Μake us preferred on Google

We all believe we could recognize the voice of a loved one. However, voice cloning technology is advancing at a dizzying pace. “All scammers need is a few seconds of audio to create a convincing deepfake,” writes Phil Muncaster on WeLiveSecurity, the news platform of global cybersecurity company ESET.

This material can be taken from our social media posts if we have not restricted access through our privacy settings. It can also come from work-related content that has ended up online.

According to a Hiya report published in March, one in four Americans say they have received a phone call with a “deepfake” voice in the past 12 months. Another 24% say they cannot tell the difference.

But once they clone a voice, what do they do with it?

“One of the most common scams involves calling a relative out of the blue and playing an audio deepfake designed to make them believe their loved one has been kidnapped,” Muncaster explains. These virtual kidnapping scams can seem even more realistic because the scammers mention personal details they have also collected from the same social media accounts.

Scammers may also monitor the victim’s social media profile, as well as those of their relatives, in order to choose the right moment to strike. This tactic can be even more effective if the victim is abroad at the time and therefore not checking their phone for incoming calls.

The key for scammers is to keep the victim’s relatives in a state of uncertainty and put them under intense psychological pressure. To do this, they use the cloned voice for only a few seconds at a time, mix it with the sound of sobbing, and may add background noise so the whole scene sounds more convincing and chaotic.

What Is the “Secret Word”

In this context, one of the simplest yet most effective things you can do to expose a scam is to agree on a “secret word” with your family members. This is a word or phrase that is easy to remember and that they can ask for if they suspect your voice has been manipulated with deepfake technology. A scammer will have no way of knowing the “secret word,” which exposes the fraud attempt and prevents, for example, an effort to convince a family member to send money.

Of course, the word should be easy to memorize but also fairly unusual. It also should not be something that could be inferred from reading your social media posts or from other open-source intelligence (OSINT). This means that, for a start, you should avoid pet names or favorite sports teams.

How to Suggest It Without Scaring Your Family

There is, however, a right and a wrong way to agree on such a process. You do not want to cause your family anxiety. At the same time, it is important for them to understand that technology has advanced and that there are people willing to exploit it to deceive others.

It may help to explain that you will most likely never need to use the secret word. Still, you can discuss some scenarios in which it would be a good idea to ask for it. For example, in the case of an alarming and unexpected call in which someone who sounds like you tries to get money or sensitive information from them, the secret word can serve as a simple way to confirm your identity.

What If Someone Forgets the Secret Word?

It is important to have a backup plan in case someone cannot remember the secret word. The best thing you can do is encourage your family members to end the call and then call you back on the number they have saved for you on their device. Alternatively, they can message you through an existing group chat you have set up. This way, they will know immediately whether or not you are in danger.

Another option is for them to ask you a different question, one that only a family member would know the answer to. The question should not involve information that can be looked up online. It is also important for them to know that they should never send money or share personal details if something seems suspicious.

What to Do If You Have Already Fallen Victim to a Deepfake Scam

Do not feel guilty. Deepfake technology is becoming more convincing by the day. If you or a family member have fallen victim to such a scam:

• Immediately stop all communication with the scammer.
• Contact your bank, explain what happened, and ask whether the money taken from you can be blocked or recovered.
• Change all passwords that may have been exposed, across all related accounts. This is a good opportunity to enable two-factor authentication (2FA) and set strong, unique passwords for each account. You can store them securely in a password manager.
• Keep any relevant evidence, such as phone numbers, messages or recordings.
• Report the scam to the relevant authorities.

Remember: scammers are ruthless. Be alert to new scams in which they may promise to return your money for a fee or offer to help you secure your accounts. They are lying. If you pay them, all you will do is increase your losses.

Frequently Asked Questions

How can scammers get access to my voice?

They need only a few seconds of recording to create a convincing clone of your voice. The recording may come from content you have posted publicly in which you speak, for example in connection with your work, or from video and audio content you have shared on social media. For this reason, it is always a good idea to restrict access to your content and allow only people you know to follow you.

Can a “secret safe word” really stop deepfakes?

Nothing is completely secure. However, a “safe word” is an excellent and free option for exposing a scam based on audio deepfakes, such as fake or virtual kidnappings. It does not prevent the deepfake from being created, but it can significantly reduce the chances that the scam that follows will succeed.

What if the scammers guess the word?

Anything is possible. However, if you choose a random and unusual word or phrase that has no real meaning outside your family, it will be extremely difficult for scammers to guess. Even so, it is useful to have backup plans in case this happens. For example, you can agree that, when in doubt, you will end the call and call the person back directly.