An AI-cloned voice of a family member: the emergency call asking for money

An AI-cloned voice of a family member: the emergency call asking for money

The phone rings and it's the voice of your son, your granddaughter or your partner. They're crying and talking fast: they've had a car crash, they've been arrested, they've been robbed overseas. They need money now and they beg you not to tell anyone. The voice is identical, and yet it may not be theirs. Artificial intelligence tools can now imitate a voice from just a few seconds of audio, and scammers use them to give an old trick a new coat of paint: the relative in trouble. The good news is that there's a simple defence: hang up and check through a channel you control.

How does the cloned-voice scam work?

The script usually goes like this:

1. They get a voice sample. A video posted on social media is enough, or a forwarded voice message, or even an earlier call where someone answered "Hello? Who's this?" and kept talking for a few seconds.
2. They gather context. Names, who's related to whom, where the person studies or works, whether they're on their OE or on holiday. Much of it is public on open profiles.
3. They call with an emergency. The cloned voice says a few emotional lines ("Mum, I've had an accident", "Grandad, I'm in trouble") and quickly hands over to a supposed police officer, lawyer, doctor or "the other driver", who does the talking about money.
4. They ask for a fast payment that's hard to get back. An online bank transfer, cryptocurrency, gift cards, or even a courier who turns up at your door to collect cash.

The cloned lines tend to be short, and the call is kept brief on purpose: the longer you talk to the voice, the easier it is to notice something off. That's why the "middleman" does most of the work. Sometimes there's no AI at all: a crackly recording with sobbing is enough for your brain to fill in the gaps. The effect is the same.

What signs give the scam away?

• Extreme urgency: you have to pay "right now" or something terrible will happen.
• Secrecy: "don't tell Dad", "don't ring anyone, you'll make it worse".
• An unknown or private number, or even your relative's own number faked: the number on your screen can be spoofed.
• A middleman who takes over the call as soon as the voice has done its job.
• Unusual payment methods: cryptocurrency, gift cards, a courier collecting cash or jewellery.
• Dodging personal questions: the voice doesn't answer, the call "drops", or the crying starts again.
• Details that don't add up: your relative wasn't travelling, doesn't drive, or is ringing at a strange hour.

None of these proves it on its own, but the mix of urgency + secrecy + unusual payment is the signature of this scam, with or without AI.

What do I do during the call?

1. Breathe and don't decide anything in the moment. Pressure is the scammer's main tool. A real emergency can survive five minutes of checking.
2. Ask a question only your relative could answer. Ideally something that isn't on social media: the name of their first pet, what you had for Sunday dinner, a childhood nickname.
3. Ask for the family code word, if you have one (see below for how to set one up).
4. Hang up and call them yourself on the number already saved in your contacts. Don't use a number they give you and don't call back the incoming number. If they don't answer, ring their partner, flatmates, workplace or another relative.
5. If they say they're Police, a hospital or a court, check it yourself. Look up the official number on your own, or call Police on 105 (111 if it's an emergency). NZ Police don't ask you to pay bail over the phone and don't send a courier to collect money.
6. Don't send money, codes or bank details until you've confirmed, through a separate channel, that the emergency is real.

Hanging up will feel cruel if it really is your child. It isn't: if the emergency is real, you'll know within a couple of minutes and can help safely.

How do I set up a family code word?

It's the most effective step and it costs nothing:

1. Choose a word or phrase that's easy to remember and hard to guess. Nothing that's on social media: no pet names you've posted, no birthdays.
2. Share it in person, never by message or in a family group chat.
3. Agree the rule: any urgent request for money by phone, voice message or video gets confirmed with the code word. No word, no payment.
4. Include the people who need it most: grandparents, teenagers and people who live alone are favourite targets.
5. If it's ever used or leaked, change it.

It also helps to cut down the raw material: private profiles, fewer public videos with children's voices, and not staying on the line with strangers who just want to keep you talking.

What if I've already paid?

Don't blame yourself: this scam is built to fool anyone who loves someone. Act fast:

1. Call your bank straight away, on the official number on your card or in its app, and ask them to try to stop or recall the transfer or payment. The sooner, the better the chances.
2. If you handed cash or jewellery to a courier, call Police as soon as possible on 111 if the person is still nearby, or 105 otherwise, with a description of the person and the vehicle.
3. Keep evidence: the incoming number, time and length of the call, payment receipts and any messages or audio.
4. Report it to NZ Police on 105 or through the 105 online service. Explain that the caller used a voice imitating your relative.
5. Report the scam to the National Cyber Security Centre (NCSC), and see Consumer Protection's Scamwatch for next steps.
6. Warn your family so they know the scam is doing the rounds and nobody else falls for it.

Frequently asked questions

Can AI really copy a voice from so little audio? Yes. Current tools can produce a convincing imitation from short samples, especially for short, emotional lines over the phone, where call quality hides the flaws. It doesn't need to be perfect: it just has to sound believable for a few seconds of panic.

The call came from my son's number, so was it him? Not necessarily. The number shown on screen can be faked. That's why the rule is to hang up and call the number in your contacts yourself.

Can it happen on WhatsApp too, with voice messages or video calls? Yes. Cloned voice messages and manipulated videos follow the same logic. The plan doesn't change: a check question, the code word and a check through another channel.

And what if it really is an emergency? Then checking takes a couple of minutes and you lose nothing. Hospitals and Police don't demand payment over the phone before they'll help someone.

In short

A familiar voice is no longer proof of who's calling. When a relative in trouble rings asking for money: don't decide in the moment, ask a check question, ask for the code word, hang up and call the number you already have. If you've already paid, call your bank and report it to Police on 105 and to the NCSC. And if you get one of these calls, report it in the NoCall spam numbers directory: your warning could help another family hang up in time.