AI Voice-Clone and Deepfake Scam Calls: How to Tell
The call comes at night. It's your grandson's voice, and something terrible has happened. It sounds exactly like him because, in a real sense, it is: a few seconds of his voice, run through free software, reading a script.
For years the advice was “you'd know your own family's voice.” That advice is now wrong, and the scammers know it before the victims do. The good news is that the defense hasn't changed at all. It just has to be practiced ahead of time, because nobody thinks clearly during the call itself.
The Short Version
A voice is no longer proof of who's calling. Neither is the number on your screen. Hang up and call the person back on the number you already have for them. If it was real, you've lost thirty seconds. If it wasn't, you've kept everything.
How the Clone Is Made
A few seconds of audio is enough: a voicemail greeting, a video on a public social media page, a clip from a livestream. Free tools turn that sample into a voice that will read any text, with the right pauses and the right accent. Add caller-ID spoofing, which makes the call appear to come from the family member's real number or from your bank's, and a script built on the same three levers every scam uses: a crisis, a deadline, and a reason to keep it quiet.
The Versions Making the Rounds
| The call | The script |
|---|---|
| The grandparent scam | “Grandma, I've been in an accident and I'm at the police station. Please don't tell Mom. The lawyer needs the money today.” A second voice, the “attorney,” takes over with payment instructions. |
| The fake kidnapping | Screaming in the background, a demand for a wire or cryptocurrency within the hour, and a threat if you hang up. Almost always a bluff; the family member is at work. |
| The voice note from the boss | A short recorded message asking an employee to buy gift cards or approve a transfer. “Can't talk, in a meeting.” |
| The deepfake video meeting | In 2024 an employee at a multinational's Hong Kong office wired about $25 million after a video call in which every colleague on screen was a deepfake. It works on small businesses too, at smaller amounts. |
| The bank's fraud department | Your bank's real number on the screen, a calm voice about “suspicious activity,” and a request to move your money to a “safe account” or read back a code. Banks never do either. |
The Tells
- Pressure to stay on the line, and instructions not to tell anyone.
- Payment by gift card, crypto ATM, wire, cash courier or payment app. No real emergency is settled that way.
- A refusal to let you hang up and call back, or a reason they “can't” answer a question only they would know.
- Details that all could have come from social media: the grandchild's name, the college, the trip.
- A lawyer, officer or agent who conveniently takes over the call.
The Family Password
Pick a word or phrase that only your family knows, and agree that anyone calling with an emergency has to say it. Practice it with older relatives and write it on a card next to their phone. Then add the second rule: hang up and call back on a known number regardless. The password stops the clone. The callback stops everything else.
If You Already Paid
- Gift cards: call the number on the back of the card immediately with the card numbers. Some issuers can freeze an unspent balance.
- Wire: call your bank's fraud line now and ask for a recall. Speed matters more than anything; our wire fraud guide covers the steps.
- Payment apps: report inside the app and to your bank the same hour.
- Crypto ATM: call the operator's number on the machine and file a report. Recovery is rare, but reports drive enforcement.
- Report it: reportfraud.ftc.gov, and in Florida the Attorney General's fraud hotline at 1-866-9-NO-SCAM. A police report helps with your bank and your insurance.
- Don't pay a “recovery service” that calls afterward offering to get your money back. That's the same scam, round two.
For Businesses
The office version targets whoever can move money or buy gift cards. Same defenses, written down: any payment or instruction that arrives by voice, voice note or video call gets confirmed by a callback on a known number; two people approve anything over a threshold; and the people who handle money have their own codeword for urgent requests. Our wire fraud guide is the email side of the same problem.
Quick Self-Check
| Question | If “no” or “not sure”... |
|---|---|
| Does your family have a password for emergencies? | Pick one tonight |
| Would your parents hang up on a call that sounds like you? | Have the conversation |
| Business: is there a callback rule for voice and video requests, not just email? | Write it this week |
Talk It Through With the People Most Likely to Get the Call
We sit down with older relatives, set up call screening and spam filtering on their phone, bookmark the real support pages, and walk through the scams by name. No jargon, no rushing.
Frequently Asked Questions
Can they really clone a voice from a few seconds of audio?
Yes. Phone audio is low quality to begin with, which makes the clone easier to pass off, and nobody listening for a loved one in a crisis is listening for glitches.
Will caller ID protect me?
No. The number on the screen is trivially faked, including your bank's number and your own family's. Treat it as a suggestion, not proof.
Should my family stop posting videos?
Reduce it and set accounts to private where you can, but assume a voice is already public. The password and the callback are the defense, not silence.
What about a text saying a family member has a new number?
Same rule. Call the old number. If it really changed, they'll tell you on the phone you already have.
Does call screening help?
Yes, for volume. Silence Unknown Callers on an iPhone, Call Screen on Android and the carrier's spam filter stop most of the random calls. They don't stop a spoofed call from a number in your contacts, which is why the callback habit still matters.
More Guides
Getting the fake Microsoft alert off your screen without calling the number.
The five tells, the scams hitting Tampa Bay right now, and what to do if you already clicked.
How business email compromise moves real money, and the callback rule that stops it.
The three layers of cyber threats, and which one is actually your problem.
Where the scammers get the details, and how to take them back.
Patient, plain-English support, and the warning signs of a tech-support scam.
📞 727-579-4335 · ✉️ support@baygeeks.com · Privacy Policy · Terms of Service