AI voice cloning scams: how the fake family call works

AI voice cloning scams use a short clip of someone's real voice, often taken from videos posted online, to make a phone call that sounds like your son, granddaughter or partner in trouble and asking for money. The defense is simple and works every time: hang up and call the person back on a number you already know is theirs, or ask for a family safe word that only the real person would know.

The FTC puts it in four words: "Don't trust the voice."

How the fake family emergency call works

The script is old. It is the grandparent scam, sometimes called the family emergency scam. What changed is the voice.

The FTC described it in a consumer alert: you get a call, there is a panicked voice on the line, and it is your grandson saying he wrecked the car and landed in jail. According to the FTC, all a scammer needs is a short audio clip of your family member's voice, which could come from content posted online, and a voice cloning program.

The FBI describes the same pattern in a December 2024 public service announcement: criminals generate short audio clips of a loved one's voice to impersonate a close relative in a crisis, asking for immediate financial assistance or demanding a ransom.

The call usually has the same parts:

1. A crisis. An accident, an arrest, a hospital, a ransom demand.
2. The voice. A short clip of a familiar voice, often panicked, which makes it harder to notice anything odd.
3. Urgency. The money is needed right now, before you have time to check.
4. A payment method that is hard to reverse. The FTC lists wiring money, sending cryptocurrency, or buying gift cards and reading out the numbers and PINs as signs of a scam.

Set up a family safe word now

The FBI's first tip in its AI fraud warning is to create a secret word or phrase with your family to verify their identity. That is where all the "family safe word" advice comes from.

How to set one up so it actually works:

• Pick something that is not online. Not a pet's name, a street, a school, a birthday or anything that appears in photos or posts. A random pair of words works well.
• Agree on it in person or on a call you started. Not in a group chat that could be read later by someone else.
• Make it a question and answer if that is easier to remember. For example, one person asks about a made-up thing and the other gives a specific reply.
• Tell everyone the rule. No word, no money, no matter how real the voice sounds.
• Include the people most likely to be called. Grandparents, parents and anyone who would send money in a panic.
• Change it if it is ever used or shared. Treat it like a password.

A safe word is not the only check. If someone does not remember it in a real emergency, the call back below still works.

What to do during the call

Scammers rely on you staying on the line. The steps from the FTC and FBI fit into one short routine:

1. Stay calm and do not agree to pay. Say you will help, but you need a minute.
2. Ask for the safe word. If they cannot give it, or try to change the subject, that is your answer.
3. Ask a question only the real person knows. Something that is not on social media.
4. Hang up. You do not need to be polite.
5. Call the person directly on the number you already have. The FTC says to use a phone number you know is theirs, not one the caller gave you.
6. If you cannot reach them, call someone else. The FTC suggests another family member or their friends.
7. Do not send money while you are unsure. No wire, no gift card, no crypto, no cash in the mail.

The FBI also says to listen closely to tone and word choice. But its May 2025 warning about AI voice messages is clear that cloned voices and real ones can sound nearly identical, so do not count on hearing the difference. The call back is the test that matters. For signs that a caller is an AI voice or a robocall, and the call screening settings on iPhone and Android, see our guide on how to tell if a call is AI.

Red flags in a voice cloning scam call

Any one of these is a reason to hang up and call back:

• The story does not quite fit. The FBI says to critically evaluate the context and plausibility of any request for money.
• You are asked to pay by wire, gift card, cryptocurrency or cash.
• The call comes from a new or unknown number, with a story about a lost or broken phone. The FBI says that if someone you know contacts you from a new number, verify through contact details you already trusted.
• You hear only short bursts of the voice, and the person avoids a real back-and-forth conversation.
• You are rushed: there is no time to call anyone.

If you already sent money

Act fast and contact whoever moved the money. These are the FTC's steps from What to do if you were scammed:

Then tell the family member whose voice was used. Their account or videos may be the source, and they may want to warn others.

Where to report a voice cloning scam

• FTC: report at ReportFraud.ftc.gov, whether or not you lost money.
• FBI: file a complaint at ic3.gov, the FBI's Internet Crime Complaint Center. The FBI asks for the caller's phone number and any names, the payment details (date, type, amount, account numbers, receiving bank or crypto address), and a description of how the contact happened.
• Police: if anyone may be in immediate danger, call 911 first. IC3 says the same.

One warning from IC3 itself: scammers also impersonate IC3. It says it will never contact you directly for information or money, and it does not work with any non-law enforcement entity to recover lost funds.

Is AI voice cloning in phone calls illegal?

Using AI voices in robocalls is. On February 8, 2024, the FCC announced a unanimous ruling that calls made with AI-generated voices are "artificial" under the Telephone Consumer Protection Act, effective immediately. The FCC said this gives State Attorneys General new tools to go after voice cloning scams. Fraud itself was already illegal; the ruling makes the use of an AI voice in these calls a violation on its own.

Make your voice harder to copy

The FBI suggests limiting public content of your image or voice, making social media accounts private, and limiting followers to people you know. You do not need to delete everything. A few practical steps:

• Set personal video and voice posts to friends only.
• Be careful with voicemail greetings and public videos where you talk for a long time.
• Ask older relatives to do the same, since their voice may be used to target you too.

Frequently asked questions

What is a family safe word?

A secret word or phrase your family agrees on in advance, so anyone calling in an emergency can prove who they are. The FBI recommends one in its warning about AI fraud.

Can you tell a cloned voice just by listening?

Sometimes, but do not rely on it. The FBI says AI voice cloning and a real contact can sound nearly identical. A call back on a known number is the reliable check.

How do scammers get someone's voice?

The FTC says a scammer needs only a short audio clip, which could come from content posted online. Public videos and voice posts are the obvious source.

Should I answer calls from unknown numbers?

You can, but do not act on a money request from one. If a caller says they are family on a new number, hang up and call the number you already have for them.

Do these scams also come by text or email?

Yes. The FBI warns about text and voice messages that impersonate known people, often moving you to another app or link. The same rule applies: verify through a contact you already trust. Our guide on how to spot a phishing email covers the email side.

Keep scammers away from your main address

Voice cloning scams start with what scammers can find about you. Your email address is part of that. With Secria Mail you can give each site its own alias, so if one leaks or starts getting targeted phishing, you can see which site it came from and delete the alias. Tracking pixels are removed automatically and senders never see your IP address. Sign-up is a name, the address you want and a password, with no phone number. Create a free account.