What voice cloning is
Software can now produce speech that imitates a particular person’s voice, sometimes from a short audio sample. Legitimate uses exist, such as accessibility tools and entertainment. The concern is that the same technology can be misused in a call or voice message that sounds like someone you love.
It is hard to say how common this is or how convincing any given attempt will be. Quality varies, and many scams that sound like voice cloning are actually done by a person who simply cries, mumbles or says very little. The safest assumption is that a voice alone can no longer prove identity, and that is a reason to have a plan rather than a reason for alarm.
The typical scenario
The story usually follows a familiar outline.
- A call or voice message arrives from a number you may not recognize, or one that appears familiar.
- The voice sounds like a child, grandchild, partner or friend. It may be distressed, rushed or hard to hear.
- There is an emergency: an accident, an arrest, a hospital stay, being stranded or kidnapped.
- Someone asks for money immediately, often in an unusual form such as gift cards, transfers or cryptocurrency.
- You are told not to tell anyone, or to stay on the line.
This is the same structure as other phone call scams, with a more personal and frightening voice added. The goal is still to overwhelm judgment with emotion and speed.
Where the sample might come from
A voice can be captured from publicly shared videos, voicemail greetings, social media posts or recordings. It does not mean anyone has done anything wrong by posting. But it is one more reason to think about what your digital footprint contains, and to consider privacy settings for videos that include family members, especially children.
Why a code word helps
A family code word, sometimes called a safe word or verification phrase, is a pre-agreed word or short phrase that any family member can be asked for in an emergency. A real relative can supply it, while a stranger imitating a voice cannot.
It works because it does not depend on recognizing a voice, and it can be used on any channel: a call, a voicemail, a text or a video message.
Choosing a good code word
- Make it memorable but not guessable. Avoid birthdays, pet names, addresses or anything found on social media. Two or three unrelated words can be easy to remember and hard to guess, in the same way a memorable passphrase can be.
- Do not store it online. Do not text or email it. Agree on it in person or on a call you initiate, and avoid writing it in a shared chat.
- Keep it private. Share it with close family, and with trusted people such as an older relative’s carer if appropriate.
- Teach everyone. Children, teenagers and grandparents should know when it is used and that it is fine to ask.
- Change it if it is exposed. If someone outside the family learns it, pick a new one.
Practicing the habit
A code word that nobody remembers is of no use. A few suggestions:
- Agree on the word in person and explain why it exists, without frightening anyone.
- Practice once by asking each other for it as a game.
- Remind everyone that nobody will be in trouble for asking, and that a real relative will understand.
What to do if you get a call
Even without a code word, you can protect yourself.
- Stay calm if you can. Take a breath. Urgency is the weapon.
- Ask for the code word, or ask a question only the real person would know. Avoid questions with answers that appear on social media.
- Hang up and call back. Use a number you already have for that person, not the number that called you. If they do not answer, try other relatives or friends to find out where they are.
- Do not send money, gift cards or codes until you have verified the situation another way.
- Contact the authorities when appropriate. If someone may truly be in danger, call your local emergency services. If you believe a call is fraudulent, tell your local police or the national fraud reporting service.
- Tell someone. Scammers rely on secrecy, so talk it through with a trusted person even while the call is still in your mind.
Reducing the risk further
- Keep social media profiles private where you can, and be careful with public videos that show voices.
- Use two-step sign-in on accounts so a voice alone cannot unlock them. Banks that verify callers by voice may be vulnerable, and many offer other forms of verification worth enabling.
- Tell relatives, especially older ones, that voices can be imitated. Information aimed at seniors is often most helpful when it comes from family.
If someone has already paid
It happens to careful people, and shame is unhelpful. Contact your bank or payment provider immediately, report the incident to the police or your national fraud service, and keep a record of the call and any payments. Recovery cannot be promised, but quick action sometimes helps. Support from family and friends matters too, and recovering from fraud is easier when it is not done alone.
A small agreement with large value
A code word costs nothing and takes five minutes to set up. It will probably never be needed, which is the best outcome. If it is ever needed, it provides something a frightened person badly wants: a simple, certain way to find out whether the voice on the phone is real.