Scammers can now use AI to clone someone's voice, swap faces in video calls, and create fake images that look real. This is not science fiction — it is happening right now, and the technology is cheap and easy to access. A few seconds of audio from a social media video or voicemail is enough to clone a voice convincingly.

This guide explains what deepfakes are, how scammers use them, and — most importantly — how to verify that the person you're talking to is actually who they claim to be.

What deepfakes are

A "deepfake" is any AI-generated or AI-manipulated media designed to look or sound real. This includes:

• Voice clones — AI recreates someone's voice from a short audio sample. The clone can say anything the scammer types in, in real time.
• Face swaps — AI replaces one person's face with another in video, including live video calls.
• Fake images — AI generates photos of people, places, or events that never existed.
• Fake video — AI creates entirely fabricated video clips of real people saying or doing things they never did.

The quality of deepfakes has improved dramatically. In many cases, they are now indistinguishable from real audio and video, especially over a phone call or compressed video chat.

How voice cloning scams work

Voice cloning is the most common deepfake scam because it's the easiest to pull off and the hardest to detect. Here's a typical scenario:

1. A scammer finds a short clip of someone's voice — from social media, a voicemail, a YouTube video, or even a company website.
2. AI clones the voice in minutes using widely available tools.
3. The scammer calls you using the cloned voice, pretending to be someone you trust.
4. They create an urgent situation that requires you to send money or share information immediately.

Common voice cloning scenarios:

• "Grandchild in trouble" — a voice that sounds like your grandchild calls saying they've been in an accident, arrested, or are stranded and need money immediately
• "Boss needs a favor" — a voice that sounds like your manager asks you to buy gift cards, wire money, or share login credentials
• "Bank security call" — a voice that sounds like your bank's representative asks you to verify account details
• "Kidnapping" — a voice that sounds like a family member, with a second voice demanding ransom (this is extremely rare but does happen)

In every case, the scammer relies on urgency and emotion to prevent you from thinking clearly or verifying the call.

How video deepfakes work

Video deepfakes are more complex but increasingly common:

• Fake video calls — a scammer uses face-swapping software during a live video call to impersonate a colleague, boss, or family member
• Celebrity endorsements — fake videos of famous people promoting scam investments, products, or giveaways
• Social media manipulation — fabricated clips of public figures saying things they never said
• Romance scams — fake video chats to build trust in online relationships

Video deepfakes are harder to create convincingly than voice clones, but the technology is improving rapidly.

How to spot deepfakes

Detection is getting harder as the technology improves, but there are still some tells:

Voice clones:

• Slight unnatural pauses or odd speech rhythm
• Audio quality that seems too clean or too consistent (no background noise shifts)
• The voice sounds right but something feels "off" — trust that instinct
• Unusual phrasing — the scammer is typing words for the AI to speak, so it may not sound like how that person normally talks

Video deepfakes:

• Lip movements that don't quite match the audio
• Odd blinking patterns or facial expressions that seem stiff
• Blurry or inconsistent edges around the face, hair, or jawline
• Lighting on the face that doesn't match the rest of the scene
• Hands, teeth, or ears that look distorted

Important: These visual and audio tells are becoming less reliable as deepfake technology improves. Do not rely solely on "spotting" a deepfake. Always verify through a separate channel.

The verification rule that always works

Forget trying to analyze whether a voice sounds perfectly real. Instead, use this simple rule:

If someone calls you with an urgent request for money or sensitive information, hang up and call them back on a number you already have saved.

• Do not call the number they called you from — that's the scammer's number.
• Do not call a number they give you during the call.
• Look up the person's number in your contacts, or find the organization's number from their official website.
• Call that number directly to verify the situation.

This single step defeats virtually every voice cloning scam, because the scammer cannot intercept a call to a real phone number they don't control.

Set up a family code word

Agree on a secret code word or phrase with your close family members — something that wouldn't appear on social media or be easy to guess. If someone calls claiming to be a family member in an emergency, ask for the code word.

• Choose something simple but not obvious (not a pet's name or birthday)
• Every family member should know it
• Change it if you suspect it's been compromised
• If the caller can't give the code word, hang up and call your family member directly

Red flags that signal a scam call

Regardless of how real the voice sounds, these are warning signs:

• Extreme urgency — "You have to act right now" or "Don't tell anyone"
• Requests for unusual payment methods — gift cards, wire transfers, cryptocurrency, or cash
• Instructions to keep it secret — "Don't call anyone else" or "This is confidential"
• Emotional manipulation — crying, fear, anger designed to short-circuit your thinking
• Asking you to stay on the line — so you can't call the real person to verify
• Switching communication channels — asking you to move to WhatsApp, Telegram, or a personal email

See Social Engineering Attacks and Recognizing and Avoiding Phishing for more on these manipulation tactics.

Protect your voice and image

You can reduce the raw material available to scammers:

• Review privacy settings on social media — limit who can see your videos and voice messages
• Be cautious about posting videos with clear audio of your voice
• Consider making social media profiles private or limiting public content
• Be aware that even a 3-second voicemail greeting provides enough audio for cloning

This won't make you immune, but it raises the bar for scammers.

What to do if you've been targeted

If you received a deepfake scam call:

1. Do not send money or share any information
2. Hang up and call the real person directly using a number you trust
3. Report the call to the FTC and your local police
4. Warn family and friends so they're prepared
5. If you already sent money, contact your bank or the payment provider immediately — time matters

Short version

How to verify if a call is real:

1. Hang up — no matter how real the voice sounds
2. Call back on a known number — from your contacts or the official website, never the number that called you
3. Ask for your family code word — set one up now before you need it
4. No legitimate person or organization will object to you verifying — if they pressure you not to, that's the scam