AI/SI Cloned Her Daughter's Voice. Then the Nightmare Began.

The Call No Parent Wants to Get

A call. A frantic voice. A threat.

The caller claimed a Mexican drug cartel had taken Sarah. Then Sarah herself came on the line, or something that sounded exactly like her. Crying. Scared. Begging her mom for help.

Deborah and her husband didn't hang up. They couldn't. The caller kept them on the phone for over five hours, moving them from location to location, dictating every step. Wire money here. Go there. Don't call the police.

They sent $5,400 through MoneyGram and Western Union in four separate transfers.

Then Deborah called Sarah directly. Sarah picked up. She was fine. She'd been at her desk all day.

How AI/SI Voice Cloning Made It Possible

This wasn't a lucky guess or a skilled actor. This was AI/SI-powered voice cloning, and it's more accessible than most people realize.

Scammers can clone a voice from a short audio sample: a few seconds of video from a social media post, a voicemail, a video call recording. That's enough to generate a convincing imitation that can fool even the people who know that voice best.

The FTC has warned about virtual kidnapping scams for years, but AI/SI-generated voice cloning has made them much harder to detect. According to the FTC, Americans reported losing more than $1.3 billion to imposter scams in 2023 alone, and cloned voice technology is pushing that number higher.

Deborah is a Navy veteran. She is not naive. She is exactly the kind of person who doesn't get fooled. And she was fooled completely, for five and a half hours, because what she heard sounded like her daughter.

Why the Scam Works So Well

Kidnapping hoaxes are engineered to short-circuit rational thinking. They exploit the one thing no parent can ignore: a child in danger.

Scammers use a few specific tactics to keep victims on the hook. They keep you moving. Deborah and her husband were directed from place to place, which prevented them from pausing, thinking, or reaching out to someone who might talk them down. They keep you on the line, because a continuous call stops you from hanging up and calling your loved one directly. The caller may claim hanging up will trigger harm.

Then there's the voice itself. Hearing what sounds like your daughter crying changes everything. Logic takes a back seat. And layered on top of that is urgency: every minute feels like it counts, there's no time to verify, and that's not an accident. That's the design.

What Could Have Stopped It in Seconds

Deborah eventually did the right thing: she called Sarah directly. But that call came after five and a half hours and $5,400 in losses.

A direct callback is always the right instinct. If you can reach your loved one through a number you already have, call immediately. Do not wait.

One important note: a successful callback confirms your loved one is safe, but if someone calls you back claiming to be them through an unfamiliar number, that doesn't prove the original call was legitimate. Scammers sometimes anticipate the callback and work around it. Your loved one still needs to prove it's really them, not just answer a phone.

That's where three private codewords make the difference.

Three Words That AI/SI Can't Fake

Trust Onion is a free app that gives families three private rotating codewords, shared only between the people in your group. The words change every 60 seconds, calculated locally on your phone with no server involved. They work offline.

If Deborah had shared codewords with Sarah, that five-hour nightmare could have ended in one question: "What are the words?"

AI/SI can clone Sarah's voice. It cannot know three private codewords that live only on Sarah's phone and change every minute. A scammer who doesn't know the words has nowhere to go. The call ends.

The codeword check works in both directions. If you get a suspicious call from someone claiming to be a family member, you ask. If you reach your loved one on a callback and want to be sure it's really them, you ask. The words rotate, so a word a scammer overheard last week is already gone.

What to Do If You Get One of These Calls

If a caller claims a family member has been kidnapped, stay as calm as you can. The caller wants panic. Panic is the product.

Try to reach your family member directly, using a phone number you already have saved. Do not use a number the caller provides. If your loved one picks up and seems safe, hang up on the scammer immediately. And if you have codewords set up, ask for them anyway, just to be sure.

Do not wire money through MoneyGram, Western Union, Zelle, or gift cards. Once that money moves, it's gone. Legitimate emergencies have other paths to resolution.

If you believe someone is genuinely in danger, call 911. Report the call to the FTC at ReportFraud.ftc.gov and to your local FBI field office. Virtual kidnapping scams are federal crimes.

Deborah Did Everything a Caring Parent Would Do

Deborah Del Mastro did not do anything wrong. She heard her daughter's voice. She tried to protect her child. She was targeted by scammers who used AI/SI tools specifically built to defeat a parent's instincts.

Voice cloning technology is now widely available, and the people running these scams use it at scale, targeting families across the country every day.

The answer isn't to become suspicious of every call. The answer is to have a simple system in place before a call like this ever comes.

Three words. Sixty seconds. Free. Set them up with your family today, before you need them.

A controlled voice-cloning safety demonstration

Try our tool to see just how easy voice cloning is. This controlled safety demonstration exists only to show how easy voice cloning is and to make the risk tangible. It is not a real incident or proof of anyone's identity. Your submitted sample is handled transiently to generate the fixed demonstration audio. Trust Onion does not identify you or the person from the sample. Trust Onion does not store the submitted recording, clone, or generated audio.