Your Daughter's Voice Isn't Always Your Daughter's Voice
A mother in California picked up her phone last spring and heard her daughter, panicked, telling her she'd been kidnapped and needed money sent immediately.¹
Right pitch. Right tone. Even the small verbal tics her daughter uses when she's upset. The mother wired $5,400 before she found out her daughter had been safe the entire time. What came through the phone wasn't her daughter. It was an AI recreation of her voice, built from a few seconds of audio pulled off the internet somewhere.
A few years ago this would have sounded like science fiction. It doesn't anymore.
October is Cybersecurity Awareness Month, which has run every year since 2004.² Most of what circulates during it is the usual — update your software, use a better password, watch for phishing emails. Fine advice. Not the urgent conversation this year. The urgent conversation is that a stranger with a laptop can now borrow your voice — or your kid's — well enough to fool the people who love you most.
How Fast Is This Actually Growing?
Fast enough that the projections keep getting revised upward.
Deloitte's Center for Financial Services puts generative-AI fraud at up to $40 billion a year by 2027, up from $12.3 billion in 2023.³ That's a 32 percent annual growth rate. Voice cloning is one of the fastest-moving pieces of that number, but it's not the only trick anymore.
The FBI's newest variant is what they call virtual kidnapping. Scammers text or call claiming to be holding a family member, and they back it up with an altered photo or video — often lifted from images the family already posted publicly — timed so there's no room to think.⁴ The FBI put out a fresh warning on this in December 2025: scammers are now sending the fake "proof of life" through disappearing messages, so victims have less time to notice the small tell — a missing tattoo, an off proportion — that would otherwise give the fake away.⁴
It's moved past audio entirely, too. A finance employee at a global engineering firm joined what looked like a routine video call with his CFO and several colleagues, was told to wire funds for a confidential deal, and did it. $25 million, across 15 transfers.³ Every single person on that call was a deepfake.
None of this means treat every call as fake. It means the old test — does this sound and look like someone I know — doesn't hold up on its own anymore. I'm raising it now, during Cybersecurity Awareness Month, because a family that's had this conversation ahead of time handles the call better than a family hearing about it for the first time, mid-panic, with someone screaming on the other end of the line.
What Does an AI Voice Scam Actually Sound Like?
Exactly like the person it's imitating. That's the whole trick.
McAfee tested this on roughly 7,000 people. Three seconds of audio — about the length of a voicemail greeting, or a clip pulled from a social post — produced a clone with an 85 percent match to the original voice.⁵ One in four people surveyed had personally experienced an AI voice scam or knew someone who had. Nearly seven in ten weren't confident they could tell a cloned voice from a real one.⁵
Three seconds. That's what makes this land close to home. Some of us have probably already handed scammers everything they'd need without realizing it — a birthday toast posted online, a voicemail greeting, a wedding video. Any of it is raw material now.
How Big Is This, Really?
Big enough that federal agencies track it as its own category.
The FBI tied 22,364 complaints and roughly $893 million in losses to AI-involved schemes in 2025, with voice cloning among the fastest-growing tactics.⁶ About $352 million of that came from adults 60 and older.⁷
The broader elder-fraud number is worse. In 2025, people 60+ filed 201,266 fraud complaints with the FBI's IC3 — up 37 percent year over year — for total reported losses of $7.7 billion, up 59 percent.⁸ More than 12,400 of those victims lost over $100,000 each. Average loss across elder-fraud victims that year: $38,500.⁸
The FTC's numbers tell the same story from a different door. Imposter scams — someone posing as a family member, a bank, a government agency — are the single most reported fraud type, at $3.5 billion in losses in 2025.⁹ Reports of seniors losing $10,000+ to these scams have more than quadrupled since 2020. Losses of $100,000+ among seniors went from $55 million in 2020 to $445 million in 2024.¹⁰
Why Are Families Such an Easy Target?
Because the whole scheme is engineered around urgency, and urgency is exactly what shuts down good judgment.
The more frightened and rushed a request sounds, the less our instinct is to check it, and the more our instinct is to act. A calm request invites questions. A panicked voice claiming an emergency skips past that instinct entirely.
Add in how much of our lives we now hand over voluntarily. The audio these scammers use almost never comes from anywhere shady. It comes from a proud parent's video of a graduation speech. A voicemail saved in the cloud. A clip from a family group chat.
A Family Password
Some cyber folks recommend the same fix, and I think it's the right one: agree on a private code word, or a specific verification question, with the people you'd most likely get one of these calls from — and use it the second a money request sounds even slightly off.¹¹ ¹²
Simple idea. A cloned voice can sound exactly like your kid, your spouse, your parent. It can't know something the two of you agreed on privately and never posted anywhere. "What breed is the family dog?" "Where do you and your spouse vacation over the holidays?" — that's the level of detail we're talking about.¹²
The word matters less than the fact that it was never said out loud on a call, never texted, never shared anywhere a scammer could find it.
A few rules make it actually work. Pick it together, in person — not by phone, not by text. Don't save it anywhere digital. Change it the moment you suspect it's compromised. And treat they didn't know it as a hard stop, full stop, even if the voice on the other end is crying and begging you to hurry. Especially if the voice on the other end is crying and begging you to hurry.
What To Actually Do If You Get One of These Calls
Hang up. Call the person back yourself, on a number you already had saved — never the callback number the caller gives you.¹¹ Half these scams fall apart in the time it takes to make that second call, because the person supposedly in danger usually just answers their own phone.
Can't reach them right away? Call another family member who might know where they actually are before you send a dime. The FBI's guidance is blunt: don't wire funds or send crypto off a phone call alone, no matter how convincing it sounds, and treat any request to pay in gift cards as an automatic red flag. If you've already sent money before figuring out what happened, report it — to the FTC and to IC3 — as fast as you can. Reporting still matters even after the money's gone; it's how these agencies track new variations and warn the next family faster.
This is exactly the kind of thing I'd rather talk through with a client before it happens, not after. If your family hasn't had this conversation, it's worth ten minutes at the next gathering — well before anyone actually needs it.
A few questions I'd expect:
How can a scammer clone a voice from so little audio? Three seconds is enough to build an 85 percent match, and that three seconds can come from something as public as a social video or a saved voicemail.⁵
Is this only hitting older adults? No — but they're absorbing the biggest losses. Adults 60+ accounted for roughly $352 million of the FBI's $893 million in AI-fraud losses in 2025.⁶ ⁷ Younger family members get targeted too, usually through a call claiming a sibling or friend is in trouble.
What's a virtual kidnapping scam? Criminals claim to be holding a family member and back it up with a doctored photo or video, often pulled from something the family already posted. The FBI's December 2025 warning flagged that scammers are now sending the fake "proof" through disappearing messages, specifically so a frightened family has less time to catch the fake.⁴
Does the family password need to be complicated? No. Simple enough to remember under stress, specific enough that it was never shared publicly. That's it.
No code word, and you get a call like this? Hang up. Call back on a number you already have.
Report it even if we didn't lose money? Yes. It helps investigators track the next variation before it hits someone else.
1 Moneywise.com, June 5, 2026.
2 Cybersecurity and Infrastructure Security Agency, 2026.
3 Deloitte Center for Financial Services, 2026.
4 Federal Bureau of Investigation, 2026.
5 McAfee.com, 2026.
6 Federal Bureau of Investigation, April 6, 2026.
7 Fox News, June 11, 2026.
8 Federal Bureau of Investigation, 2026.
9 Federal Trade Commission, June 15, 2026.
10 Federal Trade Commission, Imposter Data Spotlight, August 2025.
11 Federal Bureau of Investigation, May 15, 2026.
12 Federal Trade Commission, 2026.