The Family Safe Word: How to Beat AI Voice-Clone Emergency Scams
The script is older than the technology. A panicked call, a family member in trouble, a lawyer or police officer who takes over the line, a demand for money right now, and a plea to keep it quiet. What has changed is the voice on the other end. It can now sound exactly like your grandson.
The U.S. Federal Trade Commission warned about this in March 2023, cautioning that a scammer “could use AI to clone the voice of your loved one” from a short clip posted online. Three and a half years later the barrier is lower still. When ElevenLabs released its v4 speech model on Sept. 28, TechCrunch reported that users would be able to clone a voice with just 10 seconds of audio. ElevenLabs sells to businesses and creators, and nothing suggests its new model was built for fraud. The number matters because of what it tells you: ten seconds is one birthday video, one voicemail greeting, one clip from a wedding toast.
This guide is written to be forwarded. If you have a parent or grandparent who still answers calls from unknown numbers, send it to them, then call them and do the steps together.
How ten seconds of audio becomes a phone call
A voice clone needs a sample, and most of us have scattered samples across Instagram stories, TikTok, YouTube, podcasts and voicemail. The FTC told the Federal Communications Commission in a July 2024 filing on AI robocalls that voice cloning “can help ‘grandparent scammers’ clone the voice of a loved one to call a family member and ask for immediate financial assistance.”
The tools themselves don’t do much gatekeeping. In March 2025, Consumer Reports tested six voice-cloning products and found that four of them (ElevenLabs, Speechify, PlayHT and Lovo) lacked meaningful safeguards against cloning someone without consent. Researchers only had to tick a box confirming they had the legal right to use the voice. Policies change, and some vendors may have tightened up since. Your family’s defence should not depend on it.
The scammer also brings research. The FTC’s guidance on fake-emergency scams notes that callers pull names and details from social media, so the fake grandchild may know the dog’s name, the university and the trip to Lisbon. A clone plus a few true details is what makes the call feel real.
The scale is not small. The FTC told Congress in March 2026 that consumers reported US$15.9 billion (about CA$22.1 billion) in fraud losses in 2025, including more than US$3.5 billion (about CA$4.9 billion) lost to impostor scams, the category that covers fake relatives. Those are only the losses people reported.
The call has a shape. Learn it
A cloned voice is convincing for a few seconds. The rest of the call still follows a pattern, and the pattern is the giveaway. Watch for these, drawn from the FTC and the Canadian Anti-Fraud Centre:
- A crisis that needs money today. A car crash, an arrest, a hospital bill, a stranded trip.
- A hand-off. The “grandchild” speaks briefly, often crying or with a bad connection, then a “lawyer,” “officer” or “bail bondsman” takes over. Less time on the cloned voice means fewer chances for it to slip.
- Secrecy. The FTC says scammers insist you keep the call secret. The Canadian centre says some claim there is a “gag order” preventing you from talking about it.
- Odd payment methods. Gift cards, wire transfers, cryptocurrency or cash. The FTC lists all four. In Canada, the CAFC warns that fraudsters “will arrange to pick up the funds in person or will ask you to send cash in the mail.”
- A believable caller ID. The CAFC’s advice is blunt: “Don’t trust caller ID names and numbers.”
One fact worth repeating to Canadian parents: the CAFC states that the Canadian criminal justice system “does not allow for someone to be bailed out of jail with cash or cryptocurrency.” A courier at the door collecting bail money is a scam every time.
Set up a family safe word that people will actually use

The FBI’s Internet Crime Complaint Center made this its first recommendation in a December 2024 alert on generative AI fraud: “Create a secret word or phrase with your family to verify their identity.” Readers of the FTC’s original 2023 alert suggested the same thing in its comments. It works because a clone can copy how someone sounds but cannot know what they’ve never said in public.
The idea is simple. Most families still don’t have one, or chose one nobody remembers. Here’s how to make it stick.
- Pick something that isn’t online. Not a pet’s name, a street, a team or a birthday. Those are exactly what a scammer finds on social media. A random pairing works better: “blue canoe,” “Aunt Rita’s waffles,” a word only your family would ever say.
- Agree on it in person or by voice, not in a group chat. If an account gets compromised, a word typed into a thread is exposed with it.
- Make the rule explicit: the caller says it, not you. If you ask “Is this about blue canoe?” you’ve just given it away. Ask “What’s our word?” and wait.
- Decide what happens when the word is “forgotten.” A real relative in a real crisis can blank under stress. A scammer will always claim to. Agree in advance that a missing word means you hang up and call back. No exceptions, no hurt feelings.
- Cover everyone who might get the call. Grandparents, the aunt who babysits, the teenager who answers the landline. A safe word only one person knows protects one person.
- Rehearse it once. A thirty-second practice call at the next family dinner makes the habit real. Revisit it once a year, or after anyone shares it more widely than intended.
If a whole family can’t agree on one word, the FTC’s fallback works too: ask a question only the real person would know. Pick something private, like what you ate the last time you saw each other, not something listed on their profile.
Hang up and call back, every time
The safe word is a filter. The real protection is a rule that doesn’t need anyone to think clearly under pressure: end the call, then reach the person on a number you already have.
The FTC has given this advice since its first voice-cloning warning, and repeated it when it announced the winners of its Voice Cloning Challenge in April 2024: call the person “using a phone number you know is theirs, and verify the story.” The FBI and the Canadian Anti-Fraud Centre say the same thing. Don’t call back the number that called you, and don’t use a number the caller provides.
If you can’t reach them, call someone who can: a parent, a spouse, a roommate. The scammer told you to keep it secret precisely because a single call to another family member usually ends the scam.
The FBI adds one more tip: listen closely to tone and word choice. Treat it as a bonus, not a test. Today’s clones are good, and a frightened grandparent on a noisy line is not in a position to judge audio quality.
If money has already gone
Move fast. Scammers ask for wire transfers, crypto, payment apps and gift cards because that money is hard to claw back, and the FTC’s advice is that “no matter how you paid a scammer, the sooner you act, the better.” Call your bank, card issuer, payment app or the company behind the gift card right away. Then report it:
- In the U.S.: ReportFraud.ftc.gov, plus the FBI’s IC3 for online fraud, and your state attorney general.
- In Canada: your local police and the Canadian Anti-Fraud Centre, online or at 1-888-495-8501.
Scammers who succeed once often call back, sometimes posing as a lawyer or investigator offering to recover the money for a fee. The same rule applies. Hang up, and call your own family.
Ten seconds of audio is what it now takes to fake a voice. Two words that never appeared on anyone’s feed are enough to beat it.
Sources
- FTC Consumer Alert: Scammers use AI to enhance their family emergency schemes (Mar. 20, 2023)
- FTC: Comment to the FCC on AI robocalls and voice cloning (July 29, 2024)
- TechCrunch: ElevenLabs' new v4 speech model supports more expression control and 90 languages
- FTC Consumer Advice: Scammers Use Fake Emergencies To Steal Your Money
- FBI IC3 PSA: Criminals Use Generative AI to Facilitate Financial Fraud (Dec. 3, 2024)
- Consumer Reports: Assessment of AI voice cloning products (Mar. 10, 2025)
- FTC: FTC Testifies before the Joint Economic Committee on fraud (Mar. 25, 2026)
- Canadian Anti-Fraud Centre: Emergency scams
- FTC Consumer Alert: Fighting back against harmful voice cloning (Apr. 8, 2024)
Priya Natarajan covers science and society for prompt/power: climate and energy tech, data centres, and the physical cost of the digital world. Every query has a water bill, and she would like to see the receipt.
Latest from prompt/power
- Thomson Reuters Won the First AI Training Appeal. Footnote 7 Is the CatchOct 7
- Reflection AI’s Beam, Explained: The 501B Open-Weight Model Aimed at ChinaOct 7
- Your SSN or SIN Leaked in a Breach? Do These 8 ThingsOct 7
- Apple’s Oct. 13 Event Rumour, Plus iPhone Duo Pre-Order Dates for CanadaOct 7
- Why Grindr Is Paying US$250M for Calgary PrEP Clinic FreddieOct 7
Leave a Reply