Your Voice Is on Social Media. Scammers Are Using It.

Voice cloning software requires as little as 20 to 30 seconds of audio to generate a convincing copy of someone's voice. Public posts on Facebook, YouTube, TikTok, and Instagram supply that audio by the hour, every day, for free.

The April 2026 McAfee survey found that 1 in 10 Americans reported experiencing a voice clone scam. That is your extended family, your office floor, your neighborhood. The attacks hit businesses too: cybersecurity experts cited in the InvestigateTV report flagged cloned-voice calls directing employees to buy gift cards on behalf of a boss. The fake voice sounds real. The urgency sounds real. Then the gift card codes get read off over the phone to someone who is not who they claimed to be.

Why Social Media Made This Easier

For most of history, voice impersonation required talent, practice, and proximity to the target. Social media removed all three. People post holidays, graduations, tutorials, and commentary constantly, and most of it is publicly accessible audio that can be fed into a cloning tool that costs nothing. The InvestigateTV report identifies Facebook, YouTube, TikTok, and Instagram as the primary harvesting grounds. Ordinary people's voices are now raw material for fraud, not just celebrities with large public profiles.

The scam works because the brain trusts familiar voices. When someone hears a cloned voice that sounds exactly like a family member, the instinct to help kicks in before skepticism does. Research suggests people correctly identify a cloned voice only about 55 to 60 percent of the time in controlled conditions. In a stressful real-world call, that number drops further. Listening harder is not the answer.

Adding Something AI Cannot Clone

If the scam depends entirely on sounding like someone you trust, the defense is to add something the scammer cannot fake. Trust Onion gives families three rotating codewords that change every 60 seconds, calculated locally on the phone with no server involved. When a call comes in from someone claiming to be a family member, one question cuts through it: "What are the words?"

A real family member answers instantly. A scammer with a cloned voice cannot. The codewords are never posted online, never in a video, never in a voicemail, so there is nothing to harvest. Even if a word were somehow intercepted, it expires in 60 seconds. For security and finance teams worried about fake-boss calls and unauthorized transfers, the same principle applies: a shared verification phrase takes three seconds to ask and immediately separates a real executive request from a cloned one.

The scam collapses the moment someone asks "What are the words?" and gets silence back.

A controlled voice-cloning safety demonstration

Try our tool to see just how easy voice cloning is. This controlled safety demonstration exists only to show how easy voice cloning is and to make the risk tangible. It is not a real incident or proof of anyone's identity. Your submitted sample is handled transiently to generate the fixed demonstration audio. Trust Onion does not identify you or the person from the sample. Trust Onion does not store the submitted recording, clone, or generated audio.