What Is Voice Cloning and How Scammers Are Using It
Imagine receiving a phone call from your mother, brother, boss or close friend.
The voice sounds exactly like them.
They tell you they are in trouble and urgently need money.
You might act before stopping to question whether the person on the other end is actually who they claim to be.
That is one of the risks created by AI voice cloning.
What is voice cloning?
Voice cloning is an AI technology that can generate speech that sounds like a particular person's voice.
The technology has legitimate uses, including accessibility, entertainment, dubbing and restoring a person's ability to communicate.
The problem is that scammers can also misuse it.
The FTC says voice-cloning technology can create a near-perfect imitation from a short recording, while the FBI has warned that criminals are using AI-generated voices to impersonate trusted people.
How do scammers get someone's voice?
A scammer may not need access to the person's phone.
They could obtain a voice recording from publicly available content, such as:
TikTok videos
Instagram Reels
YouTube videos
Podcasts
Interviews
Voice notes shared elsewhere
Public business presentations
The FTC has specifically warned that a short audio clip posted online can potentially be enough for a scammer to create a convincing imitation.
That doesn't mean every person with public videos will be targeted. It simply means publicly available voice recordings can provide material that criminals may misuse.
How are scammers using voice cloning?
1. Fake family emergency
This is one of the clearest examples.
A scammer may call pretending to be your:
Child
Sibling
Parent
Partner
Friend
The caller may claim:
"I had an accident."
"I'm stranded."
"I've been arrested."
"Please send money immediately."
The FTC warns that scammers can use cloned voices in family-emergency scams and pressure victims to send money quickly.
2. Fake boss or executive
Voice cloning can also target businesses.
A scammer may imitate a company executive and instruct an employee to:
Transfer money
Pay an invoice
Reveal confidential information
Change payment details
Purchase something urgently
The FBI has warned that criminals can use voice and video cloning to impersonate business partners, family members and other trusted individuals.
3. Fake authority figures
Scammers may also combine AI-generated voices with other impersonation tactics.
For example, someone might claim to be a police officer, lawyer, government official or other authority figure and use urgency or threats to pressure the victim.
The FBI has documented campaigns involving AI-generated voice messages used to impersonate officials.
4. Fake romantic or social-media contacts
A scammer could combine a fake profile, stolen photographs, AI-generated messages and a cloned voice to make an online identity appear more convincing.
This can make romance, investment or confidence scams more persuasive.
The FBI's 2025 IC3 report says AI-generated content is being used across several fraud categories, including confidence/romance scams.
The biggest warning sign isn't necessarily the voice
This is important:
Don't try to determine whether a call is genuine based only on how the person sounds.
Modern AI-generated voices can be extremely convincing.
Instead, pay attention to the request and circumstances.
Be especially cautious when someone:
🚩 Creates extreme urgency
🚩 Demands secrecy
🚩 Requests money immediately
🚩 Asks for cryptocurrency or gift cards
🚩 Requests an OTP or verification code
🚩 Asks you to change bank-payment details
🚩 Refuses independent verification
🚩 Says you must not contact anyone else
The FTC specifically recommends slowing down and independently verifying a supposed emergency rather than trusting the voice alone.
What should you do if you receive a suspicious call?
Step 1: Don't send money immediately
Even if the voice sounds exactly like someone you know.
Pause.
A genuine emergency can wait long enough for you to verify the identity.
Step 2: Hang up and call back
Use a phone number you already have saved for the person.
Don't call the number the suspicious caller gives you.
The FTC recommends independently contacting the person using a known number.
Step 3: Use another communication channel
If the person doesn't answer, contact them through:
WhatsApp
FaceTime/video call
Instagram
Another family member
Their workplace
A trusted mutual contact
The goal is to verify the person independently.
Step 4: Ask a private verification question
For family members, establish a secret family code word or question that isn't publicly available.
For businesses, use established verification procedures for unusual payment requests.
Don't rely on information that a scammer could find on social media.
Step 5: Verify payment instructions separately
If someone claiming to be your boss asks you to transfer money, contact the boss through an established channel before making the transfer.
If a supplier suddenly sends new bank details, verify them independently before paying.
Can you detect a cloned voice by listening carefully?
Sometimes there may be clues such as unusual pauses, unnatural pronunciation, strange background sounds or conversational responses that don't quite make sense.
But these are not reliable proof.
The FBI warns that AI-generated voices can sound nearly identical to genuine voices and recommends independent verification when authenticity is uncertain.
So don't make the mistake of thinking:
"The voice sounded real, so it must be real."
Instead think:
"The voice sounds real. Now I need to verify the person."
How to protect your own voice
You don't have to stop posting videos online.
But consider limiting unnecessary exposure of long, clear recordings of your voice if you're concerned about impersonation.
You can also:
Avoid publicly sharing sensitive personal information.
Be careful with voice recordings sent to unknown people.
Review who can access your social-media content.
Use strong passwords and two-factor authentication.
Monitor accounts for suspicious activity.
Warn family members about AI voice scams.
Establish a family verification code for emergencies.
What if you already sent money?
Act quickly.
Contact your bank or payment provider immediately and explain that you believe the transaction was fraudulent.
Preserve:
Phone numbers
WhatsApp messages
Voice messages
Screenshots
Payment receipts
Account details used
Time and date of the interaction
Don't delete the evidence.
Also report the incident to the appropriate law-enforcement or fraud-reporting channel available in your jurisdiction.
The simple rule to remember
DON'T TRUST THE VOICE. VERIFY THE PERSON.
AI has made it easier to imitate how someone sounds.
That means your voice recognition alone is no longer enough to establish someone's identity during a high-risk conversation.
If a familiar voice suddenly asks for money, sensitive information or an urgent financial action:
STOP → HANG UP → VERIFY INDEPENDENTLY → THEN ACT.
