Skip to main content
Field Guide · Digital Safety5 min read

AI Voice Scams: How Families Can Verify an Emergency Without Panicking

A phone rings late in the evening. The voice is a grandchild, a son, a daughter — frightened, apologising, asking for money and asking you not to tell anyone. The voice sounds right because it may well be a copy of the real one, generated from a few seconds of audio taken from a public video. Recognising the voice is no longer evidence of who is speaking. What still works is verification, agreed in advance and used without embarrassment.

Why the voice is no longer the proof

Voice synthesis tools that once required studio recordings now need a short sample, and public sources supply it: a social post, a sports highlight, a sermon, a voicemail greeting. The result is imperfect but persuasive under stress, and stress is precisely the condition the caller manufactures.

The call is often paired with a second voice — a lawyer, an officer, a bail agent — who supplies authority and instructions. The structure is the point. It is the same shape described in ten warning signs a message or call is a scam: urgency, secrecy, and an irreversible payment.

Agree on a verification routine before you need it

The routine does not have to be clever. It has to be shared, memorable, and used every time.

  • A family phrase that is never posted, texted, or written down where it can be found
  • A callback rule: hang up and call the person on the number already in your phone
  • A second-person rule: reach one other family member before any money moves
  • A no-secrecy rule: any request to keep an emergency quiet is treated as a red flag by default

What to do while the call is happening

You are allowed to be unhelpful for sixty seconds. Say you will call straight back, and do it — a real emergency survives a callback; an impersonation usually does not.

Ask for the family phrase. Ask a question whose answer is not online: what we ate at the last holiday, the name of the street the family lived on, which pet came first. Avoid questions answerable from social media, and do not offer the name of the relative you think is calling. Scammers wait for you to supply it.

Verification is not distrust. It is the routine that lets you help quickly when the emergency is real.

Payment requests are the decision point

No legitimate emergency requires gift cards, cryptocurrency, a wire to an unfamiliar account, or cash handed to a courier at the door. Courier collection has become common in these schemes, and it is a certainty of fraud rather than a signal of it.

Bail, fines, and legal fees are never collected by phone in gift cards. If a caller claims otherwise, that alone settles the question.

Reduce what is available to copy

Nothing here is a guarantee, and a smaller public footprint means less material to work from.

  • Set social accounts to a smaller audience, particularly video
  • Use a generic voicemail greeting rather than your own recorded voice where possible
  • Be cautious with videos that show family names, schools, and daily routines together
  • Talk with grandchildren about what their public posts make possible

If the call already worked

Move quickly and in order: bank first, then accounts, then reports. The sequence is set out in what to do if you think you gave information or money to a scammer. Tell the rest of the family the same day, because the same script is often tried on more than one relative.

SmallSpark practises this verification routine with residents and families in workshops through SparkAssist, technology help for older adults.

Common Questions

Can I tell a synthetic voice by listening?

Not reliably, and detection advice ages quickly. Treat the voice as unverified regardless of how convincing it sounds, and rely on a callback and a shared phrase instead.

What if my relative says not to hang up?

Hang up anyway. Pressure to stay on the line is a feature of the scam, not of a real emergency. You can call the person straight back on a number you already have.

What should our family phrase be?

Something ordinary and memorable that has never appeared online — not a birthday, a pet name used publicly, or anything posted on social media. Say it aloud to family members rather than sending it by text.

Do these calls only target older adults?

No. Parents of school-age children, employers, and finance staff are targeted with the same technique. In organizations it usually appears as an executive requesting an urgent transfer.

Where do we report an attempt?

Report to the FBI Internet Crime Complaint Center at ic3.gov and to the FTC at ReportFraud.ftc.gov, whether or not money was lost.

Thoughtful Insights

Get the next guide when it is published.

A few thoughtful updates each year — practical guidance, new resources, and important security insights. No spam, no filler.

A few thoughtful updates each year. No spam. Unsubscribe anytime.

Related Resources

Have Questions or Want to Discuss Your Organization's Technology?

We'd love to learn more about your goals and how we can help.

We also run four community programs across Colorado, at no cost to take part — technology help for older adults, technology learning for ages 13–24, records help for veterans, and drop-in help at shelters and day centers. See the programs.