The phone rings and your heart stops. It is your daughter, sobbing so hard she can barely speak. “Mom, I messed up,” she cries. “Mom, these bad men have me. Help me, help me.” A stranger’s voice takes over the call, cold and threatening: he has your child, and if you call the police or tell anyone, you will never see her again. Money — fast, in cash, with no questions — is the only way to get her back. What would you do?
Now imagine that the voice of your child was never your child at all. That is what happened to Jennifer DeStefano, an Arizona mother who received exactly this call in January 2023 and later told her story to a U.S. Senate committee. Her daughter Brie, then 15, was safe on a ski trip the entire time. The panicked voice DeStefano heard was almost certainly generated by artificial intelligence — a cloned voice built from a short audio clip and weaponized against a parent’s worst fear.
Voice cloning is one of the fastest-growing fraud tools in the scammer’s kit. The Federal Trade Commission warned consumers that a scammer now needs only a short audio clip of a family member’s voice — the kind anyone can pull from a video or post shared online — to create a convincing fake. When that fake calls you, it sounds like your loved one. In February 2024, the Federal Communications Commission went further, ruling that AI-generated voices in robocalls are illegal, precisely because criminals were using cloned voices to extort vulnerable family members. And the FBI now tracks these calls as “distress scams”: victims reported more than $5 million in losses to this fraud type in 2025 alone, with AI voice cloning playing a growing role.
This article explains exactly how AI voice cloning scams work, the warning signs that give them away, and the simple defenses — a family code word and a call back to a trusted number — that stop them cold.
How the AI Voice Cloning Scam Works, Step by Step
Step 1: The scammer harvests a voice sample. Everything starts with a few seconds of audio. Modern voice-cloning tools need only a short recording — a birthday video, an Instagram story, a TikTok clip, a voicemail greeting — to build a usable copy of someone’s voice. If your family’s videos and posts are public, a stranger can collect samples without ever contacting you. One widely cited cybersecurity finding noted that as little as three seconds of audio can produce a strong match.
Step 2: The scammer builds the clone. The audio sample is fed into a voice-cloning program, and the scammer types or speaks the script they want the “loved one” to say. The output is an AI-generated voice that captures the real person’s tone, cadence, and speech patterns. The scammer does not need the victim’s phone or any special access — just the public audio and a cloning tool.
Step 3: The distress call. You get a call from an unknown number — often with a local area code, sometimes spoofed to look familiar. The cloned voice is in crisis: your grandchild has been in a car accident, your son has been arrested, your daughter has been kidnapped. The voice is crying, panicked, or injured — which conveniently explains why it does not sound exactly right. Crying and a bad connection are the perfect cover for an imperfect clone.
Step 4: The handoff. The “loved one” cannot stay on the line, so the phone is passed to someone else: a kidnapper demanding ransom, a police officer explaining bail, a lawyer who can fix everything, or a hospital administrator who needs payment before treatment. This second voice does the pressuring. In DeStefano’s case, the man demanded $1 million, then lowered it to $50,000 in cash. The handoff serves a purpose: the accomplice keeps the pressure on while the fake voice stays safely short.
Step 5: Secrecy and isolation. You are told not to tell anyone — not your spouse, not your other children, not the police. “If you call the cops, she dies.” “The lawyer says this has to stay confidential.” This is deliberate. The scam only survives until a second person with a clear head gets involved, so the scammer’s first job is to cut you off from everyone who could break the spell.
Step 6: The payment demand. The money must move in a way that cannot be undone: a wire transfer, cryptocurrency, gift card numbers read aloud over the phone, or cash handed to a “courier” at your door. The FTC has spelled this out plainly — if the caller says to wire money, send cryptocurrency, or buy gift cards and share the card numbers and PINs, those are signs of a scam. No real emergency has ever required payment in gift cards.
Step 7: Disappearance. Once the money is sent, the callers vanish. The phone numbers are burner or spoofed, the voice samples are already scraped, and there is almost nothing for investigators to trace. That is why the FBI’s advice focuses on prevention: once the funds move through a wire or crypto transfer, getting them back is extraordinarily difficult.
Real Cases: This Is Already Happening
The Arizona mother who testified to Congress. Jennifer DeStefano picked up an unknown number on January 20, 2023, and heard what sounded exactly like her 15-year-old daughter Brie crying for help. A man then demanded a ransom — first $1 million, then $50,000 — and threatened horrific violence if she called law enforcement. DeStefano was at her younger daughter’s dance practice; other parents heard her screams, called 911, and helped her reach her husband, who confirmed Brie was safe at home. She had sent no money. Testifying before the Senate Judiciary Subcommittee on Human Rights and the Law in June 2023, she said: “I will never be able to shake that voice and the desperate cries for help out of my mind.” Police told her that because no money changed hands, no crime had technically been committed — a legal gap senators at the hearing called alarming.
The five-hour kidnapping nightmare. In another widely reported case, a mother endured more than five hours believing her daughter had been kidnapped, held on the line by a scammer using a cloned voice while the ransom pressure built. It ended safely, but only after the family found a way to verify the truth. The pattern was identical: a familiar voice, an invented emergency, secrecy, and a demand for untraceable money.
The corporate deepfake. Voice cloning is not limited to families. In one of the best-documented cases, a finance employee in Hong Kong joined a video call that appeared to show the company’s CFO and colleagues — all deepfakes — and was talked into transferring roughly $25 million across 15 transactions before anyone realized the people on screen were not real. If criminals can fake a boardroom, they can fake a grandchild.
The official numbers are climbing. The FBI’s 2025 Internet Crime Report data shows AI-related complaints surging, with seniors accounting for a large share of losses. The agency logged thousands of complaints from older victims referencing AI, totaling hundreds of millions of dollars — and voice-cloning distress calls alone produced more than $5 million in confirmed losses. Because embarrassment keeps many victims from reporting, the true figure is almost certainly higher.
Red Flags: AI Voice Cloning Warning Signs
On a panicked call, you will not be able to tell a cloned voice from a real one — and you should not try. Look at the situation instead:
- Extreme, immediate urgency. The caller demands action in minutes, not hours. A real emergency survives a five-minute verification; a scam does not.
- A demand for secrecy. “Don’t tell anyone.” “Don’t call the police.” Legitimate officials never require you to keep an emergency secret from your own family.
- Payment in hard-to-reverse forms. Wire transfers, cryptocurrency, gift card numbers read aloud, or cash to a stranger at your door. This is the single clearest tell of a scam call.
- An unknown number or a bad connection. The caller explains why they are not using their usual phone — it was stolen, broken, or confiscated. The bad line also conveniently hides flaws in the cloned voice.
- The voice avoids real conversation. The “loved one” speaks only briefly, cries a lot, and quickly hands the phone to someone else. The accomplice does the talking because the clone can only say so much.
- Personal details don’t quite land. The FBI advises listening to tone and word choice that may not match how your relative really speaks. A clone built from a few seconds of audio has a limited script.
- Pressure to stay on the line. You are begged not to hang up. The scammer knows that the moment you hang up, you can call the real number — and the scam collapses.
- They tell you the payment details. A real hospital, police department, or bail bondsman does not take gift cards or crypto over the phone.
How to Verify Before You Pay a Cent
The FTC’s advice is one sentence long, and it defeats the entire category: do not trust the voice — call the person back on a number you already have. A cloned voice cannot answer a phone you dial yourself.
- Hang up — even if the caller begs you not to. A scammer’s power ends the moment the call ends. Tell the caller you will call right back, then hang up.
- Call your loved one on the number saved in your phone. Never use the number that just called you, and never use a number the caller gives you. Dial the number you already trust.
- If they don’t answer, call someone else who knows them. A parent, sibling, spouse, or friend can confirm where the person actually is. In the DeStefano case, one call to her husband ended the entire ordeal.
- Ask for your family code word. This is the defense the FBI recommends in its public guidance: agree on a secret word or phrase with your family — spoken out loud, in person, never in a text — that anyone asking for emergency money must provide. A voice clone cannot know a private word your family agreed on in advance.
- Ask a question only the real person could answer. A pet’s nickname, a childhood memory, the name of a first-grade teacher. A clone has only the script the scammer typed.
- Verify alleged officials independently. If the caller claims to be police, a hospital, or a lawyer, hang up and look up that organization’s real number yourself — then call it directly. The FBI recommends researching the contact before calling back.
- Do not share codes or personal information on the call. Never read out bank details, one-time passcodes, or ID numbers to an inbound caller, no matter how urgent they sound.
- Build in a pause. Tell the caller you need ten minutes. A real emergency will still be there after verification; a scammer will fight you for every one of those ten minutes.
What to Do If You’re Being Targeted
- Slow everything down. Say, “I need to call you right back,” and hang up. Speed is the scammer’s weapon; time is yours.
- Send no money and share no payment details until you have spoken to your loved one directly on a trusted number or confirmed the story through another family member.
- Do not meet anyone in person or hand cash to a courier. Some versions of this scam send a driver to collect money at your home. Never open your door to a stranger over a phone call.
- Write down everything while it is fresh: the phone number that called, the exact words used, the payment instructions, and the time of the call. This becomes evidence.
- Call another family member immediately and tell them what happened — breaking the secrecy demand is often what ends the scam.
- If money already went out, call your bank or the transfer company right away and ask whether the transaction can be stopped or recalled. Then contact local police. Speed matters more than embarrassment.
- Tighten your family’s public audio. After an attempt, set social media accounts to private, remove voicemail greetings that identify family members by name, and delete old public videos that give scammers free voice samples.
- Talk about the scam at home — before it happens again. Share this article with parents and grandparents. Agree on the family code word today, out loud and in person.
How to Report an AI Voice Cloning Scam
- FBI Internet Crime Complaint Center: File at ic3.gov. The FBI uses these reports to track AI-enabled fraud trends and identify criminal operations.
- Federal Trade Commission: Report at ReportFraud.ftc.gov. The FTC shares reports with more than 2,000 law enforcement agencies.
- Your local police department, especially if a ransom was demanded or someone attempted to collect cash in person — bring the phone number and your written notes.
- Your phone carrier, to report the spoofed or burner number used in the call.
- The platform where your family’s audio was scraped (TikTok, Instagram, Facebook, YouTube), if you suspect a public video was the source — report the concern and tighten privacy settings.
Sources
- AARP, The Perfect Scam podcast, “AI is Being Used to Supercharge Common Impostor Scams” — https://www.aarp.org/podcasts/the-perfect-scam/info-2023/criminals-using-ai-voice-cloning/
- U.S. Congress, S.Hrg. 118-179, “Modern Scams: How Scammers Are Using Artificial Intelligence and How We Can Fight Back” (Senate hearing including the Jennifer DeStefano case) — https://www.congress.gov/event/118th-congress/senate-event/LC72469/text
- Gizmodo, “Mom Recounts ‘Terrorizing’ Deepfake Kidnapping Scam in Gripping Testimony” — https://gizmodo.com/ai-deepfake-kidnapping-scam-congress-hearing-1850536490
- NPR Illinois, “The FCC says AI voices in robocalls are illegal” (February 8, 2024) — https://www.nprillinois.org/2024-02-08/the-fcc-says-ai-voices-in-robocalls-are-illegal
- SavingAdvice, “The Grandparent Jail Scam: The One Question That Stops It — and Why Banks Won’t Refund Your Wire” (September 30, 2026) — https://www.savingadvice.com/articles/2026/09/30/10748486_the-grandparent-jail-scam-the-one-question-that-stops-it-and-why-banks-wont-refund-your-wire.html
- FBI Internet Crime Complaint Center — https://www.ic3.gov
Last reviewed: October 2026
This article is for education only and is not financial or legal advice.