That Sounds Like Your Family. But Is It? How to Handle AI Voice Scams

Your phone rings. Someone who sounds familiar says they are in trouble and need money immediately. They ask you not to tell anyone.

The voice gets your attention. The pressure is what should make you pause.

AI can make impersonation more convincing, but you do not need to identify the technology before protecting yourself. A reliable response works whether the caller uses a cloned voice, an ordinary impersonation or a persuasive story.

A familiar voice is not proof

The US Federal Trade Commission has warned that scammers can use AI to imitate a loved one's voice. That warning concerns a technique, not evidence that every suspicious family call involves AI. [1]

In Canada, the Anti-Fraud Centre describes emergency scams involving someone pretending to be a relative, police officer or other official. Urgent requests and demands for secrecy are warning signs. [2]

Do not make the decision depend on hearing a robotic sound, a strange pause or an incorrect accent. A convincing voice should still face the same independent check.

Use a callback you control

The Anti-Fraud Centre recommends ending the call and contacting the person using a number you already have. If someone claims to be police, independently find the police service's contact details rather than using a number the caller supplies. [2]

A practical response is: I need to check this independently. I will call back through the number I already have.

Then actually leave the conversation. Do not let the caller keep directing your next steps. If you cannot reach the relative, try another trusted family contact. A missed call is not confirmation of an emergency.

Make a family plan before the call

Here is Leaf's suggested plan, designed to be easy to remember:

• Keep important family numbers somewhere accessible, including for relatives who rarely use smartphones.
• Agree that checking a story is an act of care, even when the caller sounds upset.
• Choose a backup person to contact if the supposed caller cannot be reached.
• Consider a private family phrase as an extra check, but never treat it as a substitute for an independent callback. A phrase can be overheard or exposed.
• Practise the process once, without a surprise test or an alarming fake emergency.

The useful habit is verification. A secret phrase alone is not a security system.

Before you send money

Stop and ask: Have I reached the person through a channel I chose? Has someone independent confirmed the situation? Am I being pressured to keep this secret or act before checking?

Get Cyber Safe notes that AI can help criminals produce more convincing messages and recommends verifying through a separate trusted route. Its guidance also encourages protective account habits such as multi-factor authentication and software updates. These help secure accounts; they do not establish that a caller is genuine. [3]

If you already paid or shared information

Contact your bank or payment provider promptly through its official channel, explain what happened and ask what can be stopped or secured. Recovery is not guaranteed. Save relevant messages and transaction details, and follow the Anti-Fraud Centre's reporting guidance. If there is an immediate threat to someone's safety, contact emergency services. [2]

Avoid blame. The purpose of these calls is to make concern outrun judgment. The most useful family rule is simple: we check first, and nobody gets criticized for checking.