AI voice-clone scams: how they work, and the family password that beats them

A voice-clone scam is a phone call or voice message that sounds like someone you know, made by a criminal using AI. The fix is low-tech: agree a family password, and hang up and call back on a number you already have. A fake voice can copy how someone sounds. It can’t know a word you agreed in the kitchen.

How the scam works

1. They get a sample. A few seconds of someone talking is enough. Starling Bank, which runs a campaign on this, says criminals can clone a voice from as little as three seconds of audio, such as a video posted on social media.
2. They make the copy. Cheap AI software turns that sample into a voice that says whatever the scammer types.
3. They ring or leave a voice note. The story is nearly always an emergency. “Mum, it’s me. I’ve had an accident and I need money now.” The line is bad, they’re upset, and they can’t talk for long.
4. They ask for money, fast. Usually a bank transfer, often to an account you don’t recognise, and often with “please don’t tell Dad”.

There is a second version. In February 2026, National Trading Standards warned about criminals who ring older people with a so-called “lifestyle survey”, collect personal details, and then use a clone of the victim’s own voice to set up direct debits without them knowing.

How common is it?

Nobody has an exact figure, and you should be wary of anyone who claims to. In a 2024 survey of about 3,000 UK adults for Starling Bank, 28% thought they had been targeted by a voice-clone scam in the past year, and 46% didn’t know this kind of scam existed. That is what people believed had happened, not a count of confirmed cases.

The sensible view: it’s real, it’s getting easier to do, and the defence costs nothing.

The warning signs

A cloned voice can sound right. So don’t judge the voice. Judge the request.

• 🚩 An emergency you can’t check: an accident, an arrest, a lost phone
• 🚩 Money, now, by bank transfer, gift cards or cryptocurrency
• 🚩 Secrecy: “don’t tell anyone”, “don’t ring me back on my old number”
• 🚩 A number you don’t recognise, or a reason they can’t use their own phone
• 🚩 A rushed call that ends before you can ask anything

Set up a family password

This takes two minutes and works on every version of the “it’s me, I’m in trouble” call.

1. Pick a word or short phrase. Something easy to remember and impossible to guess. Not a pet’s name, a birthday, a street or anything on social media. Something daft works well: a holiday in-joke, or two random words.
2. Agree it in person, or on a call you made yourself. Don’t put it in a text, an email or a group chat. If you have to send it in a message, delete the message once everyone has seen it.
3. Agree the rule. Anyone who rings asking for money or urgent help gets asked for the password. No password, no money. Nobody will be offended, because everyone agreed to it.
4. Include the whole family. Grandparents, teenagers, anyone who might get the call.
5. Never say it to someone who asks for it first. You ask them. If a caller says “what’s our password again?”, that’s a scammer fishing.

If your parents are the ones most likely to get the call, do this with them the next time you visit. Our guide to setting up AI for an older parent has a short safety talk you can borrow.

If you get a call like this

1. Stop. A real emergency can survive two minutes of checking.
2. Ask for the password. If you haven’t got one yet, ask something only they’d know, and that isn’t online.
3. Hang up and ring them back on the number saved in your phone. If they don’t answer, ring someone who’s likely to be with them.
4. Don’t send money or share codes while you’re still on the call.

If the call claims to be from your bank, hang up and dial 159. It’s a short number run by Stop Scams UK that connects you safely to most UK banks.

It’s also worth being wary of unexpected “survey” calls that ask about your health, money or household. You’re allowed to put the phone down. Genuine callers won’t mind.

If you think you’ve been caught out

It happens to careful, clever people. Act quickly and don’t be embarrassed.

• Ring your bank straight away, on the number on your card or by dialling 159.
• Report it. In England, Wales and Northern Ireland, use Report Fraud at reportfraud.police.uk or call 0300 123 2040. (Report Fraud replaced Action Fraud in December 2025.) In Scotland, call Police Scotland on 101.
• Report the number. Text the word “Call” followed by the scammer’s number to 7726. It’s free.
• Tell your family, so they’re ready if the scammer tries them next.

For the wider picture, see Is this a scam?, which covers fake messages, fake shops and fake celebrity videos too.

Next step

Agree your family password today. Then try our Can you spot the scam? quiz, and send it to the person in your family you worry about most.