Imagine getting a call from a family member's voice, panicked, asking you to wire money right now, except it isn't them. Or a call from what sounds exactly like your bank's fraud department, "verifying" your account by asking you to read back a code you just received by text. Both scenarios are now playing out across the country, and banks themselves have flagged AI voice cloning as one of the fastest growing fraud threats of 2026.

Here's what's actually happening, and the simple habits that stop it cold.

🛡️

The one rule, if you read nothing else: never confirm your identity with a code, and never send money, based on a phone call you didn't initiate. Hang up and call back on a number you already trust.

How the scam works

Modern AI tools can clone a person's voice from just a few seconds of audio, pulled from a voicemail greeting, a social media video, or even a previous scam call where they got you talking. Fraudsters use the cloned voice (of a relative, or a fabricated "bank representative") to create urgency: a loved one in trouble, a fraud alert on your account, a wire transfer that needs "confirming" immediately. The entire tactic depends on you reacting emotionally before you've had a chance to verify anything.

A related version targets bank customers directly: a caller ID that appears to be your real bank, paired with a synthetic voice trained to sound like an actual representative, asking you to "confirm" your identity by reading back a one time passcode. That code is the same one your bank sends specifically because only you should ever enter it. Once you say it aloud, the scammer uses it to get into your real account.

A note from Gani
Working inside banking, the thing that strikes me about these scams is that they don't beat the security controls, they get you to hand them over. Every layer of protection your bank has built assumes the passcode stays with you. That's the whole design. Say it out loud and the lock opens.

Signs a call may not be real

What to do, before and during a suspicious call

1

Hang up and call back on a number you already trust

Use the number on the back of your card, or your bank's official app or website. Never a number the caller gives you.

2

Agree on a family "safe word"

Pick something with close relatives that a caller would have no way to know, and use it in any urgent money related call.

3

Never read a one time code to anyone

No matter who they claim to be. If you receive an unexpected verification code, that alone is a sign someone is trying to access your account.

4

Slow down on purpose

Scammers are counting on urgency. A real emergency or a real bank issue will still be there in ten minutes, after you've verified it independently.

5

Report it

Tell your bank directly through a verified number, and consider filing a report with the FTC at ReportFraud.ftc.gov.

The bottom line

You don't need to become a fraud expert to stay safe from AI voice scams. You just need one unbreakable rule: never confirm your identity with a code, and never send money, based solely on a phone call you didn't initiate. Hang up, call back on a number you know is real, and let the "urgent" situation wait the extra two minutes it takes to verify.

⚠️

This article is for general educational purposes and isn't personalized financial or security advice. If you believe you've been targeted by fraud, contact your bank and local authorities directly.

Gani Aderibigbe
Written by
Gani Aderibigbe
Senior Banking Professional in Capital Markets. Former Senior PM at JPMorgan Chase London. 10+ years across banking in Nigeria, the UK, and Canada. Banking Decoded is the guide I wish had existed when I started.
Read full story →