A call from a relative in trouble with an AI-cloned voice: how to verify

The phone rings and on the other end is the voice of your son, your granddaughter or your partner. They're crying, talking fast: they've had an accident, they've been arrested, they've been robbed abroad. They need money now and they beg you not to tell anyone. The voice is identical, and yet it may not be theirs. Artificial intelligence tools can now imitate a voice from just a few seconds of audio, and scammers use them to refresh an old trick: the relative in trouble. The good news is that there's a simple defence: hang up and verify through a channel you control.

How does the cloned-voice scam work?

The script usually follows these steps:

1. They get a voice sample. A video posted on social media is enough, or a forwarded voice note, or even an earlier call where someone answered "Hello? Who's this?" and kept talking for a few seconds.
2. They gather context. Names, family relationships, where the person studies or works, whether they're travelling. Much of this is public on open profiles.
3. They call with an emergency. The cloned voice says a few emotionally charged sentences ("Mum, I've had an accident", "Grandad, I'm in trouble") and quickly hands the phone to a supposed police officer, lawyer, doctor or "the other party" in the accident, who is the one who negotiates the money.
4. They ask for a fast payment that's hard to recover. An instant bank transfer, a mobile payment app (in Spain, Bizum), cryptocurrency, gift cards, or even a courier who comes to your home to collect cash.

The cloned phrases tend to be short, and the conversation is kept brief on purpose: the longer you talk to the voice, the easier it is to notice something off. That's why the "middleman" almost always carries the weight. Sometimes there's no AI at all: a noisy recording with sobbing is enough for your brain to fill in the rest. The effect is the same.

What signs give the scam away?

• Extreme urgency: you must pay "right now" or something terrible will happen.
• Secrecy: "don't tell Dad", "don't call anyone, it'll make things worse".
• An unknown or hidden number, or even your relative's own number spoofed: the number shown on screen can be faked.
• A middleman who takes control of the conversation as soon as the voice has done its job.
• Unusual payment methods: cryptocurrency, gift cards, a courier collecting money or jewellery.
• Dodging personal questions: the voice doesn't answer, the call "drops", or the crying starts again.
• Details that don't add up: your relative had no plans to travel, doesn't drive, or is calling at an odd hour.

None of these signs proves it on its own, but the combination of urgency + secrecy + unusual payment is the signature of this scam, with or without AI.

What do I do during the call?

1. Breathe and don't decide anything in the heat of the moment. Pressure is the scammer's tool. A real emergency can survive five minutes of checking.
2. Ask a question only your relative could answer. Ideally something that isn't on social media: the name of their first pet, what you had for dinner on Sunday, a childhood nickname.
3. Ask for the family safe word, if you have one (we explain how to create one below).
4. Hang up and call them yourself on the number you already have saved in your contacts. Don't use a number they give you and don't call back the incoming number. If they don't answer, call their partner, flatmates, workplace or another relative.
5. If they claim to be the police, a hospital or a court, check it yourself: look up the official number on your own, or in Spain call 112, 091 (National Police) or 062 (Guardia Civil); elsewhere, your local emergency number or police. No authority in Spain asks you to pay bail over the phone or sends a courier to collect money.
6. Don't send money, codes or bank details until you have confirmed, through an independent channel, that the emergency is real.

Hanging up will feel cruel if it really is your child. It isn't: if the emergency is real, you'll have confirmed it within a couple of minutes and can help safely.

How do I create a family safe word?

It's the most effective measure and it costs nothing:

1. Choose a word or phrase that's easy to remember and hard to guess. Nothing that appears on social media: no published pet names, no birthdays.
2. Share it in person, never by message or in a WhatsApp group.
3. Agree on the rule: any urgent request for money by phone, voice note or video is confirmed with the safe word. No word, no payment.
4. Include the people who need it most: grandparents, teenagers and people who live alone are often the favourite targets.
5. If it's ever used or leaked, change it.

It also helps to reduce the raw material: private profiles, fewer public videos featuring children's voices, and care not to prolong calls from strangers who just want you to keep talking.

What if I've already paid?

Don't blame yourself: this scam is designed to fool anyone who loves someone. Act fast:

1. Call your bank immediately, on the official number printed on your card or shown in its app, and ask them to try to stop or reverse the transfer or payment. The sooner, the more options.
2. If you handed cash or jewellery to a courier, call the police as soon as possible (in Spain, 091 or 062) with a description of the person and the vehicle.
3. Keep evidence: the incoming number, time and length of the call, payment receipts, any message or audio.
4. Report it to the police (in Spain, the National Police or Guardia Civil), bringing all the evidence. Explain that they used a voice imitating your relative.
5. Get help: in Spain, call INCIBE's 017, the free and confidential cybersecurity helpline; INCIBE's Internet User Security Office (OSI) also publishes alerts about this kind of fraud. Elsewhere, contact your national police or cybersecurity agency.
6. Warn your family so they know the scam is going around and other relatives don't fall for it.

We go into the recovery options in more detail in how to recover money from a phone scam.

Frequently asked questions

Can AI really copy a voice from so little audio? Yes. Current tools can produce a convincing imitation from short samples, especially for brief, emotional sentences over the phone, where call quality hides the imperfections. It doesn't need to be perfect: it just needs to sound believable for a few seconds of panic.

The call came from my son's number, so was it him? Not necessarily. The number shown on screen can be faked. That's why the rule is to hang up and call the number saved in your contacts yourself.

Can it also happen on WhatsApp, with voice notes or video calls? Yes. Cloned voice notes and manipulated videos follow the same logic. The protocol doesn't change: a check question, the safe word, and verification through another channel.

And what if it really is an emergency? Then verifying takes a couple of minutes and you lose nothing. Hospitals and police don't demand immediate payment over the phone to help anyone.

In short

A familiar voice is no longer proof of identity. When a relative in trouble calls asking for money: don't decide in the heat of the moment, ask a check question, ask for the safe word, hang up and call the number you already have. If you've already paid, call your bank, report it and ask for help (in Spain, 017). And if you get a call like this, report it in NoCall's spam number directory: your warning could help another family hang up in time.