On this page
If a familiar voice urgently asks for money, hang up and call that person using a number you already trust. You do not need to prove that the audio is AI-generated before you protect yourself. Independent verification is more dependable than listening for robotic speech.
Deepfakes are synthetic or altered audio, images, or video that can make someone appear to say or do something they never did. Scammers can combine them with ordinary lies, stolen accounts, and personal details to make a request feel believable.
Recognize the request, not just the recording
A common setup involves a supposed emergency: a relative has been arrested, a manager needs a confidential transfer, or a friend is stranded without access to their bank. The caller pressures you to act before you can think or consult anyone.
The voice may be convincing, imperfect, or not AI-generated at all. Background noise, crying, a short call, and a second person posing as an official can hide inconsistencies. The central warning sign is the demand to skip your normal verification process.
Watch for these patterns:
- Urgency: You must pay immediately or something terrible will happen.
- Secrecy: You are told not to contact family, coworkers, or your bank.
- Unusual payment: The caller demands cryptocurrency, gift cards, cash pickup, or an unfamiliar transfer method.
- Blocked verification: Every suggestion to call back or check with someone else gets an excuse.
- Changed instructions: A familiar payment destination suddenly becomes a different account.
None proves AI was involved. Together, they are more useful than deciding whether a voice sounds slightly unnatural.
Use a callback routine that breaks the script
Make a rule before a stressful call happens: no money, account codes, or confidential files based only on an incoming voice or video request. Apply the rule even when the person sounds exactly right.
- End the call or stop responding to the message.
- Find the person's saved number or an organization's independently verified contact number.
- Start a fresh call yourself rather than using a callback link or number the caller supplied.
- Ask directly whether the request is real.
- If you cannot reach them, contact another trusted person who can check the story.
Caller ID is not proof of identity because numbers can be spoofed. A message from a real social account is not proof either: the account may have been taken over. Switch channels whenever possible, such as calling a saved phone number after receiving an urgent social message.
For work requests, follow established approval procedures. Confirm changed bank details through a known contact, and require the usual second approver. A video meeting should not override financial controls simply because a manager's face appears on screen.
Understand the limits of visual and audio clues
Odd lip synchronization, unnatural blinking, inconsistent lighting, or strange pronunciation may justify a closer look. However, video compression, weak connections, hearing differences, and ordinary camera effects can create similar problems.
The reverse is just as important: clean audio and natural-looking video do not prove authenticity. Tools improve, and a scammer may only need a brief clip to push you toward the next step. There is no reliable universal test involving a particular word or hand movement.
Consumer AI detectors also have limits. Their results may be wrong, especially when a recording has been compressed, edited, or rerecorded. Treat a detector's output as a clue rather than a verdict, and avoid uploading private family recordings or confidential business calls without considering where those files go.
For a celebrity endorsement or sensational clip, look for the original source and independent reporting. Navigate to the person's or organization's official channels yourself. A familiar face promoting an investment is not evidence that the investment is safe or that the person actually endorsed it.
Set up a family verification plan
Discuss voice scams with relatives before anyone receives a frightening call. Keep the conversation practical rather than making anyone feel foolish. A convincing imitation can unsettle people who know exactly how the technology works.
Agree on a private family phrase for urgent situations. Choose something that does not appear in public posts and is not an answer to a banking security question. Use it as an additional check, not the only check; a phrase can be overheard, shared, or stolen.
If choosing an unpredictable phrase is difficult, the Password & Hash Generator can provide random material to adapt. Keep the verification phrase separate from account passwords and avoid putting it in a widely shared chat.
Write down trusted contact numbers for people who might otherwise struggle to find them under stress. Decide who can check on a relative nearby and establish that hanging up to verify is always acceptable. For households with children, How to Keep Kids Safe Online: A Parent's Guide offers related conversation starters.
Reduce the information scammers can borrow
Review who can see family relationships, school names, travel plans, and contact details on social profiles. These details can help an impersonator make a vague emergency sound personal. Ask relatives before posting identifiable recordings of them publicly.
You do not need to remove every photo or stop sharing your life. Focus on limiting unnecessary public exposure and strengthening the accounts that contain your private conversations.
Use unique passwords and two-factor authentication for email and social accounts. A stolen account gives scammers context and a trusted place to send messages. Our guide to How to Protect Your Instagram and Facebook Accounts explains useful settings.
Remember that privacy settings reduce exposure, not eliminate it. Someone else may already have a recording, and a scam can work without any cloned voice at all. Keep the verification routine even when you have tightened your profiles.
Troubleshooting after you responded
If you sent money, immediately contact the bank, card issuer, payment app, or transfer company through an official channel. Describe the scam and ask whether the transaction can be stopped or recalled. Recovery is not guaranteed, but speed matters.
If you shared a password or login code, secure the affected account from a trusted device, remove unfamiliar sessions, and review recovery settings. Save messages, receipts, account names, and call details. Warn the person being impersonated without forwarding harmful links to everyone you know.
Report suspected fraud at ReportFraud.ftc.gov. If someone may actually be in immediate danger, contact emergency services independently. Ignore strangers promising guaranteed recovery for an upfront fee.
Make verification ordinary
The safest habit is simple: pause, switch channels, and confirm. You do not have to become a deepfake expert. A family or workplace where everyone expects a callback is much harder to rush into a costly mistake.
Reach designers & developers at work
Put your product next to the tools people use every day. One sponsor per placement, no tracking pixels.
Become a sponsor