← Articles and guides on fraud, cybersecurity, privacy and AML

Family safe word against AI voice cloning scams: how to set one up

How to set up a family safe word against AI voice cloning scams, what the FBI and banks recommend, and what to do when a panicked call from a relative comes in.

2026-10-31

The phone rings and the voice sounds exactly like your son, your mother or your boss: an accident, an arrest, an emergency, and money is needed now. AI has made voice imitation easy; UK bank Starling says just three seconds of audio can be enough to clone a voice. The simplest, cheapest defense is not technical. It is a family safe word.

How does the AI voice cloning scam work?

Criminals take a short clip, often from public social media videos or voice messages, and use cloning software to generate new speech. In a December 3, 2024 alert, the FBI described short clips imitating a relative's voice to demand urgent money or a ransom, AI audio used to impersonate customers to banks, and real-time video calls posing as executives or police.

How common is it?

In a Starling Bank survey of 3,010 UK adults by Mortar Research in August 2024, 28% believed they had been targeted by a voice cloning scam in the past year, 46% had never heard of the scam and 8% said they would send the money even if the call seemed strange. In Brazil, Serasa Experian counted 6,937,832 fraud attempts in the first half of 2025, roughly one every 2.3 seconds, and lists AI among criminals' tools.

How do you set up a family safe word?

Agree on it in person. Avoid pet names, birthdays or anything visible online.
Never share it by text or email, as Starling advises.
Make the rule clear: any phone, audio or video request for money, passwords or codes requires the word.
Include grandparents and teenagers; see our guide on elder fraud in the US.
Change it after it is used or if it leaks.
At work, set a verification step for any payment request from "the CEO".

What should you do during a suspicious call?

Ask for the safe word. No word, no money.
Hang up and call the person on a number you already know, the core of the FTC's "don't trust the voice" advice.
If you can't reach them, call another relative or a friend of theirs.
Never pay by wire, crypto or gift card based on a voice alone.
Listen for odd tone and word choice, as the FBI suggests.

How do you limit what scammers can clone?

The FBI advises limiting the photos and voice recordings you post, setting social accounts to private and accepting only followers you know. For video deepfakes, it lists clues such as distorted hands, odd eyes or teeth, wrong shadows and lag, but quality improves fast, so rely on the safe word and the call-back. Read more on phishing and deepfakes and the FBI IC3 2025 report. If you lost money, call your bank immediately and report to ic3.gov. More in Tips and the Radar.