AI Voice Cloning and Deepfake Scams: What to Do When Friends, Customer Service, or Supervisors Sound Too Real?

Sounding Like Someone Isn't Enough

AI voice cloning and deepfake videos have made it insufficient to just 'sound like someone you know' to verify identity. The key is not how obvious the technical traces are, but rather what the other party is asking you to do.

Check If the Request Involves High-Risk Actions

Requests for money, wire transfers, purchasing gift cards, providing SMS verification codes, handing over account passwords, installing remote control software, moving conversations to unfamiliar platforms, or asking you not to tell others are all high-risk signals. Even if the voice and image look like the real person, it’s time to pause.

Scammers often use pressure through time, making you feel that if you don’t act now, you’ll miss out on help, job opportunities, or payment deadlines. The more urgent the request, the more you should revert to normal verification processes.

Verify Through Different Channels

Don’t ask in the original conversation, 'Are you really you?' Instead, use a phone number you already know, your company directory, official apps, corporate emails, or mutual friends for confirmation. If the other party claims to be customer service, return to the official website or app; if they claim to be a supervisor, use existing company procedures for verification.

Verification Questions Shouldn't Rely on Public Information Alone

Birthday, company, school, or family nicknames may have appeared in public social media or leaked data. More effective verification involves recent shared experiences, unpublished details, or asking them to reply through established channels. Any obstruction to your verification process is itself a risk signal.

Save Evidence Before Halting Transactions If Data Was Already Given

If you have already provided verification codes, passwords, or payment data, first save the conversation, audio, video time, account IDs, phone numbers, payment records, and suspicious links. Then, change related account passwords from official portals, check login devices, and contact banks, payment platforms, or exchanges. For cryptocurrency transactions, keep transaction hashes and wallet addresses.

When faced with money, account, verification code, or remote control requests, always verify through different channels. This is more reliable than trying to identify every form of synthetic trace.