AI Voice Cloning Scams: How a Family Code Word Protects You

What is an AI voice cloning scam?

Imagine your mother picks up the phone and hears you, crying, saying you’ve been in an accident and need money. It’s your voice. Your way of saying “Mom.” Everything about it sounds real, except that you’re at your desk, and it isn’t you at all.

That is an AI voice cloning scam. Software that copies voices has become cheap and easy to use, and criminals have added it to an old trick: the family emergency scam (we explain the classic version in our guide to the grandparent scam).

The FTC puts it simply: a scammer could use AI to clone the voice of your loved one, and all they need is a short audio clip of your family member’s voice. The FBI has warned the same thing: criminals generate short audio clips containing a loved one’s voice to impersonate a close relative in a crisis and ask for immediate financial help.

How voice cloning scams work

The pattern is usually:

1. Collect a voice sample. A video on social media, a voicemail greeting, a clip from a public talk. A few seconds can be enough.
2. Feed it into cloning software. The tool learns the voice and can then “say” anything typed into it.
3. Make the call. Usually short, emotional and noisy: crying, sirens, a bad line. All of that hides small flaws.
4. Hand over to a “helper.” A calmer second voice, a “lawyer” or “officer,” takes over to explain where to send money.
5. Push for fast, final payment. Wire transfers, cryptocurrency, payment apps, gift cards, or cash.

The FBI also warns that caller ID can be faked, so a familiar number on the screen isn’t proof either.

Why it works, even on careful people

These scams don’t succeed because people are foolish. They succeed because they’re designed to switch off careful thinking:

• Fear comes first. Hearing someone you love in distress floods the body with adrenaline. Slow, logical thinking is the first thing to go.
• Urgency leaves no room to check. “There’s no time” is there to stop you calling anyone.
• Secrecy cuts you off from help. “Don’t tell Dad” means no second opinion.
• The voice removes doubt. For years the advice was “you’d know your own grandchild’s voice.” Cloning breaks that rule.

How common is it?

Reports are still a small share of all fraud, but they’re climbing. In its 2025 annual report, the FBI’s Internet Crime Complaint Center counted 3,143 complaints from people 60 and older that referenced AI, with $352.5 million in reported losses. The report also notes that victims claimed losses of over $5 million in 2025 to “distress” scams, in which voice cloning is used to mimic the sound of a loved one, and says this type of scam is evolving to mimic other family members and close friends.

The law has moved too. In February 2024, the FCC ruled that AI-generated voices are “artificial” under the Telephone Consumer Protection Act, making voice cloning in robocall scams illegal. That gives authorities more tools, but criminals don’t ask permission. A family plan is what protects you on the day.

Set up a family code word

The FBI’s advice is short: create a secret word or phrase with your family to verify their identity. It’s free, it takes ten minutes, and it works even against a perfect copy of a voice, because the AI doesn’t know the word.

How to choose one

• Easy to remember for everyone, including the oldest and youngest in the family.
• Impossible to guess. Skip pet names, street names, school mascots, birthdays and anything on social media.
• A little odd. Two unrelated words (“purple tractor,” “lemon piano”) or a private family joke work well.
• The same for everyone. One word for the whole family is easier than several.

How to bring it up with your parents

Make it a family project rather than a lesson. At the next dinner or video call, say something like: “I read that scammers can copy voices now, so we’re all picking a secret word. Even the kids.” When everyone takes part, nobody feels singled out. Let your parent help choose the word, and ask them to say it back to you a week later, so it’s stored in memory, not just on a note in a drawer.

The rules that make it work

A code word only protects you if everyone follows the same few rules:

1. Never say it first. The person claiming to be family must say it. If your parent asks “Is it bluebird?”, the scammer just says yes.
2. Ask, don’t hint. “What’s our word?” is the only question. No clues, no multiple choice.
3. Never write it in a text, email or post. Agree on it in person or on a call you started.
4. Everyone knows it. Grandchildren too, especially the ones most likely to be impersonated.
5. No word, no money. If the caller can’t say it, or “forgot,” hang up. Even if the voice is perfect.
6. Change it if it’s ever used or leaked. After a real emergency or a scam attempt, pick a new one.
7. Nobody takes offense. Agree now that asking for the word is love, not distrust.

Call back on a number you know

The code word has a partner that matters even more: the call-back. The FTC’s advice is “don’t trust the voice”: hang up and call the person on a phone number you know is theirs. If you can’t reach them, try another family member or a friend who may know where they are.

Two details matter:

• Use the number saved in the phone, never one the caller gives you, and never “call back” the number that just rang.
• No answer isn’t proof of an emergency. People are in meetings, on the subway, or asleep. Keep calling others in the family before doing anything with money.

What to do in the moment

If your parent gets a call like this, here is the plan in one table:

If the caller says…	Do this
“It’s me, I’m in trouble.”	Ask for the family code word.
“There’s no time!”	Say “I’ll call you right back,” and hang up.
“Don’t tell anyone.”	Call another family member straight away.
“My lawyer will explain.”	Hang up. Call your relative on their saved number.
“Buy gift cards / wire it / someone will pick up cash.”	Don’t. This is how scammers ask to be paid.
“Stay on the line while you go to the bank.”	Hang up. A real emergency survives a call-back.

If money has already been sent, call the bank or payment company immediately, then report it to the FTC at ReportFraud.ftc.gov and the FBI at ic3.gov.

Make your family’s voices harder to copy

You don’t need to vanish from the internet, but a few small changes help:

• Set social media accounts to private, especially ones with videos of you or your children talking.
• Keep voicemail greetings short and generic.
• Be wary of unknown callers who keep you talking with odd questions. If it feels strange, hang up.
• Keep travel plans off public posts. “I’m abroad and in trouble” is easier to believe when everyone knows you’re away.

Where Surewell fits

Surewell’s Is this really you? feature turns the call-back into one tap. While on a suspicious call, your parent taps who the caller claims to be, and that family member’s phone asks, “Are you calling Mom right now?” Yes shows your parent “It really is Ben ✓.” No shows “Hang up now. It’s NOT Ben.” Your family code word can be stored in the app, so your parent can check it without digging for a note.

Surewell can’t read your parent’s calls, texts or other apps. It simply connects your parent to the real you, fast, at the moment it matters most.