Quick answer
Agree a family code word today, before you need it. In a cloned-voice call the caller knows the name and the relationship but not a word that only your family uses — and that single question is enough to break the scenario.
The call says a relative is in trouble: an accident, a hospital deposit, a police station, a debt that must be paid within the hour. The voice is recognisable — cloned from a voice note, a story on social media, or a voicemail greeting. Then a second person takes the phone: a "doctor", a "lawyer", a "police officer" who explains why money must move immediately and why nobody can be called.
Why it works, and where it breaks
A cloned voice is convincing for a few sentences. It answers simple questions, repeats the name, and gets emotional at the right moment. What it cannot do is produce information that was never in the recording: a family code word, the name of a pet nobody posts about, or the answer to a question about something that happened last week.
- Refuse the urgency, not the person: "I am helping, give me two minutes."
- Hang up and call the relative back on the number you already have.
- Ask the code word, or a question whose answer is not public. Do not ask what a stranger would not know — ask what only your family knows.
- If they insist on secrecy, a cash handover, a courier collecting money, or a payment in crypto or gift cards, the scenario is over.
The family code word, in practice
Choose a word or a short phrase that has nothing to do with any account, is written nowhere online, and is known to every family member — including the ones who would never call for help. Agree on when it is used: money, access, a password reset, an unusual request from an unknown number. A code word only works if nobody has to invent it while crying.
If money has already gone
- Call the bank the same day about recalling the transfer, and file a police report — for bank transfers the report is the basis for any recovery.
- If you handed cash to a person, note time, place and any camera coverage while it is still fresh.
- If you paid with gift cards or crypto, keep the receipts and wallet addresses; recovery is unlikely, but they are what the investigation uses.
- Expect a follow-up call offering to "help recover" the money for a fee.
Frequently asked questions
The questions this article gets asked most, answered directly.
How much audio is enough to clone a voice?
A few seconds of clear speech is enough for current tools, which is why a voice captured in a voice message or a public post counts as available. The amount has fallen constantly, so treat any recorded greeting as public.
Will asking about family memories always work?
Only if the answer is not public. Names of schools, birthdays and pet names are often visible on social profiles; a code word agreed out loud is the reliable version of the same idea.
Nothing happened to my relative, but they know our names. Should I report it?
Yes. Report the number, keep the call data and warn your family: attempts of this kind are run in sequence on the same contact data, and today's failed call is tomorrow's call to someone who has less time to think.
Written by The BaitScan editorial team
Results are automated risk estimates based on public indicators and heuristics.