Her Daughter's Voice Begged for Help. It Wasn't Her.

The call came with a voice she recognized immediately: her daughter, crying, scared, pleading. Scammers had built that voice from a few seconds of publicly available audio, and they used it to convince a California mother that her child had been kidnapped in Mexico.

This is the kidnapping ransom hoax, now powered by AI voice cloning. The technology can generate a convincing replica of someone's voice from a TikTok clip, a YouTube video, or a voicemail greeting. Once the clone exists, it can say anything the scammer types. It can sob. It can say your name. The FTC reported that Americans lost $1.1 billion to imposter scams in 2023, and the tools behind those scams have only grown cheaper since.

How the Script Works

The call follows a pattern designed to collapse rational thinking. An unfamiliar number. A voice you love, screaming that she is in danger. Then a second voice, calm and controlled, telling you not to hang up, not to call the police, not to contact anyone else. Wire transfers, gift cards, cryptocurrency, demanded while the scammer keeps you on the line so you cannot verify anything.

The panic is the product. Deborah Del Mastro is not naive. She is a mother who heard what sounded like her daughter in distress, and the scam was built precisely for that moment.

The natural instinct is to hang up and call your child directly. That is the right move, but scammers have answers for it. Some hold victims on the line the entire time, insisting that hanging up will harm the hostage. Others spoof caller ID so calls appear to come from a familiar number, or time the call to when the real person is traveling or unreachable. By the time the victim reaches their loved one, the money is already gone.

A failed callback does not prove the original caller was legitimate. Use a number from your own contacts, not one the caller provides. If you believe someone may genuinely be in danger, alert authorities.

The Question a Cloned Voice Cannot Answer

AI can replicate how someone sounds. It cannot know what only that person knows at this exact second. Trust Onion gives families three private codewords that rotate every 60 seconds, calculated locally on each person's phone and never stored on a server. When a suspicious call comes in, you ask: "What are the words?" A real family member with the app knows. A scammer with a cloned voice does not.

If Deborah Del Mastro's family had been using those codewords, the call would have ended there. Silence on the other end. Scam over.

Tell your family this scam exists. Share Deborah's story. When people know that voice cloning is real, they are more likely to pause before acting. If you get a distressing call, hang up, call your loved one on a number already saved in your contacts, and remember that a successful callback is not proof the original caller was genuine. Report the call to the FTC at reportfraud.ftc.gov.

Deborah Del Mastro spoke out because she did not want this to happen to another family. The scam worked on her because it was engineered to.

A controlled voice-cloning safety demonstration

Try our tool to see just how easy voice cloning is. This controlled safety demonstration exists only to show how easy voice cloning is and to make the risk tangible. It is not a real incident or proof of anyone's identity. Your submitted sample is handled transiently to generate the fixed demonstration audio. Trust Onion does not identify you or the person from the sample. Trust Onion does not store the submitted recording, clone, or generated audio.