The call comes at a bad hour. It is your daughter, or your son, or your mother, and the voice is right. Not close. Right. They are crying, there has been an accident or an arrest, and someone else takes the phone to explain what you need to send and how fast.
The FTC warned about this in 2023 and the tooling has become cheaper and faster every year since. The old family emergency scam relied on a bad connection and your panic filling in the gaps. It does not need either one now.
Where they get the voice
A few seconds of clear audio is enough for a usable clone. That audio is not hard to find.
- Any video your family member posted publicly, on any platform
- A voicemail greeting, which is a clean recording of someone saying their own name
- A livestream, a podcast appearance, a wedding video, a school concert someone uploaded
- A previous scam call whose only purpose was to record you talking
Nobody has to target you specifically for this to reach you. Pulling public audio and matching it to family names in the same profile is automated work, and it runs at volume.
How to tell, in the moment
Detection by ear is unreliable and getting worse, so treat these as weak signals rather than a test you can pass:
- The emotion never varies. Real panic rises and falls. Cloned panic often holds one register the whole call.
- Breathing is wrong or absent. Listen for the pauses a person takes mid-sentence rather than the words.
- They avoid specifics. A clone works from a script. Ask about something only that person knows and the answer stays general.
- Someone else takes over fast. The “lawyer” or “officer” appears within a minute, because the clone is the hook and a human handles the rest.
- The background is too clean. A real roadside or holding cell is loud.
None of this is reliable enough to bet money on, which is why the actual defense is not a detection skill.
The pressure is the tell, not the voice
Every version of this scam runs the same three moves, and they are far easier to spot than a synthetic voice.
Urgency. It has to happen now, in the next twenty minutes, before a deadline that is always arbitrary.
Secrecy. Do not tell Dad. Do not call your sister. There is always a reason it has to stay between you, and the reason is that one phone call to the right person ends the scam.
An irreversible payment. Wire transfer, gift cards, crypto, a payment app, or a courier coming to collect cash. Money that cannot be recalled is the entire point, and no institution on earth collects a legitimate bond in gift cards.
Any one of those three should stop you. All three together is a scam, whatever the voice sounds like.
The question that ends it
Hang up and call the person back on the number you already have for them.
That is it. That is the whole defense, and it beats every detection trick because it does not depend on you being right about the audio.
The scammer will tell you not to. Their phone is broken, they only get one call, there is no time. Hang up anyway. If they are genuinely in trouble, a two minute delay changes nothing. If they are asleep and confused about why you are calling at 1am, you just saved yourself several thousand dollars.
Then set up a family password before you need one. A word or phrase your family agrees on in advance, kept off every device, never sent in a text. When a voice claiming to be family asks for money, you ask for the word. A clone does not have it.
Pick something concrete and a bit odd. Not a birthday, not a pet’s name, not anything recoverable from a Facebook profile. Tell the older people in your family first, because they get called most, and tell the teenagers too, because they are the ones whose voices are all over the internet.
Setting this up across a whole family, including the relatives who will find it silly, is a conversation with a right and a wrong way to run it. The Social Engineering Defense Playbook has the family password protocol, the scripts for the awkward version of the talk, and the other pressure patterns to teach alongside it. $11.99.
If it already happened
Move fast, and skip the part where you feel stupid about it. These work on careful people. That is the design.
- Call your bank immediately and say the words “I am the victim of a fraud, I need to recall a payment.” Wires are sometimes recallable within hours. After that, rarely.
- Gift cards: call the issuing retailer, read them the card numbers, and ask them to freeze the balance. This works more often than people expect if you call within a day.
- Report it at reportfraud.ftc.gov and file with local police. You will need the report number for the bank and any insurance claim.
- Warn the family member whose voice was used. Their audio is out there and their other relatives will be called next.
- Tell people what happened. The silence around this is what keeps it working, and one person saying it out loud protects everyone who hears it.
Give them less audio to work with
You cannot remove your family’s voices from the internet and you can reduce how easy the collection is.
- Replace personal voicemail greetings with the carrier’s default robot voice. A greeting is a clean, labelled recording of somebody saying their own name, which is the single most useful sample a cloner can get.
- Set teenagers’ accounts to private. They post the most video and their voices are the most available. This is a conversation about how the thing works rather than a rule handed down, and it goes better that way.
- Think about what gets posted publicly from school events, church services, sports and weddings, where someone else’s upload contains your family and you were never asked.
- Do not answer unknown numbers with “hello, yes, speaking.” Some calls exist only to record you saying a few words. Let it ring and check the voicemail.
None of this makes anyone uncloneable. It moves your family out of the easy pile, and these operations run on volume, so the easy pile is where the calls go first.
The bottom line
Stop trying to tell whether a voice is real. That contest is already lost and it gets worse every year.
Judge the call by its shape instead. Urgency, secrecy and a payment you cannot claw back is a scam with a script, whoever it sounds like. Hang up, call back on the number you already have, and agree a family password this week so the next call has an answer ready.