Your phone rings on a normal weekday afternoon. The voice on the other end is crying — it’s your granddaughter, and something terrible has happened. A car accident. The police have her. She needs bail money, and she needs it tonight. You would know that voice anywhere. That is exactly what the caller is counting on.
Here’s the part nobody warned you about: the voice on that call might not be your granddaughter at all. Scammers can now clone a person’s voice from a short audio clip — lifted from a video or voice note posted online — and play it back sounding just like them. The US Federal Trade Commission issued a warning about exactly this, headlined “Scammers use AI to enhance their family emergency schemes,” and its core advice hasn’t changed since: don’t trust the voice.
Why “I’d know my own grandchild’s voice” doesn’t protect you anymore
People post more of their voice than they realise. Birthday videos, graduation clips, casual stories, voicemail greetings, podcasts, gaming streams. According to the FTC’s warning, all a scammer needs is a short audio clip of your family member’s voice — one that can be taken from content posted online — plus a voice-cloning program. What used to require a sound studio now runs on a laptop.
The crying does double duty. It’s what makes the call feel real, and it’s also what conveniently explains any slight oddness in the voice — the flattened tone, the missing warmth, the way certain words sound slightly wrong. If you’re already imagining the person you love in trouble, your brain fills in the rest. That’s not gullibility; it’s how hearing works under stress.
And it isn’t only grandparents who get these calls. Parents get the “Mum, it’s me” version. Spouses, partners, even siblings. The classic target is the grandparent, but the playbook adapts to whoever answers.
How the call actually unfolds
The script has been refined for years — this scam existed long before AI, when the voice was just a stranger on a bad connection. The AI simply fixed the one weak spot. Almost every call follows the same four beats:
A voice you know, in distress. Crying, panicking, whispering — a voice that needs your help and can barely get the words out. The distress makes you act on emotion instead of logic, which is the entire point.
An emergency with no time to think. An accident, an arrest, a hospital. The details change; the urgency doesn’t. There’s always a clock ticking, a bail amount due tonight, a situation that will get much worse if you pause. Urgency is the active ingredient — it exists to stop you thinking, not to describe a real emergency.
Secrecy. “Don’t tell Mum.” “My lawyer says not to discuss it with anyone.” This is the step that isolates you from the one thing that breaks the scam: another person who might say “that doesn’t sound right.” Real emergencies don’t require you to keep them secret from the rest of the family.
A payment that can’t be undone. This is the tell. The FTC warns that scammers ask for money in ways that are hard to get back: wire transfers, cryptocurrency, or gift cards with the numbers and PINs read out over the phone. No real court, police station, or hospital collects bail or medical bills in gift cards. If the story ends at a payment method that can’t be reversed, the story was written to end there.
The same formula arrives by text, too — the panicked “Mum, it’s me, I lost my phone” message with a new number, asking for money before anyone can verify anything (we covered that version separately). Different channel, same con.
The signs it isn’t real — while you’re still on the call
Spotting the scam in the moment is hard, because the moment is designed to be hard. But there are three things worth noticing, even with your heart pounding:
They won’t let you hang up. The caller insists you stay on the line, keep them informed, don’t talk to anyone else. A real emergency survives a five-minute callback. If hanging up and calling back is treated as unacceptable, that’s the scam identifying itself.
They can’t answer one private question. “What did we have for your birthday last year?” “What’s the name of your dog?” A cloned voice can cry and plead; it can’t recall the answer to something only the real person knows. Scammers will dodge, cry harder, or have a “lawyer” take the phone instead. The dodge is the answer.
The caller ID can be faked. The number on your screen matching your granddaughter’s number proves nothing — displaying any number on a call is trivial for scammers. Never trust what the screen says; trust a call you made yourself.
One more thing scammers rely on: they often know personal details — names, schools, where you live, even an old password. That detail usually comes from a public profile or from one of the many data breaches floating around (here’s what to do if your information has appeared in one). Knowing your grandson’s birthday doesn’t make the caller your grandson; it makes them a scammer who did homework. It’s the same trick used in the bluff emails that quote your old password — a true detail wrapped around a lie.
The one thing to do while it’s happening
Hang up.
That’s it. That’s the whole defence, and it costs nothing. Then call your grandchild — your child, whoever the caller claimed to be — on the number you already have saved in your phone. Not a number the caller gave you. Not a number from a text message. The one in your contacts.
The FTC’s advice is one sentence long: don’t trust the voice; verify the story by calling the person back. If they don’t pick up, try another family member or a close friend. A cloned voice can’t answer a phone you dialled yourself — and the caller on the other end can’t control a number that’s been in your contacts for years.
Tell the caller you need to verify and end the call. You don’t owe a scammer politeness, and a real family member in a real emergency will understand a five-minute verification call. Anyone who treats “I’ll call you right back” as suspicious is telling you exactly what they are.
If money has already changed hands
First: this is not your fault, and don’t let embarrassment slow you down. These operations are professional, rehearsed, and built specifically to defeat good judgement. Act quickly instead:
- Call your bank immediately if you wired money or paid by card. Some wire transfers can be recalled if caught fast, and card payments can often be disputed.
- If you sent gift cards, call the card issuer right away with the card numbers. Some issuers can freeze unused balances.
- Report it. In the US, the FTC takes reports at ReportFraud.ftc.gov and the FBI’s Internet Crime Complaint Center at ic3.gov. In the UK, report to Action Fraud. Reports help investigators connect calls to the same operation — your call may be the one that completes the pattern.
The cheapest defence in the world: a family code word
There’s one thing you can set up this week, in five calm minutes, that defeats a cloned voice instantly: a family code word.
Agree with your immediate family on a word or short phrase that only you all know. Then agree on the rule: anyone calling in an emergency asking for money or help has to give the word first. If the caller can’t, you hang up and call back on a number you trust — no matter how real the voice sounded.
A few rules for choosing it:
- Never posted online. Not on social media, not in a birthday card photo, not anywhere searchable. If it’s on the internet, a scammer can find it.
- Not guessable from your life. Not a pet’s name, not a street address, not a birthday. Pick something odd enough that nobody would stumble onto it — a nonsense phrase, a silly inside joke, a random combination.
- Written down somewhere physical. On the fridge, on a card in a wallet, in the back of a phone case. The point is that everyone knows it before an emergency, because nobody picks good code words during one.
If a family member says this sounds paranoid, frame it as a small game rather than a warning. “Hey, I read about these fake voice calls — want to pick a safeword, just in case?” The whole point is that no one ever has to guess the word. The correct answer to “guess the word I never told you” is “I can’t.”
Give the scammers less raw material
It’s worth a quick pass through the family’s public profiles. Consider setting social media accounts to private so voice clips, videos, and family details aren’t freely harvestable. Think before posting videos where a child’s or grandchild’s voice is clear and downloadable.
Be honest with yourself, though: you can’t delete what’s already out there, and a determined scammer can find something. Reducing exposure helps; it doesn’t replace verification. The code word and the callback are the defences that work even if the scammers have all the audio in the world.
And talk about it. These scams thrive on the idea that it’ll never happen to your family, and on victims staying too embarrassed to mention it afterwards. One conversation at the dinner table this week — “here’s our code word, here’s what to do if you get one of those calls” — is worth more than any app, filter, or privacy setting. The scam runs on panic. Your household’s plan runs on five quiet minutes of preparation.
The rule worth memorising: don’t trust the voice. Verify the person.
