. The caller dodges anything specific that only the real person would know.
• The caller ID looks right. That’s not proof. Caller ID can be spoofed, so a familiar name or number on the screen doesn’t confirm who is calling.

What to do during the call

The safest response is the same whatever the story is: slow it down and check it through a channel the caller doesn’t control.

1. Don’t send anything. No gift card numbers, no transfers, no codes. Nothing that happens in the next ten minutes is worth skipping a check.
2. Ask for your family code word, or a question only the real person would know and that isn’t on social media (not a pet’s name or a school that shows on your profile).
3. Hang up. You don’t need to argue or explain. If it’s real, they’ll understand.
4. Call the person back on the number you already have for them. Don’t use a number the caller gives you, and don’t just press redial.
5. If you can’t reach them, contact someone else: a partner, parent, roommate or friend who can check. The FTC recommends this too.
6. If someone claims to be police or a lawyer, look up the official number of that police station or law firm yourself and call it.

Set up a family code word today

The FBI and the FTC both recommend a secret word or phrase that your family agrees on in advance. Anyone calling in an emergency and asking for money has to say it. A cloned voice can copy how someone sounds, but it can’t know a word that was never posted online.

1. Pick a word or short phrase that’s easy to remember but not guessable. Avoid pet names, street names, birthdays or anything on your social media.
2. Share it in person or on a call you started, not in a group chat or email.
3. Agree on the rule: no code word, no money, no matter how real the voice sounds.
4. Tell older relatives and teenagers especially. Teens post the most voice clips; grandparents get the most calls.
5. Change it if you think it has leaked, or after you’ve used it once in a real emergency.

Reduce your risk of being targeted

You can’t make your voice impossible to copy, but you can make yourself a harder target and make the scam less convincing.

• Limit public videos and voice clips. The FBI suggests making social media accounts private and limiting followers to people you know. This matters most for anyone whose relatives might be targeted.
• Let unknown numbers go to voicemail. On Android, your phone’s built-in spam protection can flag or block many scam calls. Our guide to blocking spam calls on Android and iPhone walks through the settings.
• Be careful with “Is this you?” texts. A follow-up text often carries the payment details. See how to stop spam texts and report them.
• Protect your accounts. Some scams start with a hacked account that’s used to message your contacts. Passkeys make that much harder; here’s how to set up passkeys on your main accounts.
• Talk to older relatives. Not in a scary way. Just explain the code word, and that hanging up is always allowed.

Is it illegal to use AI voices in scam calls?

Yes, scamming people is illegal however it’s done. In the US, the FCC also ruled in February 2024 that calls made with AI-generated voices count as “artificial” voices under the Telephone Consumer Protection Act. That means robocalls using cloned voices are illegal without the person’s prior consent, which gives regulators and state attorneys general more tools to go after the people behind them.

The law doesn’t stop the calls from reaching you, though. Your best protection is still the habit: hang up, call back, ask for the code word.

If you already paid or shared information

Act fast and don’t be embarrassed. These scams are built to fool careful people, and acting quickly gives you the best chance of stopping a payment.

1. Call your bank or card provider using the number on the back of your card or in its official app. Ask them to stop or reverse the payment.
2. Gift cards: contact the company that issued the card straight away, tell them it was used in a scam, and keep the card and receipt.
3. Payment apps or crypto: report the transaction in the app and to the exchange you used. Recovery is less likely, so report it quickly.
4. Report it (see below). Write down the phone number, the time of the call, what was said and how you paid.
5. Watch for a second scam. Victims are often contacted again by people promising to recover the money for a fee. The FBI warned in July 2026 about criminals impersonating the IC3 itself to do exactly this. Real agencies don’t charge you to get your money back.

Where to report an AI voice scam

Reporting a call you didn’t fall for still helps. Agencies use these reports to spot patterns and warn others. Afterwards, if you think your phone itself might be compromised, read how to tell if your phone has been hacked.

FAQ

Sources

• Scammers use AI to enhance their family emergency schemes — FTC Consumer Advice
• Fighting back against harmful voice cloning — FTC Consumer Advice
• Criminals use generative AI to facilitate financial fraud (PSA, Dec 2024) — FBI IC3
• Criminals Using Altered Proof-of-Life Media in Virtual Kidnapping Scams (PSA, Dec 2025) — FBI IC3
• FBI Warns of Scammers Impersonating the IC3 (PSA, July 2026) — FBI IC3
• FTC seeks comment on impersonation rule (Sep 2026, imposter scam figures) — FTC
• FCC Makes AI-Generated Voices in Robocalls Illegal (Feb 2024) — FCC
• National Cybercrime Reporting Portal and 1930 helpline — I4C, Ministry of Home Affairs