Why a familiar voice is no longer proof

You get a call. It’s your daughter’s number, or close enough, and it is unmistakably her voice. She’s panicking. There’s been an accident, she’s in trouble, and she needs money moved right now. Every instinct you have says help her.

Except it isn’t her. It’s a scammer running her voice through software, and the panic is not a side effect. The panic is the product.

How little audio do they need? You’ll hate this

Not an hour of recordings. Not a phone tap. When McAfee’s researchers tested the tools, three seconds of audio was enough to produce a clone with an 85 percent voice match. Three seconds is your kid saying “sorry, wrong number.” It’s the start of a voicemail greeting. It’s any clip anyone has ever posted to social media, which for most families is not a small archive.

The uncomfortable part is that this isn’t an elite crime. The tools are cheap, some are free, and none of them ask what you’re planning to do with them. Scammers are not artisans. They are a call centre with better software, working through lists.

The numbers, briefly, because they are not subtle

When McAfee surveyed 7,000 people across nine countries, a quarter said they had either experienced an AI voice scam themselves or knew someone who had. In the UK, Starling Bank found that 28 percent of adults believed they had been targeted by a voice-cloning scam in the past year alone. Meanwhile almost half the country has never heard that these scams exist, which is roughly the gap the scammers are living in.

Targeted in the past year 28%

Have never heard of these scams 46%

Confident they could spot one 30%

Would send money even if the call felt strange 8%

Source: Starling Bank, Safe Phrases campaign research

And when the scam lands, it costs real money: of the people in McAfee’s survey who lost money to a voice clone, more than a third lost over $500, and some lost five figures.

Why your instincts fail here

For your entire life, a familiar voice has been a security system. You could not fake it, so nobody tried. Every rule of thumb you own (“it sounded exactly like him”, “she knew my name”, “the number looked right”) was built for a world where copying a voice was science fiction.

That’s the whole trick. The scam does not defeat your judgement. It goes around it, through a door you didn’t know existed. Even people who know about these scams don’t trust themselves to catch one in the moment: 70 percent of people told McAfee they weren’t confident they could tell a cloned voice from the real thing. Honestly, that 70 percent is the self-aware group.

The question a clone cannot answer

Here’s the good news, and it is genuinely good: the defence is not high-tech. A voice clone can copy how your daughter sounds. It cannot copy what your daughter knows.

So you ask for something only she would know. Fraud teams and police now recommend exactly this: agree a safe phrase with your family, and ask for it on any urgent call about money. The impostor’s voice is perfect and the impostor’s answer is silence.

The catch, and there is one, is that a phrase you pick once and never change has a shelf life. It gets forgotten precisely when someone is frightened, and if it’s ever overheard, it’s compromised forever. That’s the problem SafePhrase exists to solve: a phrase that lives on everyone’s phone and changes every minute, so there is nothing to remember and nothing worth stealing. But even before the app: agree a phrase with your family this week.

Because the voice on the phone isn’t proof anymore. What you share is.