
BlogAI Voice Cloning Attack
A Reporter Cloned Their Voice and Called Their Mum
A Cybernews reporter cloned their own voice using free AI tools, called their mother, and tried to scam her. She couldn't tell the difference.
The reporter didn't use anything exotic. No studio, no months of training data. Just widely available AI voice cloning tools and a short audio sample, and the result was convincing enough to fool someone who had known that voice since birth.
That detail matters. A mother who has heard her child's voice for decades, in every mood and every situation, still couldn't tell. If a reporter can do this on a Tuesday afternoon with free software, so can anyone else. The technology is here, it is cheap, and ordinary families are the target.
How the Call Works
Voice cloning now requires as little as 20 to 30 seconds of audio, which can come from a voicemail, a social media video, a podcast, or a clip your child posted last week. Once the clone exists, the scam follows a familiar script: the voice on the line sounds exactly like your son or daughter, they're in trouble, they need money fast, and they tell you not to call anyone else yet. The urgency is deliberate. Scammers know that if you have time to think, the con falls apart.
The scale is already large. The Federal Trade Commission recorded $2.7 billion in losses from imposter scams in 2023, before the current wave of AI voice tools became widely accessible. The World Economic Forum reported that deepfake fraud attempts increased 500% in 2024. In February 2024, engineering firm Arup lost $25 million when an employee joined a video call where every participant was a deepfake. That was a corporate target with IT resources. Ordinary families have none.
Why Your Ears Cannot Save You
Human detection accuracy for cloned voices sits at around 55 to 60 percent, barely better than a coin flip. Telling someone to "listen more carefully" or "be more skeptical" is not a realistic defense. The voice sounds real because it is real, just replayed and repurposed without permission. We recognize voices the way we recognize faces: automatically and emotionally. Scammers exploit that.
You need a different kind of signal, one that AI cannot copy.
This is where Trust Onion's three rotating codewords come in. Your family shares three simple words that rotate every few hours, calculated locally on each person's phone with no server involved. When a call arrives from someone claiming to be your child, you ask one question: "What are the words?" A scammer using a cloned voice cannot know them. There is no audio sample, no social media post, no database that hands a fraudster words that changed two hours ago and exist only on your family's phones.
If you hang up and call back on a number you know independently, a failed callback still doesn't prove the original caller was legitimate. The codewords remain the cleaner test: whoever is on the line must know your family's private Trust Onion Three Words.
The Cybernews reporter's mother heard a perfect copy of her child's voice and was fooled. If her family had been using Trust Onion, her next sentence would have been "What are the words?" and the scam would have ended right there.
A controlled voice-cloning safety demonstration
Try our tool to see just how easy voice cloning is. This controlled safety demonstration exists only to show how easy voice cloning is and to make the risk tangible. It is not a real incident or proof of anyone's identity. Your submitted sample is handled transiently to generate the fixed demonstration audio. Trust Onion does not identify you or the person from the sample. Trust Onion does not store the submitted recording, clone, or generated audio.
Frequently asked questions
Can AI really clone someone's voice from a short audio clip?
Yes. Current AI voice cloning tools require as little as 20 to 30 seconds of audio from a voicemail, social media video, or any public recording. The Cybernews experiment in July 2026 confirmed this is achievable with widely available, often free tools.
How can I tell if a phone call is an AI voice clone?
You often cannot. Human detection accuracy for cloned voices sits at roughly 55 to 60 percent. The safest approach is not to rely on your ears. Use a rotating family codeword system so the caller must prove they know something AI cannot access.
What is a family codeword and how does it stop voice cloning scams?
A family codeword is a shared secret only your family knows. Trust Onion rotates these words every few hours on each device, with no server involved. When a suspicious call arrives, ask for the current words. A scammer using a cloned voice cannot know them, so the scam ends immediately.
Are AI voice scams common or is this still rare?
Common and growing. The FTC recorded $2.7 billion in losses from imposter scams in 2023, and the World Economic Forum reported a 500% increase in deepfake fraud attempts in 2024. Voice cloning tools have become widely accessible since then.
Is Trust Onion free to use?
Yes. Trust Onion is free. It generates rotating three-word codewords for your family, works offline without a server, and takes only a few minutes to set up.
Protect your family with Trust Onion's three rotating codewords. Set them up free in minutes, and when the call comes, your family will already know what to ask.
Protect Your Family FreeCite this page
A Reporter Cloned Their Voice and Called Their Mum — Trust Onion, October 11, 2026. https://trustonion.io/blog/ai-voice-clone-scam-family-member-test



