How AI voice cloning works
Voice cloning used to need a studio session. Today it needs a clip. Consumer text-to-speech tools can build a recognisable imitation of a specific person from roughly three to thirty seconds of clean speech — a reel, a podcast guest spot, a voicemail greeting, a wedding video. The model learns timbre and cadence, then reads any script the operator types, in real time, over a normal phone call.
Two things changed the economics. First, the audio is free: most targets have already published it. Second, the con no longer needs a fluent speaker — the same compound tooling that powers pig-butchering operations now handles translation, replies and voice in one stack.
The 5 scripts you'll actually hear
The grandparent / family emergency
A cloned child or grandchild, crying, in an accident or in custody, needing bail or a hospital deposit right now. The 'lawyer' or 'officer' takes over the call fast so the clone speaks as little as possible.
Bank fraud department callback
A spoofed number and a calm cloned agent warns of fraud on your account, then walks you into moving money to a 'safe account' or reading out a one-time code.
The CEO / CFO payment order
A short voice note or deepfake video call from an executive authorising an urgent supplier transfer, usually late on a Friday and always confidential.
Virtual kidnapping
Background screaming plus a cloned voice claiming to be held. There is no kidnapping — the target is usually somewhere with no signal, on a flight or asleep.
Voice-print harvesting
A silent or 'wrong number' call whose only goal is to record you saying yes and a few sentences, feeding the clone used against your family later.
Red flags in the first 30 seconds
- Extreme urgency plus secrecy — 'don't tell mum', 'don't tell your colleagues'.
- Payment by wire, crypto, gift cards or a payment app you rarely use.
- The caller refuses a callback on a number you already have saved.
- Emotion that sounds performed: consistent volume, few natural breaths, odd pauses at sentence boundaries.
- Someone else takes over the call quickly — a lawyer, officer, or supervisor.
- The story cannot be checked with a second person, right now, by any other channel.
The 5-minute verification routine
- 1
Stop the clock
Say you'll call back in ten minutes. A genuine emergency survives ten minutes; a scam does not.
- 2
Call back on a known number
Dial the number saved in your own contacts or printed on your bank card — never the one that called you.
- 3
Ask an unscriptable question
Reference a private shared memory, or use the family safe word you agreed in advance and never posted online.
- 4
Search every identifier
Run the phone number, email, username, wallet or website through the free lookup on scamers.org.
- 5
Report it
File a public report so the identifier becomes searchable for the next person who gets the same call.
Check it now — free, no signup
Search a phone number, email, username, crypto wallet, website or name against moderated community reports.
What to do if you already paid
- Call your bank or card issuer immediately — wire recalls are sometimes possible within 24–72 hours, card chargebacks up to 120 days.
- Notify any crypto exchange that received funds; exchanges can freeze deposits that have not yet been withdrawn.
- Report to your national fraud body (IC3 in the US, Action Fraud in the UK, Scamwatch in Australia).
- Change any password or code you read aloud during the call, and enable app-based two-factor authentication.
- Ignore anyone who contacts you offering to recover the money — that is a second scam.
Recovery offers are a documented follow-on fraud — read the crypto recovery scam breakdown before you engage with anyone promising a refund.
Related investigations & guides
Latest Scams 2026: Inside the AI Scam Compounds Draining $21 Billion a Year
New Black Hat 2026 research and the FBI's $20.9B internet crime report expose how AI voice cloning, deepfake video and scam-compound CRMs power today's pig butchering, toll-text and job-offer scams — plus how to check a number, wallet or name for free.
ReadThe $500 Billion Scam Economy: Inside the 4 Fraud Industries Reshaping 2026
Annual global fraud losses now exceed half a trillion dollars. Inside the four industrial-scale scam playbooks — pig-butchering compounds, AI deepfakes, romance fraud, and World Cup 2026 event scams — and how to spot each one before you lose a cent.
ReadHow Do I Find a Scammer for Free? The 2026 Step-by-Step Guide
Yes — you can find a scammer for free. Use this proven 8-step checklist to trace a phone number, email, username, crypto wallet, or website in minutes, with no paid tools.
ReadSpotting Romance Scams in 2026: 7 Red Flags You Can Check in Minutes
Romance scammers have gotten faster and more polished. Here are the seven signals you can verify quickly before you ever send money.
ReadThe Crypto "Recovery" Scam: When the Second Scam Hits Harder Than the First
After a crypto loss, victims are targeted again by fake recovery agents. Here is how the scheme works and how to avoid it.
ReadDaren Li, $73 Million, and the Pig-Butchering Playbook That Still Works
A 20-year federal sentence handed down in absentia. A defendant on the run. And a romance-investment scheme that keeps draining American retirement accounts. Here's what the Daren Li case teaches everyone else.
ReadMore coverage in the scam awareness blog and the Operation Sunshine dossiers.
Frequently asked questions
What is an AI voice scam?
An AI voice scam is a phone or voicemail fraud where criminals use voice-cloning software to imitate someone you trust — a family member, your bank, or a company executive — and pressure you into sending money or sharing codes. Modern tools need only a few seconds of public audio from a video, voicemail or social clip.
How much audio do scammers need to clone a voice?
Commercial and open-source voice-cloning tools can produce a recognisable imitation from roughly three to thirty seconds of clean speech. A public reel, a podcast appearance, or a recorded voicemail greeting is enough.
How can I tell if a caller's voice is AI-generated?
Ask a question only the real person could answer, listen for flat emotional range and unnatural pauses at sentence breaks, and always hang up and call back on a number you already have saved. A caller who refuses a callback is the single strongest red flag.
What should I do if I already paid an AI voice scammer?
Call your bank or card issuer immediately — wire recalls are sometimes possible within 24 to 72 hours and card chargebacks can run up to 120 days. Notify any crypto exchange involved, report to your national fraud body, and file a free public report on scamers.org so the number becomes searchable for the next target.
Can I check a phone number for AI scam reports for free?
Yes. Search the number on scamers.org. Our free scam phone number lookup returns moderated community reports in seconds, with no signup, alongside matches on emails, usernames, crypto wallets, websites and names.
What is a family safe word and why does it stop voice cloning?
A safe word is a short phrase agreed with your family in advance and never posted online. Because it exists only in shared private memory, no amount of scraped audio or public data lets a cloned voice produce it on demand.