Michigan AG Warns: AI Can Now Sound Exactly Like Your Kid

The Call Sounds Real. It Isn't.

Your phone rings. It's your son's voice, or your daughter's, or your grandchild's. They're in trouble. There's been an accident, an arrest, a hospital visit. They need money fast and want you to keep it quiet.

The voice is convincing because it sounds like their voice. AI voice cloning can replicate someone's speech patterns, tone, and accent from as little as 20 to 30 seconds of audio. That's a single TikTok, one short voicemail, or a few seconds of a family video posted online.

Michigan Attorney General Dana Nessel issued a warning because this is no longer theoretical. It's happening to families across the state.

Why AI Voice Scams Work So Well

These scams run on urgency and love. The caller needs help right now, with no time to verify, because waiting means something terrible happens.

That pressure short-circuits your instinct to slow down and check. By the time you wire money or hand over gift cards, the call is over and the scammer is gone.

The FTC reported that Americans lost $2.7 billion to impersonation scams in 2023, and that number has climbed every year since. AI tools have also gotten cheaper and easier to use. What once required a professional studio now runs on a laptop.

A widely cited 2023 McAfee survey found that 77% of AI voice scam victims lost money, with an average loss of over $1,400. Some families lost far more.

The Grandparent Scam Just Got an Upgrade

For years, the "grandparent scam" followed a familiar script: a caller claims to be a grandchild in trouble, the details stay vague enough to fit almost anyone, and the grandparent fills in the blanks themselves.

Voice cloning removes the vagueness. Now the voice actually sounds like your grandchild, and the scammer may already know the name, the relationship, and personal details pulled from social media.

Our brains are wired to trust voices we recognize. Hearing someone you love in distress creates a physical response, and skepticism is hard when acting fast feels like caring. Scammers count on that.

How the Scam Plays Out

The structure is usually the same, even when the details vary.

First comes the urgent call: a family member is in trouble, whether a car accident, arrest, or medical emergency, with details designed to create panic. Then a second person gets on the line, playing a lawyer, police officer, or hospital worker, explaining what's needed: cash, a wire transfer, gift cards, sometimes cryptocurrency.

Next comes the secrecy ask. Don't tell anyone, because it could make things worse. This isolates the victim and prevents them from checking with other family members. Finally, the collection: sometimes a courier picks up cash at your door, sometimes you're walked through a wire transfer while still on the phone.

By the time you call your actual family member, the money is gone.

What the Michigan AG Says to Do

Attorney General Nessel's office recommends hanging up and calling your family member directly using a number you already have saved, not one the caller gives you, and checking with another family member before doing anything.

These are sound instincts. The problem is that the scam is designed to make those steps feel impossible. You're being told someone you love is in danger, and pausing to verify feels like abandoning them.

The AG's advice holds up, but it helps to have a system in place before the call comes, not a plan you improvise while your heart is racing.

A Codeword Stops the Scam Cold

A family codeword is exactly what this situation calls for.

Trust Onion is a free app that gives your family three shared codewords that rotate every 60 seconds, calculated locally on each person's phone, with no server required and no need for a signal.

When a call comes in and something feels off, you ask: "What are the words?"

If it's really your family member, they know them. If it's an AI clone, they don't. A cloned voice can mimic how someone sounds, but it cannot know three private words that changed 60 seconds ago and exist only on your family's phones. The scam ends in three seconds.

A Proofie™ is a selfie signed by your passkey the moment you take it. Share the link, and anyone can check in their own browser that your key signed this exact photo, after a known moment, and that nothing has changed since. A standard P-256 WebAuthn passkey signs after Face ID, fingerprint or device-passcode unlock. The signature must carry both user-presence and user-verification flags. This is not a crypto-wallet signature. Identity is the full signing public key, not its shortened label. Save a previously trusted key to recognize later Proofies from the same key. This does not automatically verify a real-world identity or detect AI-generated images. Signed time and place cannot be changed undetected; they are not independent proof of physical whereabouts or exact capture time. Family codewords work alongside Proofies, not as an overlay or signed field. The photo is permanently published to public IPFS, and the full signed record is public JSON pinned to IPFS. Removing a Proofie in the app hides it from your list and disables its share link, but does not erase the photo from IPFS. Only create Proofies whose photo and signed information you are comfortable making public permanently. For most calls, though, asking "What are the words?" is enough. It works without a signal and costs nothing.

Set It Up Before the Call Comes

The Michigan AG's warning is a good reminder that the time to prepare is before the emergency, real or fake.

Talk to your family this week. Explain how these scams work, set up Trust Onion together at trustonion.io, and make "What are the words?" a normal part of how you verify calls from family members.

Scammers are betting you haven't done that yet.

A controlled voice-cloning safety demonstration

Try our tool to see just how easy voice cloning is. This controlled safety demonstration exists only to show how easy voice cloning is and to make the risk tangible. It is not a real incident or proof of anyone's identity. Your submitted sample is handled transiently to generate the fixed demonstration audio. Trust Onion does not identify you or the person from the sample. Trust Onion does not store the submitted recording, clone, or generated audio.

A lasting record of a place and time. Proofie™ images are stored on IPFS, a third-party distributed file network. Once created and shared, copies can’t be deleted everywhere by you, the recipient, us, or bad actors. So when you create a Proofie, you make a verifiable record of the place and time it captures.