A call from a relative in trouble with an AI-cloned voice: how to verify it

A call from a relative in trouble with an AI-cloned voice: how to verify it

The phone rings, and it's your son's voice, or your granddaughter's, or your partner's. They're crying or panicking: there's been a car accident, they've been arrested, they're stuck somewhere and need money right now. Then a "lawyer," "police officer," or "friend" takes the phone and explains how to pay. The voice sounds real because, increasingly, it's a copy made with artificial intelligence. The FBI has warned that criminals use AI-generated audio to impersonate relatives in crisis and ask for urgent payments. The good news: the defense is simple and doesn't require any technology.

How does the cloned-voice scam work?

1. They get a voice sample. A few seconds of audio are enough: a video posted on Instagram, TikTok, or YouTube, a voicemail greeting, or a short call where the person said a few words.
2. They clone it. Freely available tools can generate any sentence in that voice, with a convincing tone.
3. They call you with a story. Accident, arrest, kidnapping, a hospital bill, a problem while traveling abroad. The cloned voice usually speaks only briefly ("Mom, help me, I messed up"), and then someone else takes over.
4. They ask for fast, hard-to-trace money. A wire transfer, Zelle, gift cards, cryptocurrency (sometimes through a Bitcoin ATM), or even cash handed to a "courier" who comes to your door.
5. They demand secrecy. "Don't tell anyone," "don't call Dad, he'll be furious," "there's a gag order on the case."

The variant called "virtual kidnapping" is the most frightening: you hear a crying relative and a voice demanding a ransom, while your relative is actually safe and unaware of anything.

What signs give the scam away?

• Extreme urgency and emotion. Fear and panic are the tools: the goal is that you act before you think.
• The relative speaks very little. The cloned voice says a few short sentences and then a third party does the talking.
• Unusual payment methods. Gift cards, crypto, wire transfers to strangers or cash couriers: no lawyer, court, or hospital asks for money that way.
• Secrecy. Being told not to contact anyone else in the family.
• An unknown or hidden number, or a number that seems to be your relative's but the call quality is odd. Caller ID can be spoofed.
• Strange details. Pauses, a flat or slightly robotic tone, answers that don't quite fit your questions.

What do I do during the call?

1. Stay calm and buy time. Say you'll call back in a minute. A real emergency survives a two-minute check.
2. Hang up and call your relative on the number you have saved. Don't call back the number that called you. If they don't answer, call someone who's with them or who would know where they are.
3. Ask a question only your relative would know: something that isn't on social media, like the name of a childhood pet or a family joke.
4. Use your family code word if you have one (see below).
5. Never pay during the call, and never hand cash, cards, or gold to someone who shows up at your door to "collect" it.

If at any point you believe someone is in real danger, call 911.

How do I create a family code word?

A code word is the most effective defense against voice cloning, because AI can copy a voice but not a secret.

• Pick a word or phrase that's easy to remember but impossible to guess: not a pet's name you post about, not a birthday.
• Share it in person with your closest relatives, especially older parents and grandparents and teenagers.
• The rule: anyone who calls asking for money in an emergency has to say it. No code word, no money, no matter how real the voice sounds.
• Don't write it in chats or on social media, and change it if you suspect someone else knows it.

It also helps to limit what's public: set profiles to private and think twice before posting videos where your relatives speak clearly.

What if I've already paid?

1. Call your bank immediately using the number on the back of your card and ask them to stop or recall the payment. If you paid by Zelle, Venmo, or Cash App, report it in the app as well.
2. If you paid with gift cards, contact the company that issued them right away and keep the cards and receipts.
3. If you paid in crypto, keep the wallet address and transaction ID.
4. Report it to the FBI's Internet Crime Complaint Center (IC3) and to the FTC at ReportFraud.ftc.gov. If a courier came to your home, call your local police too.
5. Expect a second contact. Victims are often called again by "investigators" or "lawyers" offering to recover the money for a fee. That's another scam.

The FBI's public service announcement on generative AI fraud describes these tactics and recommends exactly this kind of family code word.

Frequently asked questions

Can they really clone a voice from a few seconds of video? Yes. Current tools need very little audio to produce something convincing over the phone, especially if the call is short and emotional.

The call came from my daughter's number. Is it real, then? Not necessarily. Caller ID spoofing lets scammers display any number. Hang up and call her back yourself on the number you have saved.

Should I stop answering unknown numbers? You don't need to stop answering, but don't say much and never confirm personal details. If it's important, they'll leave a message you can check calmly.

Are older people more at risk? Grandparents are a frequent target, but anyone with family can be called. That's why the code word should be shared with everyone.

In short

A cloned voice can sound exactly like someone you love, but it can't pass a simple check: hang up, call your relative on their usual number, and ask for the family code word. No real emergency is ruined by two minutes of verification. If you received one of these calls, report the number in the NoCall spam numbers directory so other families recognize it.