Protect your family from AI voice-clone scams

If someone called sounding exactly like your child, partner or parent, would you stop to check who was really on the line?

That is the problem behind AI voice-clone scams. A familiar voice can be copied, and a convincing caller can use it to rush someone into sending money or handing over access to an account.

Protecting your family does not have to start with new software. Start with a shared rule: pause, verify, then act.

This guide draws on episode 28 of The OPSEC Podcast, hosted by Alan Pace. It is advice you can talk through with people who do not spend their days thinking about technology.

Why a familiar voice is not enough

The episode explains how short audio clips from public videos can become material for a cloned voice. Public posts also supply names, relationships and details that make a scam story believable.

Pace describes Sharon Brightwell’s experience in Florida: a caller sounded like her daughter, crying after an alleged accident. A second caller claimed to be a public defender and asked for $15,000 in cash. Sharon handed it to a courier. When the callers asked for more, a relative reached the real daughter, who had been at work the whole time.

The lesson is not that Sharon should have cared less. The scam worked by using that care against her. Families need a way to check a request even when the voice sounds right.

Three scams to recognize

• The family emergency. Someone sounds like a loved one in trouble. A supposed lawyer, officer or other helper takes over and asks for money urgently.
• The fake bank call. A caller knows your name or other personal details and asks you to read out a login or verification code. In the scenario described in the episode, that code lets the attacker into your account.
• The message that knows your life. A text or email mentions your employer, family or something you posted, then asks you to click, pay or sign in.

Good grammar and personal details are not proof. A text followed by a call is not independent confirmation if the same scammer controls both.

Make a family verification plan

1. Choose a private safe word

Agree on a word or short phrase with your family in person. Pick something easy to remember under stress that cannot be guessed from public posts. Do not share it on social media or leave it in a text or email thread.

If someone calls claiming a family emergency and asks for money or action, ask for the word before doing anything. No word, no action on the caller’s request.

The FBI recommends creating a secret word or phrase with family members to verify their identities.

If you have not agreed on a word, ask about a shared memory that is not public. The episode describes a Ferrari executive who challenged a caller claiming to be the CEO by asking about a recently recommended book. The caller hung up.

2. Hang up and call back yourself

For a request involving money, passwords, account codes or pressure to act immediately, leave the caller’s conversation and start your own check.

Call your relative on the number already saved in your phone. For your bank, use the number on the back of your card. Do not use a number supplied by the caller, reply to their text or simply hit redial.

3. Keep account codes to yourself

Do not read a login or verification code to someone who called you. End the call and contact the organization through a number you already trust.

Knowing your name, address or card details does not make the caller safe.

4. Treat pressure as a reason to slow down

“Do not hang up,” “do not tell anyone” and “pay right now” are reasons to verify, not reasons to skip it. Talk through that rule before a frightening call arrives.

Share less raw material

The episode suggests a few privacy habits:

• Review who can see family social accounts and videos, especially those featuring children or older relatives.
• Think before posting clear recordings of someone’s voice.
• Replace a personalized voicemail recording with the default system greeting.
• Share travel updates after you get home rather than while you are away.
• Consider a hardware security key for important accounts that support one. Unlike a code, it cannot be read to a caller over the phone.

You do not have to disappear from the internet. Be deliberate about what you share and who can see it.

Have the conversation this week

Walk through the plan with your parents, grandparents, partner and children. Explain that a scammer may sound familiar, may be crying and may hand the call to someone claiming authority. The episode also describes deepfake video, so a familiar face on a screen is not enough on its own.

Give everyone a specific routine to remember:

Ask for the word. Hang up. Call back on a number you already trust.

Practical privacy is about protecting people as well as their data. A calm conversation now gives your family something to fall back on when a call is anything but calm.

Reporting and further reading

If you are targeted, you can report the attempt to the FBI’s Internet Crime Complaint Center or the FTC’s ReportFraud site. There is no shame in being targeted by a scam designed to exploit trust.

Podcast credit: The OPSEC Podcast, episode 28, hosted by Alan Pace, published September 21, 2026. Watch “Ghost Signal: AI Voice Cloning Threats and Protecting Your Family From Digital Fraud” on YouTube. The episode’s transcript and show notes use the title “Ghost Signal: How AI Turned the Voices You Trust Into a Weapon.” Stories and examples above are attributed to the episode, not presented as original FOSSadmin reporting.