The AI Phone Scam That Sounds Exactly Like Your Family - And the 10-Second Trick That Beats It

Here's the fix, up front: agree on a family code word today. If a call ever comes in with a loved one's voice, crying, scared, asking for money right now, you ask one calm question, "what's our word?" A scammer can fake the voice. They cannot fake the answer. That's the whole defense, and it takes about ten seconds to set up. Now here's why you need it.

What is actually happening

Scammers can now copy a person's voice from as little as three seconds of audio, a clip pulled off Facebook, a voicemail, a video of the grandkids. The FBI put out a warning about it this spring. Americans over 60 lost roughly 352 million dollars to these scams last year. And the part that matters most: the old advice, "listen for a robotic voice," no longer works. The fakes are that good.

The uncomfortable part I've seen from the enterprise IT and cybersecurity side: the voice clone is usually the last step, not the first. Scammers often already have a name, a relationship, and a phone number before they ever open their mouth, because that kind of information sits in plain sight on people-search sites and old social posts. The voice is just the finishing touch that makes it believable.

This is not theory, it happened next door

My own neighbors got one of these calls. An AI-cloned voice threatened that something bad would happen to their spouse unless they moved money into an account. They told me afterward the voice was uncannily accurate, you genuinely could not tell it was fake. They were lucky; they kept their heads and figured it out before any money changed hands. And it is not only the voice trick. Someone in my own family got the old "you have won the lottery, just put some money on a gift card and send it first" call within the last year. This is common, it is happening now, and good people need to know about it.

Stop trying to detect the voice

Here is the mental shift that changes everything: stop trying to tell whether the voice is real. You cannot, and you do not have to. Instead, watch for the three things every one of these calls has in common.

• Urgency. "Right now, today, before it is too late." A real emergency lets you breathe. A scam never does.
• Secrecy. "Do not tell Dad, do not call the police." Anyone telling you to keep a secret is the scam.
• A strange way to pay. Gift cards, wire transfers, crypto, an app you have never used. No real hospital or police station asks for an Apple gift card.

The 10-second trick: a family code word

Pick a family code word. Something only your people know, something you would never post online, the name of your first dog, a goofy old nickname. Not your street name, not your pet's name if that pet has ever appeared in a public photo, nothing a stranger could piece together from a profile. A short nonsense phrase works better than a real name for exactly that reason. Tell your spouse, your kids, your grandkids. Then if a call like this ever comes in, you ask the one question: "What is our word?" A scammer has no idea. Your real family does. Ten seconds, and the whole thing falls apart.

And if you are rattled in the moment and forget the word, just hang up and call the person back on the number you already have. If they are really in trouble, they will pick up. If they do not, you just dodged a scam.

Two more layers worth adding

A code word covers the moment of the call. These two cover the moments around it, and they are worth the small cost if a scam call ever reaches your parents or grandparents.

A dedicated call-blocking device sitting on a landline or plugged into a cell line screens out a big share of the robocalls and spoofed numbers before they ever ring through, which means fewer chances for anyone in the house to get caught off guard in the first place.

For an elderly parent who is a frequent target, a simple phone set up with a short trusted-contacts list does the same job a different way: fewer strangers can reach them at all, and the people who can are the ones who already know the family code word. I'd rather spend twenty minutes setting that up on a weekend than find out later that a spoofed number got through.

The bottom line

I am not telling you this to scare you. I am telling you because a ten-second habit protects the people you love, and that is worth a conversation at dinner tonight. Pick your word this week. Tell your family. That is the whole defense, and it beats the most convincing fake voice in the world.

If a call like this ever does get past you, report it at the FTC's reportfraud.ftc.gov or the FBI's Internet Crime Complaint Center, and the more people who report, the better the picture gets for everyone else's family too.

More from trusted sources: the National Council on Aging's guide to AI scams for older adults, and my own writeup on whether AI is actually safe to trust, from the cybersecurity side.

I write a short, plain-English rundown like this one on tech and scams that actually matter, free, on Substack, if you want the next one in your inbox instead of stumbled onto later.