Cloned Voice Scam Calls: A Simple Check for Family and Staff

The phone rings. It sounds like your boss, or your daughter, or your brother. The voice is upset and in a hurry. Someone needs money sent, a gift card bought, a password read out, or a payment approved right now.

Sometimes the voice on the line is real. Increasingly, it is not. Software can now copy how a person sounds from a short recording, such as a video posted online or a voicemail greeting, and then speak new words in that voice. This is called a voice clone. You do not need to understand how it works to defend against it. You need one simple habit that does not depend on whether the voice sounds right.

Why a familiar voice is no longer proof

For most of history, hearing someone you know was good evidence that it was them. That is no longer reliable. A cloned voice can sound calm, panicked or tired, and it can use the right name for you.

Scammers also add pressure on purpose. The story is always urgent, always private, and always something that cannot wait. The goal is to stop you from pausing, because a pause is when you would think to check.

Caller ID is not proof either. The number shown on your screen can be faked, so a call that appears to come from a saved contact can still be a scam.

So the rule is this: when a call asks for money, access or secrets, the voice does not count as identification. You need a second way to confirm.

The simple check: two steps you set up in advance

The check has two parts. Both take a few minutes to arrange, and both work for a family or an office.

Step 1: Agree on a verification word or question. Pick a word or phrase that only your group knows. Do not use anything that can be found online, such as a pet's name, a street name, a school or a birthday. A random pair of unrelated words works well, for example a color and a kitchen object.

Share it in person or over a channel you trust, and tell everyone not to post it, text it in a group chat that others can see, or write it somewhere public. If someone calls asking for urgent help, you ask for the word. A scammer will not know it, and a real family member will not be offended.

For a business, you can use a question instead of a word, one that only the real person would answer. Keep it private and change it now and then, especially after someone leaves the team.

Step 2: Hang up and call back on a number you already have. This works even if you never set up a word. End the call politely and dial the person yourself using the number saved in your contacts, on your own paperwork or on a company directory. Do not press redial and do not use a number the caller gave you.

Say something like: "I'm in the middle of something, I'll call you right back." Then call back. If it was real, they will answer and you lose a minute. If it was a scam, the trick falls apart.

Rules for money, passwords and codes

Write a few firm rules and make them normal, so nobody feels rude following them.

• No payment, transfer, gift card purchase or change to bank details is made on the strength of a phone call alone. A second person or a second channel must confirm it.
• Nobody reads out a password, a login code or a one-time code over the phone. A real support person will not ask you for these.
• If the request is unusual, secret or urgent, that is the signal to slow down, not speed up.

In a small office, tell your staff directly that they will never be blamed for double-checking the boss. Put it in plain words: if I call and ask for money, please verify, even if it feels awkward. People who fear embarrassment are the ones scammers count on.

Reduce what scammers can copy

You cannot hide your voice completely, but you can make it harder to harvest.

• Check who can see videos and voice clips you post. On Windows and Mac alike, this is done inside each social media site's privacy settings, not in the computer itself, so open the site in your browser and look for the audience or visibility options.
• Consider a plain voicemail greeting, or the default one, instead of a long personal recording.
• Be careful with unknown callers who try to keep you talking or ask you to say yes. Hang up rather than chat.

Protect the computer side too

Many of these scams are not just a phone call. The caller may ask you to open a website, install a program or approve a login on your computer so they can see your screen. Treat that as a red flag for the same reason: an unexpected request that comes with urgency.

Keep your computer in good shape so one slip does less damage. On Windows, open Settings, then Windows Update, and install anything waiting. On a Mac, open System Settings, then General, then Software Update, and do the same. Also keep an eye on free disk space and on any security warnings that appear.

Be honest with yourself about what tools can do. Antivirus software or a setting can tell you that something looks wrong, but it does not call anyone back or fix the problem. Someone still has to read the warning, decide what it means and clean things up. For many busy people, that fixing step is the part they would gladly hand to someone else.

What to do if you already acted

If you sent money or shared a code, move quickly and calmly. Contact your bank or payment provider using the number on your card or statement, tell them what happened, and ask what they can do. Change any password you shared, and turn on two-step sign-in where it is offered. Tell the real person that someone is using their voice, so they can warn others.

Then set up your verification word today. It takes five minutes, and it works whether or not you can tell a real voice from a fake one.

If you would rather not do this alone, iFixediT can help: Fixie, our AI helper, answers first, and people help on paid plans.