Home/Learn/Threats
Threats

AI Voice Clone Scams: How Criminals Fake a Voice, and How to Verify Who Is Really Calling

Voice cloning turns a few seconds of public audio into a convincing fake of your child, your parent, or your CFO. Here is how the scams work, what the FBI and FTC report, and the out-of-band checks that actually protect Southwest Florida families and firms.

8 min read·Updated undefined·7 sources

What is an AI voice clone scam?

An AI voice clone scam is fraud in which criminals use artificial intelligence to copy a real person's voice from a short audio sample, then call a victim while impersonating that person to demand money or information. The clone is built from public audio, so the caller sounds like family or a boss.

The technology is no longer exotic. In its 2023 report Beware the Artificial Impostor, McAfee found that just three seconds of audio could produce a clone with an 85 percent voice match, and that more than a dozen cloning tools were freely available online. That means a voicemail greeting, an Instagram story, or a public group chat clip can be enough raw material.

3 seconds
of audio can yield an 85% voice match, per McAfee researchers
McAfee, Beware the Artificial Impostor, 2023 ↗

For Naples and Southwest Florida, this hits close to home. The region has one of the highest concentrations of retirees in the country, and older adults are the group scammers target most. Understanding the mechanics is the first step toward a family plan that holds up under pressure. Our deepfake defense overview covers the broader threat.

How do criminals clone a voice from seconds of audio?

Criminals harvest a short clip of a target's voice from social media, a voicemail greeting, a podcast, or a public video. They feed it to a cloning tool that learns the person's pitch and cadence, then generate speech that says whatever the scammer types. The whole process can take minutes and costs little.

The audio does not need to be long or high quality. Because so many people post video with sound, or leave a personalized voicemail greeting, the source material is often already public. Scammers pair the clone with a spoofed caller ID and a scripted emergency to remove the victim's time to think.

1 in 4
adults surveyed said they had experienced an AI voice scam or knew someone who had
McAfee global survey, 2023 ↗
The clone does not have to be perfect. It only has to survive one panicked phone call before you wire the money.

An important honesty note: no consumer app can listen to a live cellular or FaceTime call and reliably tell you the voice is fake in the moment. Real detection tools work on recorded audio in controlled settings. On a live call, your defense is not detection, it is verification through a separate channel.

What real scams use voice cloning against families and businesses?

Three patterns dominate. The grandparent scam clones a grandchild claiming to be in jail or a crash. The virtual kidnapping scam plays a cloned voice screaming for help and demands ransom in minutes. CEO or CFO fraud clones an executive to authorize an urgent wire transfer at work.

The business version is not hypothetical. In 2024, engineering firm Arup confirmed a finance employee in Hong Kong was tricked into 15 transfers totaling roughly 25 million dollars after a video call in which the CFO and colleagues were all AI deepfakes built from public footage.

$25 million
lost by engineering firm Arup to a deepfake video-call fraud impersonating its CFO
CNN Business, 2024 ↗

Families are targeted just as aggressively. In December 2025 the FBI amplified a warning that criminals are staging virtual kidnappings using cloned voices and AI photos, pressuring families to pay before they can confirm a loved one is safe. One Florida mother reported losing 15,000 dollars to a call featuring a convincing clone of her daughter's voice describing a bail emergency.

  • Grandparent scam: a cloned grandchild says they are in jail or hurt and begs you not to tell their parents.
  • Virtual kidnapping: a cloned voice cries for help while a stranger demands immediate ransom by wire, crypto, or gift cards.
  • CEO or CFO fraud: a cloned executive pressures a finance staffer to push an urgent, confidential wire transfer.
  • Utility or agency impostor: a cloned official demands instant payment to avoid arrest or a shutoff.

How much are these scams costing people?

The losses are large and rising. The FBI's Internet Crime Complaint Center reported that Americans over 60 lost about 4.9 billion dollars to fraud in 2024, a 43 percent jump in losses over the prior year. AI-enabled scams, including voice cloning, are a growing share of that total.

$4.9 billion
reported lost to fraud by Americans over 60 in 2024
FBI IC3 Elder Fraud data via AARP, 2024 ↗

Voice cloning specifically is now measured in the hundreds of millions. The FBI has tied roughly 893 million dollars in reported losses to AI-related scams, a category that includes cloned-voice calls alongside AI phishing and romance fraud. Actual figures are almost certainly higher, because older victims often do not report.

$893 million
in reported losses tied to AI-related scams, including voice cloning
FBI, reported via Moneywise, 2026 ↗

For Southwest Florida, the takeaway is direct. A retirement-heavy region with significant household wealth is exactly the demographic these operations chase. Prevention is far cheaper than recovery, because wired funds and crypto are usually gone for good.

How do you verify a caller is really who they say they are?

You verify through a separate, trusted channel, not by judging the voice. Hang up and call the person back on a number you already have. Agree on a family safe word in advance. Ask a question only the real person could answer. Never act on urgency alone, especially requests for wire, crypto, or gift cards.

The FTC's core guidance is blunt: if someone who sounds like a relative or your boss asks for money, hang up and contact that person directly through a known, trusted number. Do not call back the number that just called you, since it may be spoofed or answered by the scammer.

  • Set a family safe word. The FBI recommends a secret word or phrase every close family member knows, used to confirm a real emergency. Choose something not posted online.
  • Hang up and call back. Reach the person on a number you already have saved, not the number that called you.
  • Add a duress check. Ask a specific personal question a scammer could not answer, or ask the caller to do something on a video call in real time.
  • Slow the money down. No legitimate emergency requires secret payment in gift cards, crypto, or wire within minutes. Treat urgency plus secrecy as the alarm.
  • Lock down source audio. Tighten social media privacy and limit public voice clips, especially for children and grandchildren.
The voice can be faked. A safe word agreed on in person, and a callback to a number you already trust, cannot be cloned.

For businesses, the same principle scales into policy. Require out-of-band confirmation for any wire transfer or change to payment details, using a signed callback channel and a second approver, regardless of how convincing the request sounds on a call. This is the verifiable approach we build into enterprise defenses and detail in our services. If your Naples household or firm wants help building a plan, contact us.

FAQ

Threats — common questions

Can an app detect a fake voice during a live phone call?
No. This is where a lot of marketing overpromises. No consumer app can listen to a live cellular or FaceTime call and reliably flag a cloned voice in the moment. The detection tools that do exist, including some recognized by the FTC's Voice Cloning Challenge, work on recorded audio in controlled conditions, not on your live call. On a live call your protection is out-of-band verification: hang up and call the person back on a number you already trust, use a prearranged family safe word, and refuse any urgent request for secret payment. Treat any tool that claims real-time live-call clone detection on a normal phone with skepticism, and verify its claims independently.
How much audio does a scammer need to clone a voice?
Very little. McAfee's 2023 research found that roughly three seconds of audio could produce a clone with an 85 percent voice match, and that longer samples pushed the match even higher. That three seconds can come from a voicemail greeting, a social media video, a podcast appearance, or a clip in a public group chat. Because so many people post audio and video, the raw material is often already public without the target realizing it. The practical defense is not to assume your voice is private. Instead, reduce your public voice footprint where you can, tighten privacy settings on family accounts, and build verification habits that do not depend on how real a voice sounds.
What is a family safe word and how do we set one up?
A family safe word is a secret word or short phrase that every close family member agrees on in advance, in person, and uses to confirm a real emergency. The FBI recommends it specifically to counter virtual kidnapping and voice-clone scams. If someone calls claiming a loved one is in trouble, you ask for the safe word. A real family member will know it. A scammer with a cloned voice will not. Choose something memorable but not guessable, and never post it or hint at it online. Make sure children, grandchildren, and older relatives all know it, and refresh it if you suspect it has leaked. Pair the safe word with a habit of hanging up and calling back on a known number.
Why are Naples and Southwest Florida families a common target?
Southwest Florida has one of the highest concentrations of retirees in the country, and older adults are the demographic scammers pursue most aggressively. The FBI reported that Americans over 60 lost about 4.9 billion dollars to fraud in 2024. Grandparent and virtual kidnapping scams are built to exploit the fear of a grandchild or child in danger, and higher regional household wealth makes the payoff larger for criminals. Reporting rates among older victims are also lower, which makes the demographic attractive. None of this means Naples families are helpless. A simple, agreed-upon plan, a safe word, a callback rule, and a firm policy of never sending secret urgent payments, blocks the overwhelming majority of these attacks before money moves.
What should our business do to prevent CEO or CFO voice-clone fraud?
Assume a convincing voice or even video is not proof of identity. The Arup case, where a finance employee wired roughly 25 million dollars after a deepfake video call, shows that senior-executive impersonation is now realistic. Require out-of-band confirmation for every wire transfer, vendor bank-detail change, and urgent financial request, using a callback to a known internal number and a mandatory second approver. Train staff that urgency plus secrecy is a red flag, not a reason to skip controls, and make it explicitly safe to slow down a request that appears to come from a senior leader. Document these steps as policy so no single employee can be pressured into bypassing them, and review them regularly as cloning tools improve.

Sources

  1. Beware the Artificial Impostor (report) · McAfee
  2. Artificial Imposters: Cybercriminals Turn to AI Voice Cloning · McAfee
  3. Arup revealed as victim of $25 million deepfake scam · CNN Business
  4. FBI: Older Fraud Victims Lost $4.9 Billion in 2024 · AARP
  5. FBI reports AI voice-cloning scam losses · Moneywise
  6. Fighting back against harmful voice cloning · Federal Trade Commission
  7. FBI Warns of Rising Virtual Kidnapping Scams Using AI Voice Cloning · Axios
Get started

Protect your Naples business against this.

RankShield turns the ideas in this guide into verifiable defense for your Southwest Florida business. Get a no-obligation assessment.