AI-Powered Voice Cloning Scams on the Rise: Criminals Impersonating Friends to Steal Money

Spain is reporting an increase in scams using AI to impersonate acquaintances' voices and identities to demand money transfers. A simple link click can lead to account takeover and fraudulent messages sent to the victim's contacts, according to police reports.

How the Scam Works

These scams typically begin through social media or messaging apps, appearing to come from acquaintances or family members. The sender uses seemingly legitimate requests—such as voting in a ballet competition for a child or unlocking free lessons—to lower the victim's guard and encourage them to click a malicious link.

The Progression

Once the victim clicks the link, the scammer gains unauthorized access to their account. The fraudster can then operate the victim's account from an external device without the victim's knowledge. Subsequently, the victim's contacts receive money transfer requests appearing to come from the account owner.

Common message variations include:

"Urgent: I need to send money immediately. I've exceeded my bank account limit."
"I need your phone number and SMS verification code to complete the voting."

According to Spain's National Police Central Cybercrime Unit, victim losses vary significantly, ranging from hundreds to nearly one thousand euros per incident.

AI Voice Cloning

A growing concern involves AI-powered voice cloning technology. Scammers can replicate the voice of acquaintances using AI and impersonate them during phone calls, making the fraud appear more credible than text messages alone.

Cybersecurity experts warn that AI can personalize messages based on a person's preferences and historical information, significantly increasing the persuasiveness of fraudulent communications.

Warning Signs

Unexpected link requests from known contacts - Even from people you trust, be suspicious of urgent link clicks
Urgent money transfer demands - Always verify through a different communication method before sending money
Requests for SMS verification codes - Never share authentication codes, regardless of the stated reason
Voice calls claiming emergencies - Verify the caller's identity through predetermined security questions
Unusual account activity notifications - Act immediately on suspicious login alerts

Prevention Measures

Keep security software on all devices current and updated
Enable two-factor authentication on critical accounts
Pause before clicking links, even from known contacts
Educate family and friends about these threats
Monitor account activity regularly

Reporting

Report incidents to your country's cybercrime division or relevant law enforcement agency.