Cloned voices, fake faces, and messages written to sound like someone you love
For most of history, hearing someone's voice was proof it was them. That stopped being true around 2023. Three seconds of audio — a voicemail greeting, a clip from a family video, a few words from a church livestream — is now enough to clone a voice well enough to fool a parent. The technology is cheap, legal to buy, and requires no skill. This matters most for the people least likely to have heard about it: the grandparent who gets a call at 2am saying their grandchild is in jail and needs bail money, in what sounds exactly like their grandchild's voice. This guide explains what can be faked, what still cannot, and the one habit that defeats all of it. It pairs with Scam Shield: that service tells you about a specific message, this tells you how to recognize the next one on your own.
Free PDF, about ten pages. No sign-up.
Knowing where to stop is a skill, not a failure of nerve. These jobs are not DIY:
A family code word
One word or short phrase, agreed in person, never written down or texted. The single most effective defense that exists, and it costs nothing.
Your own contact list
The only phone numbers you should ever call back on. Never the number that called you, and never a number inside the message.
A second channel
If the message came by phone, verify by text. If by text, verify by phone. A faker usually controls only one.
Reverse image search
Google Lens or images.google.com. Drag in a profile photo — a stolen or generated one often turns up elsewhere under a different name.
A written note by the phone
For anyone who might panic: 'Hang up. Call them back on the number I already have.' Sounds patronizing until it saves five thousand dollars.
Part 1
Being precise about this matters. Overstating it makes people distrust everything, which is its own kind of harm. Here is where the technology actually stands.
Voice: convincingly, from seconds of audio
A cloned voice can now carry emotion, crying, and a specific accent. It can say anything the operator types. What it still struggles with is unscripted back-and-forth — long pauses before answering an unexpected question, and shared history it was never given. It cannot know what you ate at Thanksgiving.
Still photos: essentially perfectly
A face that has never existed can be generated in seconds and used as a dating or business profile. Older advice about counting fingers and looking for warped ears is out of date — that generation of tell is largely gone. Assume a photo proves nothing at all.
Video: very good, and improving fast
Short clips of a person talking are now routinely convincing, especially compressed on a phone screen. Longer video and anything with fast movement, hand gestures near the face, or someone turning fully in profile still tends to break down. Do not rely on that gap lasting.
Live video calls: possible, but harder
Real-time face swapping exists and is used in fake job interviews and romance scams. It is more fragile than a recorded clip: it struggles when someone waves a hand slowly across their own face, turns fully sideways, or picks up an object and holds it near their cheek. Asking for that is not rude when money is involved.
Writing: completely, in anyone's style
Grammar mistakes used to be the reliable sign of a scam. That tell is dead. Scam messages are now fluent, correctly punctuated, and can be written to match how a specific person texts if the sender has seen examples. Judge messages by what they ask for, never by how well they are written.
Safety
Nobody can reliably spot a good fake by looking or listening. Detection tools sold for this are unreliable in both directions. Your defense is verification through a second channel, not your own eyes and ears.
Part 2
This is the one that takes the most money from the most people in North Texas, and it follows the same script almost every time. Knowing the shape of it is most of the defense.
The call comes at a bad hour
Late at night or very early. That is deliberate — a person woken from sleep is worse at scepticism and better at panic. The voice is upset, often crying, which conveniently explains why it sounds slightly off.
There is an accident, an arrest, or a hospital
Something urgent and shameful. A car crash, a DUI, a broken nose, an arrest in another state. Shame is doing real work here: it is the reason for the next step.
You are asked not to tell the parents
'Please don't tell Mom, she'll kill me.' This is the tell. It is the only reason given for why you should not do the one thing that would end the scam in thirty seconds. No genuine emergency is improved by keeping one specific person in the dark.
A second voice takes over
A lawyer, a bail bondsman, a police sergeant, a doctor. This person is calm and authoritative and gives you the number and the amount. Real bail is not paid this way. No court, hospital, or police department takes payment by gift card, wire, crypto, or a courier to your door.
The money must move now
Within the hour. Before a hearing, before a transfer, before a procedure. Urgency exists to stop you doing the checks you would otherwise do. Every genuine institution can wait twenty minutes while you call someone back.
Sometimes, someone comes to collect
A growing version sends a courier to the house for cash. If that happens you are dealing with people who now have your address. Do not open the door, and call the police while they are still outside.
Safety
Hang up and call the person back yourself, on the number already in your phone. If they do not answer, call their parent, their spouse, or their roommate. Being wrong and slightly embarrassed costs nothing. Being right and fast saves everything.
Part 3
A family code word defeats voice cloning completely, because it is information that does not exist anywhere the technology can reach. It only works if you set it up properly.
Choose something that is not a fact about you
Not a pet's name, a street, a birthday, a school, or a maiden name. All of those are findable. Pick something arbitrary — a nonsense pairing like 'purple tractor' is ideal precisely because there is no reason for it.
Agree it face to face
Never by text, email, or a phone call, and never in a group chat. If it exists in writing on a device, it can be found on a device.
Tell everyone who might get the call
Grandparents especially, and anyone who would wire money for family. A code word only one person knows about is not a system.
Practice it once, out loud
Ring your parent and ask for the word. It feels silly. It also converts an abstract idea into a habit, and habits are what people fall back on when frightened.
Agree what happens when it fails
The rule is: no word, no money, no exceptions, even if the story is heartbreaking. Decide that now, calmly, so the decision is already made when someone is crying down the phone.
Part 4
For dating, marketplace selling, hiring, or anyone who has appeared in your life recently and moved quickly to talking about money.
Safety
Anyone you have not met in person who begins discussing money, crypto, investments, or an emergency should be treated as unverified no matter how long you have been talking. Romance scams often run for months before the first request, because the wait is what makes it work.
Part 5
Small businesses are targeted specifically, because they have real money and no fraud department. Two versions dominate.
The CEO voice note
A voice message or call that sounds like the owner, telling a bookkeeper to pay an urgent invoice or change payment details. It arrives when the real owner is known to be travelling, which is public information if anyone posts about trips.
The changed bank details email
A supplier you really use writes to say their account has changed. The email is fluent, the invoice looks right, and the account is the fraudster's. This is the single most expensive scam hitting small firms.
The rule that stops both
Any change to payment details, and any payment over an amount you set, requires a call back on the number you already have on file — not one in the email — to a named person. Write the rule down. Tell staff explicitly they will never be in trouble for slowing a payment down to check.
Limit what is public
Voices are cloned from what is published. Owner interviews, promotional videos, and voicemail greetings are all raw material. That is not a reason to stop marketing, but it is a reason to have the callback rule.
Safety
Tell your staff plainly that a demand for secrecy or urgency from a senior person is itself the warning sign. Fraud depends on juniors not wanting to question a boss.
Part 6
If you think you have just been caught, speed matters more than anything else. Work down this list in order.
Safety
If you are contacted afterwards by someone offering to recover your money for a fee, that is a second scam that specifically targets people who have already been hit. Real recovery never requires an upfront payment.
Knowing the right word is half of getting good help.
Reading changes nothing on its own.
Next guide
What your phone collects, who buys it, and the settings that actually matter