Voice clone scam is a fraud technique that uses generative AI voice synthesis to mimic a specific person's voice and impersonate family members or acquaintances over the phone to steal money. It can be seen as an evolution of traditional ore-ore (impersonation) fraud, exploiting technology that can produce a close imitation of someone's voice from a short audio sample.
Advances in voice synthesis have made this fraud possible. Consumer voice synthesis services can now produce a voice close to the real person from a short audio sample. Traditional impersonation fraud could sometimes be spotted from the difference in voice, but a cloned voice reproduces intonation and speech habits as well, so even family members may fail to notice. In March 2023 the US Federal Trade Commission (FTC) warned that voice cloning was being used in schemes that fake a family emergency to demand money, explaining that a scammer needs only a short clip of a relative's voice, taken from content posted online, plus a voice-cloning program. It urged people not to trust the voice on the call and to ring back on a number they know belongs to the person in order to verify the story.
Audio samples can be obtained through many channels: videos posted on social media (Instagram, TikTok, YouTube), voicemail messages, podcasts and live streams, and even recorded greetings on corporate main phone lines. After obtaining a voice sample, attackers research the target's family structure and lifestyle patterns through social media, then call with scenarios like "I've been in an accident," "I've been arrested," or "I urgently need money."
The fundamental defense is not to make decisions based solely on a phone call. Establish a family code word (pet's name, memorable place, etc.) in advance and always verify identity with the code word when money is requested. If money comes up during a call, hang up and call the person directly on their mobile phone to confirm the facts. Limiting voice exposure on social media and keeping voicemail messages short also help minimize voice sample leakage. Since caller ID spoofing may be combined to display a family member's number, do not trust the displayed number alone. See Bank Transfer Fraud Prevention for specific countermeasures.