AI Voice Clone Mimics Sister in Kidnapping Ransom Scam

No money was lost. The attack was identified before any payment was made, placing this firmly in the near-miss category. Even so, believing, even briefly, that a child is in danger and in pain is traumatic regardless of whether a payment follows, and the psychological toll on the Coughlin mother was real.

The incident also carries a secondary cost measured in redirected lives. Patrick and Ryan Coughlin channeled significant personal and professional resources into founding Savi Security, raising $7 million to build consumer protection tools that did not exist when their mother was targeted.

When the AI-generated voice played, the mother had no ready way to confirm whether it was real. A prior agreement on three rotating codewords through Trust Onion would have given her a direct tool: before fear could take hold, she could have asked the caller to provide the current words. A real family member would know them. An AI voice clone cannot, because the words change every 60 seconds and are never stored on a server that can be accessed or stolen.

Families set up Trust Onion together in advance so every member shares the same rotating words at any moment. If a call comes in claiming a loved one is in danger, anyone in the family can ask for the words. A Proofie™, a selfie signed using a passkey in the Trust Onion app, can also let a family member confirm their identity and location in a verifiable, tamper-evident record. Note that a failed callback to the original number does not prove the first caller was legitimate; always use a number from an independent source, and alert authorities if someone may genuinely be in danger.

Public by default, under your control. Proofie photos and signed records are stored securely on Amazon Web Services (AWS). A Proofie is public by default: anyone with its link or QR code can view the photo and signed record. You can add a password to make a Proofie private, or delete it at any time. Deleting a Proofie removes its photo and signed record from our AWS storage and takes its link offline, but cannot recall copies someone has already downloaded or saved.