Voice Cloning Scams: How to Spot and Stop Them

A phone rings and a voice you know says they are in trouble and need money now. With today's AI voice tools, that voice may not belong to the person you think it does. This guide explains how voice cloning scams work, the warning signs to listen for, and the simple steps that stop them, for families and for businesses.

What is a voice cloning scam?

A voice cloning scam is a fraud where a criminal uses AI to copy a real person's voice and then uses that fake voice to ask for money, passwords or access. Voice cloning is one type of deepfake. If you are new to the topic, start with our guide to what a deepfake is and how deepfakes are made.

The FBI has warned that criminals generate short audio clips of a loved one's voice to impersonate a relative in a crisis and ask for immediate financial help or a ransom, and that cloned voices are also used to impersonate public figures and to try to get into bank accounts (FBI IC3, December 2024).

How voice cloning scams work

Most voice cloning scams follow the same pattern:

1. Collect a voice sample. Scammers look for recordings of the target's voice in public videos, podcasts, social media clips or voicemail greetings.
2. Clone the voice. An AI voice tool learns the sound of that voice and produces new sentences the real person never said.
3. Create urgency. The call or voice note describes an emergency: an accident, an arrest, a stuck payment or a deal that must close today.
4. Ask for a fast, hard-to-reverse payment. Typical requests are wire transfers, gift cards, cryptocurrency or a one-time passcode.
5. Keep you from checking. The caller may say "don't tell anyone" or "I can't talk long", so you act before you verify.

Common types of voice cloning scams

Family emergency calls

The caller sounds like a child, grandchild or partner who says they have been in an accident or arrested and need money right away. Sometimes a second voice joins, claiming to be a lawyer or police officer.

CEO and executive fraud

An employee in finance gets a call or voice note that sounds like a senior leader asking for an urgent transfer or a change to a supplier's bank details. Public talks and interviews give scammers plenty of executive audio to copy.

Impersonating officials and public figures

In May 2025 the FBI warned about a campaign where criminals sent AI-generated voice messages claiming to come from senior US officials, to build trust and then get access to personal accounts (FBI IC3, May 2025).

Bank and account takeover attempts

Some criminals use a cloned voice to pass as an account holder on the phone, or pretend to be your bank and ask you to "confirm" a code.

Warning signs of a cloned voice

A good clone can sound nearly identical to the real person, so do not rely on the sound alone. Listen and look for these signs together:

• Extreme urgency or secrecy. Pressure to act in minutes, or a request not to tell anyone.
• Unusual payment methods. Gift cards, crypto, wire transfers or new bank details.
• Odd tone or word choice. The FBI advises listening closely to tone and word choice, because phrases the person would never use are a clue.
• Lag and flat emotion. Pauses before answers, robotic rhythm or emotion that does not match what is being said.
• Avoiding questions. The caller dodges personal questions or keeps steering back to the payment.
• Unknown or hidden number. Caller ID can be faked, so even a familiar number is not proof.

How to protect yourself and your family

• Agree on a family code word. The FBI recommends creating a secret word or phrase with your family to verify who you are talking to. Ask for it on any emergency call.
• Hang up and call back. End the call and ring the person on a number you already have, or contact the bank or organisation through its official number.
• Limit public voice and video. Where you can, make social accounts private and limit followers to people you know, so there is less audio to copy.
• Never share codes or passwords on a call you did not start.
• Do not send money, gift cards or crypto to someone you have only spoken to by phone or online.

How businesses can stop voice cloning fraud

• Require a second channel for payments. Any request to move money or change bank details must be confirmed through a separate, known contact method.
• Use call-back rules for executives. Finance teams call the executive back on a directory number before acting on a voice request.
• Train staff on deepfake scams. Short, regular briefings help people pause when a familiar voice pushes for speed.
• Monitor for impersonation. Fake videos and voice clips of your leaders can appear online before a scam starts. DeepWall's deepfake detection software helps executives and their teams spot impersonation of their face and voice.

Can you check a suspicious recording?

Yes. If you have a voice note or recording you are unsure about, you can upload it on our deepfake audio detection page. Still verify the request through a trusted channel, because no tool should be your only check. For fake clips and photos, see deepfake video detection and deepfake image detection, and our guide on how to spot a deepfake video.

What to do if you have been targeted

1. Stop contact and do not send any more money or information.
2. Call your bank right away if you paid or shared account details.
3. Save the evidence: the number, the time, any voice notes and payment details.
4. Report it. In the US, the FBI asks victims to file a report with the Internet Crime Complaint Center at ic3.gov. Elsewhere, report to your local police or national fraud reporting service.
5. Warn family or colleagues, since scammers often try the same people again.

Frequently asked questions

How much audio does a scammer need to clone a voice?

Not much. The FBI notes that criminals generate short audio clips of a person's voice, and public videos, social posts and voicemail greetings can be enough to start. Limiting public recordings reduces the risk.

Can I tell a cloned voice just by listening?

Not reliably. Clones can sound nearly identical to the real person. Check the context, ask for your code word, and hang up and call back on a known number.

Is it a voice cloning scam if the call comes from a number I know?

It can be. Caller ID can be spoofed, so a familiar number is not proof. Call the person back on the number saved in your phone.

What is the best single defence against voice cloning scams?

Verification through a second channel. A family code word or a call-back rule stops most scams, because the scammer cannot answer or pick up.

How can a company protect its executives from voice deepfakes?

Set payment call-back rules, train staff, and monitor for fake videos and audio of leaders online. Start your free trial of DeepWall to watch for impersonation of your executives.