A phone rings and it sounds exactly like your son, your boss or your bank manager. The voice is distressed, or urgent, and asks for money or a code. With cheap AI tools, a short clip of someone speaking can be enough to imitate their voice, and scammers are using the technology to make old tricks more convincing. This guide explains how voice cloning and deepfake scams work, the warning signs, and what you can do to protect yourself and your family.
What is voice cloning?
Voice cloning is software that learns the patterns of a person’s voice from a recording and then generates new speech that sounds like them. Legitimate uses include accessibility tools and entertainment. Criminals can misuse the same technology, sometimes with only a short sample taken from a social media video or a voicemail greeting. A deepfake is a broader term for AI-generated or altered audio, images or video designed to look or sound real.
Not every scam call uses AI. Most are still ordinary scripts read by a person. Reports from consumer groups and security firms suggest AI-assisted scams are growing, but the exact scale is hard to measure, so treat headline numbers with caution. The practical advice is the same either way: verify before you act.
Common scenarios
The “family emergency” call is one of the most talked-about. Someone claiming to be a relative says they have been in an accident or arrested and need money immediately, and insists you keep it secret. A second pattern targets workplaces: a caller or video message seems to come from a senior manager and asks a finance employee to make an urgent transfer. A third is the bank impersonation call, where a “fraud team” asks you to move money to a “safe account”, which no real bank will do. Others include fake celebrity endorsement videos promoting investments, and romance scams that use altered video.
Warning signs
Whatever the voice sounds like, look at the pattern of the request. Urgency and secrecy are the biggest red flags: “do it now” and “do not tell anyone” are designed to stop you thinking. Unusual payment methods, such as gift cards, cryptocurrency or a transfer to a new account, are another. Be suspicious of calls from an unknown number claiming to be someone you know, or of a request that is out of character.
Audio itself can sometimes give clues: odd pauses, flat emotion, background noise that does not fit, or unnatural phrasing. But cloned voices are improving, so do not rely on your ear. Video deepfakes may show odd blinking, blurry edges around the face or lips that do not match the words, but again, these tells are not reliable.
How to verify a caller
Hang up and call back on a number you already trust: the one saved in your contacts, on the back of your bank card or on the organisation’s official website. Do not use a number the caller gives you. If it is a relative, contact them directly or another family member to confirm. For a workplace request, check through a separate channel and follow your company’s payment approval process, even when the request seems to come from the top.
More in Tech
Many families now agree a “safe word”: a simple phrase only they know, to be used if someone calls claiming to be in trouble. If the caller cannot give it, hang up. Choose something that cannot be guessed from social media and do not share it online.
Reduce what scammers can find
Scammers gather material from public sources. Consider tightening privacy settings on social media, limiting who can see your videos and posts, and being careful about posting your travel plans in real time. Think about your voicemail greeting too, since a default greeting reveals less than a recording of your voice. None of this guarantees safety, but it makes you a harder target.
Protect your accounts and money
Strong account security limits the damage if a call does fool someone. Use two-step verification on your bank and email; our guide to two-factor authentication explains how. Never share one-time codes with anyone who calls you, as legitimate organisations will not ask for them. Keep your devices updated and use a password manager; see password managers explained. It also helps to check whether your details have leaked: our article on checking if your email has been in a data breach shows how.
Reducing unwanted calls in the first place also lowers your exposure. Our guide to stopping spam calls and texts covers blocking, reporting and the Telephone Preference Service. If you are shopping online, see how to spot a fake website before you buy.
What to do if you have been targeted
If you have sent money, contact your bank immediately using the number on your card and ask about recalling the payment. In the UK, report fraud to Action Fraud (or Police Scotland in Scotland), and forward scam texts to 7726. Change any passwords you may have shared and watch your accounts. Do not feel embarrassed: these scams are designed to be convincing, and prompt reporting helps both you and others. The National Cyber Security Centre also publishes guidance on spotting and reporting scams.
The bottom line
You cannot always tell a cloned voice from a real one, so stop relying on the voice and start relying on verification. Slow down, hang up, call back on a trusted number, agree a family safe word and never move money under pressure. This article is general information rather than professional security or legal advice; if you think you are the victim of fraud, contact your bank and Action Fraud straight away.
