AI Voice Cloning Scams Surge: Criminals Impersonate Family Members in Virtual Kidnapping Fraud

What is AI Voice Cloning Fraud?

AI-generated audio that mimics the voice of a real person is being exploited by scammers with increasing sophistication. Fraudsters obtain voice samples of just a few seconds from social media posts and publicly available internet content, then use this material to create convincing voice clones in a matter of minutes.

How the Scam Works

The most common scheme is the "virtual kidnapping" fraud. The typical sequence includes:

1. A scammer calls a family member
2. Plays a few seconds of cloned voice mixed with crying and background noise
3. Demands money to "release" the supposed kidnapping victim

Scammers typically monitor the social media profiles of the target victim and their family to choose the ideal timing. If the supposedly kidnapped person is traveling or abroad and doesn't answer calls, the deception becomes easier to sustain.

Prevalence Statistics

According to a March 2024 report from security firm Hiya, one in four adults in the United States reported receiving a call containing a deepfake voice in the past twelve months. Additionally, one in four people said they cannot distinguish whether a voice is real or AI-generated.

Warning Signs and Red Flags

• Calls emphasizing urgency (claiming immediate payment is needed)
• Background sounds indicating distress (crying, shouting)
• Awkward speech patterns that seem unnatural or disjointed
• Caller demonstrates knowledge of personal information but doesn't ask for verification
• Pressure to act quickly without time to think clearly

How to Protect Yourself

1. Establish a Family Security Word

ESET Latinamerica recommends the most effective defense: agreeing on a security word or phrase in advance with all family members that can be requested if anyone suspects a voice on a call might be fake.

Characteristics of a good security word:

• Easy to remember
• Uncommon and difficult to guess
• Not discoverable through social media or public sources
• Avoid obvious choices like pet names or favorite sports teams

2. Voice Call Verification Steps

If a call seems suspicious:

1. Ask the caller for the security word (if they don't know it, fraud is likely)
2. If you can't remember the word, hang up immediately
3. Call back the number stored in your contacts
4. Message your family group chat to verify the emergency
5. Ask a question only family members would know

3. Critical Safety Rules

• Never send money if anything seems suspicious
• Do not share personal information over the phone
• Do not follow instructions from unverified callers
• Take time to verify before making any financial decisions

If You've Been Scammed

ESET Latinamerica recommends these five immediate steps:

1. Cut all communication with the scammer immediately
2. Contact your bank to attempt to block or recover transferred funds
3. Change passwords and activate two-factor authentication on potentially exposed accounts
4. Preserve all available evidence (phone numbers, call recordings, transaction records)
5. Report the case to competent authorities (police or relevant regulatory agencies)

Key Takeaway

The most effective defense against this threat is not technological but human. Establishing a family security word in advance and responding cautiously to suspicious calls can prevent fraud from succeeding. Technology may create the threat, but family communication is the strongest defense.