Family safe words recommended as defense against AI voice-clone virtual kidnapping scams
AI voice-cloning scams are now cheap and convincing, and a Hiya report from March says one in four Americans received a deepfake voice call in the past 12 months. A further 24% say they cannot tell a cloned voice from a real one. The article describes virtual kidnapping scams, in which attackers clone a relative's voice from a few seconds of audio scraped from social media or work content. They add personal details from the same profiles, time the call for when the victim is abroad or unreachable, and use short voice snippets, sobbing and background noise to keep relatives panicked. The recommended low-cost control is a pre-agreed, unusual safe word that cannot be found through OSINT, backed by a call-back procedure.
Detalhes técnicos
- Voice cloning needs only a few seconds of audio, often taken from public social media posts or work-related content.
- Scammers monitor victims' and relatives' social profiles to harvest personal details and choose the timing, for example when the victim is travelling abroad.
- Audio is played in short bursts mixed with crying and background noise to make the call sound plausible and chaotic.
- Secondary fraudsters may later offer to recover lost funds or secure accounts for a fee.
Remediação
- Agree a memorable but unusual safe word or phrase with family. Avoid anything discoverable via OSINT, such as pets or sports teams.
- If the safe word is forgotten, end the call and ring back on the known number, message through an existing family group, or ask a question only family would know.
- Never send money or personal information when something feels wrong.
- Limit social media visibility to known contacts and restrict public audio and video.
- If scammed: stop communicating, contact the bank to try to block or recover funds, change exposed passwords, enable 2FA and use a password manager, preserve evidence, and report to the FTC or FBI IC3.
- Ignore recovery-for-a-fee offers, which are secondary scams.
Linha do tempo
-
Family safe words recommended as defense against AI voice-clone virtual kidnapping scams
ler a análise desta fonte ocultar
AI voice-cloning scams are now cheap and convincing, and a Hiya report from March says one in four Americans received a deepfake voice call in the past 12 months. A further 24% say they cannot tell a cloned voice from a real one. The article describes virtual kidnapping scams, in which attackers clone a relative's voice from a few seconds of audio scraped from social media or work content. They add personal details from the same profiles, time the call for when the victim is abroad or unreachable, and use short voice snippets, sobbing and background noise to keep relatives panicked. The recommended low-cost control is a pre-agreed, unusual safe word that cannot be found through OSINT, backed by a call-back procedure.
Technical Details
- Voice cloning needs only a few seconds of audio, often taken from public social media posts or work-related content.
- Scammers monitor victims' and relatives' social profiles to harvest personal details and choose the timing, for example when the victim is travelling abroad.
- Audio is played in short bursts mixed with crying and background noise to make the call sound plausible and chaotic.
- Secondary fraudsters may later offer to recover lost funds or secure accounts for a fee.
Remediation
- Agree a memorable but unusual safe word or phrase with family. Avoid anything discoverable via OSINT, such as pets or sports teams.
- If the safe word is forgotten, end the call and ring back on the known number, message through an existing family group, or ask a question only family would know.
- Never send money or personal information when something feels wrong.
- Limit social media visibility to known contacts and restrict public audio and video.
- If scammed: stop communicating, contact the bank to try to block or recover funds, change exposed passwords, enable 2FA and use a password manager, preserve evidence, and report to the FTC or FBI IC3.
- Ignore recovery-for-a-fee offers, which are secondary scams.