AI Voice Cloning Scam Defrauds Bhopal Security Guard of ₹35,000
Niket Malviya, a 50-year-old security guard from Bhopal's TT Nagar area, was defrauded of ₹35,000 by a cybercriminal who used a suspected AI-cloned voice to impersonate a trusted friend and claim urgent financial need. The scammer collected the money across three separate QR code transfers before Malviya discovered the fraud by contacting his actual friend. TT Nagar police have registered a case and launched an investigation.
By Jesse Seaver, Co-Founder, Trust Onion
Published October 5, 2026
Filed to the News Desk · voice cloning
Originally reported by Free Press Journal · Read the original article
Part of our Voice Cloning Scams topic guide.
Definitions: Voice clone scam, AI voice cloning, Deepfake scam, Impersonation scam, CEO fraud / executive voice fraud
Analysis of This Incident
A Friend's Voice Asked for Money. It Wasn't His Friend. →Timeline of Events
The Setup
The fraudster gathered enough voice data from Malviya's friend, likely from publicly accessible audio, to create a convincing AI-cloned imitation. The attacker identified Malviya as a reachable contact and built a scenario around urgency and trust.
The Attack
The scammer called Malviya using the AI-cloned voice of his friend, claiming an urgent financial need. To collect the money without revealing a traceable bank account, the fraudster sent a QR code and directed Malviya to complete three separate payment transfers totalling ₹35,000.
The Impact
Malviya completed all three transfers, believing he was helping a friend in genuine distress. The funds were lost immediately upon transfer, with no recourse available before the fraud was detected.
The Discovery
After completing the payments, Malviya contacted his actual friend through a separate channel and quickly learned the friend had made no such call and was not in any financial difficulty.
The Fallout
Malviya reported the incident to TT Nagar police, who registered a case and began an investigation. Recovery of the funds remained uncertain at the time of reporting.
Attack Details
The attack on Niket Malviya followed a pattern that cybersecurity officials across India have flagged as rapidly increasing: AI voice cloning used to impersonate a known and trusted contact. By mimicking the voice of someone Malviya already trusted, the scammer bypassed the scepticism most people apply to calls from strangers.
The fraudster built the scenario around urgency, a deliberate tactic designed to compress the victim's decision-making time and discourage verification. When people believe a friend is in immediate distress, the impulse to help often overrides caution, and the attacker exploited that impulse precisely.
Rather than request a direct bank transfer, which can sometimes be traced or reversed, the scammer sent a QR code and directed Malviya to make three separate payments. Splitting the transaction into multiple smaller transfers likely served to stay below alert thresholds and reduce the chance of any single large payment raising suspicion before the funds cleared.
The fraudster needed only a small sample of the friend's voice, potentially sourced from a phone call recording, a social media video, or a voice message, to generate a convincing clone. Once the voice model was created, carrying out the scam required little beyond placing the call and sharing a payment QR code.
How Trust Onion Helps
Our analysis — prevention guidance, not part of the reported facts
If Malviya had been using Trust Onion with his circle of trusted contacts, a single question, 'What are the words?', would have immediately exposed the impersonator. The real friend would know the current three codewords. An AI-generated voice clone cannot answer correctly, because the words rotate every 60 seconds and are calculated locally on each device, not stored on any server that can be accessed remotely.
Trust Onion gives individuals a simple, private check that works beyond a familiar voice or a recognised number. Caller ID can be spoofed, and AI voice cloning can now replicate the sound of someone you know well enough to fool your ear. A shared three-word challenge that only genuine contacts can answer adds a layer of verification that neither technology nor social pressure can defeat.
The check takes seconds. In this case, it could have stopped all three transfers before a single rupee moved. Trust Onion is free, works offline, and requires no technical knowledge to use.
Impact Assessment
Malviya, a security guard on a fixed salary, transferred ₹35,000 across three payments before the deception was uncovered. For a working individual with a fixed income, this is a serious financial setback with no guaranteed path to recovery.
Beyond the direct financial loss, incidents like this erode confidence in ordinary communications. Victims often find themselves questioning whether other calls from known contacts were genuine, which disrupts normal personal and professional relationships long after the event.
The TT Nagar police investigation is underway, but recovering money lost through QR code fraud is difficult. Once funds move through a payment QR code, they pass quickly across accounts, making tracing and clawback operationally complex.
Cite this page
AI Voice Cloning Scam Defrauds Bhopal Security Guard of ₹35,000 — Trust Onion, October 5, 2026. https://trustonion.io/case-studies/ai-voice-cloning-scam-defrauds-bhopal-security-guard-of-35-000
Lessons Learned
A familiar voice on a call is no longer reliable proof of identity. AI voice cloning can replicate someone's voice convincingly enough to deceive people who know them well.
Urgency is a deliberate scam mechanism. Any request for immediate financial transfers, especially involving QR codes, should trigger a verification step through a separate, independently confirmed contact method. Note: calling the same number back is not sufficient confirmation that the original caller was genuine. Always use a number you sourced independently, and the caller must still be able to answer your private three-word challenge.
Splitting a fraudulent payment into multiple smaller transfers is a known tactic to avoid detection. Multiple QR code payment requests from the same call should be treated as a red flag regardless of how trustworthy the caller sounds.
Verifying identity through a shared private challenge, rather than relying on voice recognition alone, provides protection that no amount of cloning technology can circumvent.
Key Takeaways
A Bhopal security guard lost ₹35,000 in April 2026 to a scammer who used AI voice cloning to impersonate a trusted friend.
The fraudster used a QR code and split the theft across three separate transfers to reduce detection risk.
The fraud was discovered only after the victim independently contacted his actual friend through a different channel.
AI voice cloning requires only a small audio sample to create a convincing imitation of a known person's voice.
A private three-word verification challenge, unknown to any impersonator, would have stopped this attack before any money transferred.
Trust Onion's rotating codewords work offline and cost nothing, making them accessible to anyone regardless of income or technical ability.
Frequently Asked Questions
What happened in the Bhopal voice cloning scam involving Niket Malviya?
In April 2026, Niket Malviya, a 50-year-old security guard from Bhopal's TT Nagar area, received a call from someone impersonating a friend using a suspected AI-cloned voice. The caller claimed urgent financial need and directed Malviya to scan a QR code and complete three separate payments totalling ₹35,000. Malviya discovered the fraud only after contacting his actual friend, who confirmed he had made no such call.
How much money did Niket Malviya lose in the scam?
Malviya lost ₹35,000 across three separate QR code transfers made during a single fraudulent phone call.
How could this voice cloning scam have been prevented?
If Malviya had a shared private verification method with his friend, such as Trust Onion's three rotating codewords, he could have asked the caller a simple question: 'What are the words?' The real friend would know the answer. An AI voice clone cannot. The words rotate every 60 seconds and are generated locally on each device, so there is no way for a scammer to access or predict them. Trust Onion is free and works offline, making it accessible to anyone.
Why did the scammer use a QR code instead of a bank transfer?
QR code payments can be harder to trace and reverse than conventional bank transfers. Splitting the total amount across three separate transactions may also have been intended to avoid triggering fraud alerts on any single large payment.
Is calling back the person who rang you enough to verify they are genuine?
No. Calling back the same number does not confirm that the original caller was who they claimed to be. Scammers can spoof numbers or use call forwarding. Always use a contact number you sourced independently, such as one saved in your own phone book before the incident. Even then, the person you reach should be able to answer your private Trust Onion three-word challenge before you act on any request involving money or sensitive information. If you believe someone may genuinely be in danger, contact emergency services directly.
More case studies
Michigan Couple Loses $66,000 in Real Estate Voice-Cloning Scam
Michigan homebuyers identified as the VanDoeselaars lost $66,000 after scammers used suspected AI voice cloning to imper...
AI Voice Clone Stole $66,000 in Closing Funds from West Michigan Couple
Brian and Wendy VanDoeselaar of West Michigan lost $66,000 in closing funds after scammers used AI voice cloning to impe...
Scotch Plains Resident Loses $3,000+ in Family Impersonation Scam
In September 2026, a Scotch Plains, New Jersey resident lost more than $3,000 after fraudsters impersonated a family mem...