Security

How to tell if that phone call is really your family member — or an AI voice clone

By the Keep Your Head desk · About a 5-minute read

A panicked call comes in. It's your kid, or your parent, or your sibling — the voice is right, the tone is right, they need money now. It might also be nobody you know at all. Voice cloning has made the oldest trick in scamming — "sound like someone you trust" — cheap and easy to run at scale. Here's the check that still works even when the voice is perfect.

Why "I'd know their voice" isn't the safeguard it used to be

This isn't a hypothetical. The Federal Trade Commission has publicly warned about exactly this: a scammer only needs a short clip of someone's voice — often pulled from a video that person already posted publicly — and a voice-cloning tool to produce a call that sounds convincingly like them. The FTC's own guidance is blunt about the fix: don't trust the voice.

That's a hard instinct to override, because "I recognized their voice" has been a reliable trust signal for your entire life. It stops being reliable the moment cloning a voice takes minutes and a public social media clip instead of a Hollywood studio. The voice itself is no longer evidence of anything.

The one check that beats a perfect voice: call them back

You don't need to detect the fake in the moment — you need to route around it entirely. Hang up, and call the person back on a number you already know is theirs (saved in your phone, not one the caller gives you). If you can't reach them directly, try another family member or a mutual friend. This single habit defeats the scam regardless of how good the clone sounds, because the scammer can't intercept a call you initiate to a number they don't control.

The part that makes this scam work isn't really the voice — it's the pressure to not hang up and check, because "there's no time." That urgency is the actual attack. Hanging up costs you thirty seconds. Not hanging up can cost a lot more.

A backup that needs zero technology: a family safe word

Agree on a short word or phrase with close family now, before you ever need it — something a stranger (or an AI) couldn't guess from your social media. If a call ever claims to be an emergency involving money, ask for the word. No word, no trust, no exceptions, no matter how convincing the voice sounds or how urgent it feels.

This works because it moves the test from "does this sound like them" — which AI can now fake — to "does this person know something only my family knows," which it can't.

The other tells, once you know to look

Voice cloning fakes the voice; it doesn't fake everything else about how a real emergency plays out. Watch for the pattern, not just the sound:

Payment methods that are hard to trace or reverse: wire transfers, cryptocurrency, or gift card codes read over the phone. Legitimate emergencies — bail, hospital bills, embassy help — do not run through gift cards.
Insistence on secrecy: "don't tell Mom" or "don't call anyone else first" is designed to stop you from doing the one thing that would expose the scam — verifying with someone else.
A bad connection or excuse for why they "sound different": scammers sometimes use this to explain away an imperfect clone. It's a convenient cover, not evidence of anything.
Refusal to video call. Voice cloning is now accessible; convincingly faking live video of a specific person, on the spot, on a normal call, is a much higher bar. If they won't switch to video "because the connection's bad," that's worth noticing.

Keep this ready: the exact script

Save this so it's a reflex, not a decision you have to make while panicked:

1. Stay calm. Don't send money or gift card codes on this call, period.
2. Say: "I'm going to call you right back," and hang up — even if
   they object. A real emergency survives a callback.
3. Call them on the number already saved in your phone, not a
   number the caller gave you.
4. Can't reach them? Call another family member or close friend
   to check the story before sending anything.
5. If money was already sent, report it immediately at
   ReportFraud.ftc.gov and to your bank.

Keep your head:

Keep your head

A cloned voice can sound exactly right and still be lying. The fix was never "listen harder" — it's routing every urgent money request through a channel the caller doesn't control. Hang up, call back, verify.

Get one of these a week. Our free newsletter sends one genuinely useful AI habit and one judgment check every week — no hype, four-minute read. Subscribe on the home page.