Cybercriminals are using artificial intelligence tools to clone human voices within seconds, impersonating relatives, friends, and executives to execute fraudulent phone and messaging scams.
The technology allows attackers to take audio samples lasting only a few seconds and recreate a target's unique voice characteristics. Scammers can then generate entirely new phrases that the individual never actually spoke.
This tactic is used to refine vishing, a form of cyber fraud where criminals contact victims through voice calls or audio messages. The term combines voice and phishing, referring to social engineering attacks designed to trick individuals into surrendering money, personal data, or login credentials.
Attackers frequently collect initial voice samples from public audio clips uploaded to social media platforms. The fraud becomes significantly more convincing when criminals combine cloned audio with private details about the target's life.
For example, a fake family emergency can appear genuine if the scammer mentions real names, locations, or personal background information. Fraudsters also rely on high-pressure messaging, issuing urgent requests to ensure victims do not have time to verify who is calling.
Corporate threats and expanding phishing tactics
The financial risk extends beyond individuals into the corporate sector. Criminals can deploy cloned voices to impersonate company executives, instructing employees to authorise wire transfers, modify corporate bank account details, or hand over confidential files.
Voice cloning represents one component of a broader evolution in phishing techniques. Beyond voice manipulation, modern scams increasingly incorporate fraudulent QR codes, counterfeit booking websites, compromised messaging applications, and fake platforms designed to imitate electronic signature services.
Travelers are particularly targeted with fake notifications concerning refunds, hotel bookings, or flight compensation. Fraudulent QR codes embedded in these notices direct users to illegitimate websites created specifically to harvest passwords and banking credentials.
Verification strategies for voice security
José Montero, chief executive officer of the law firm Montero de Cisneros, was cited by the legal news portal Confilegal as advising individuals never to act under pressure. Montero recommended verifying any request that involves money or sensitive information through a secondary communication channel before taking action.
Confilegal, a Spanish publication covering legal affairs, reported that recognizing a familiar voice is no longer sufficient to confirm an identity in the era of artificial intelligence. Readers were urged to contact the person directly through a separate route before completing any transaction.
