TOPIC GUIDE

AI Impersonation: Preventing Fake Calls, Texts, and Video

Voice is only one channel. Scammers now impersonate the people you trust over text messages, emails, and even live video calls with deepfaked faces. Each channel has its own tells, but chasing channel-specific tricks is a losing game — the durable defense is one verification habit that works everywhere. This hub covers the full impersonation landscape and how to close it off.

The three impersonation channels

Voice: cloned calls and voicemails. Covered in depth on our voice cloning scams hub.
Text: "Hi Mom, I broke my phone — this is my new number" messages, spoofed sender IDs, and AI-written messages that copy a person's texting style from leaked chat history.
Video: live deepfake video calls. Corporate cases have already lost tens of millions to conference calls where every participant except the victim was synthetic.

The common thread: every channel carries an identity claim you cannot verify through the channel itself.

Text impersonation: the highest-volume attack

The "new number" text is the workhorse of family impersonation because it needs no voice sample at all:

A message arrives from an unknown number claiming to be your child/parent with a broken or lost phone.
Small talk builds trust for a day or two.
Then the ask: help with a bill, a bank issue, a payment app transfer.

Defenses: contact the person on their original number (a lost phone doesn't disconnect a phone number from its owner instantly, and other family members can confirm), and ask for the codewords over text — knowledge verification works in every channel.

Video deepfakes: seeing is no longer believing

Live face-swap tools can now run inside a video call. Warning signs still worth knowing — lighting that doesn't match the room, edges shimmering when the head turns fast, lip-sync drifting on plosive sounds — but treat them like voice tells: helpful, not sufficient.

For any video call that ends in a request for money, credentials, or secrecy:

Ask the person to turn their head fully sideways and pass a hand in front of their face — current real-time swaps still break on occlusion.
Better: ask for the codewords. A deepfake renders a face; it doesn't know your shared secret.
Confirm big requests on a second channel you initiate.

One habit that closes every channel

Channel-specific tricks age fast. What doesn't age:

Shared rotating codewords with the people who might ever be impersonated to you — family, close friends, teammates. Works over voice, text, and video alike.
You initiate the verification. Trust contact info you already had, never details supplied inside the suspicious conversation.
The no-exceptions rule: urgency + secrecy + money = verify first, always. Legitimate people accept a two-minute check; scammers can't survive one.

Step-by-step guides

How to Protect Your Family from AI Scams
Step-by-step setup guide for family codeword protection.
Protect Your Friends and Club from AI Scams
Set up codeword verification for friend groups, teams, and clubs.
Voice Clone Scams in the News
A continuously updated roundup of real reported incidents.

Frequently Asked Questions

How can I tell if a text is really from my family member?

Don't judge the writing style — AI copies it well. Verify out-of-band: call their original number, check with another family member, or ask for your family's codewords in the chat. A real relative answers instantly; an impersonator stalls or dodges.

Can a live video call be faked?

Yes. Real-time face-swapping tools work inside ordinary video-call apps, and multi-person deepfake conference calls have defrauded companies of tens of millions. Treat video as no more trustworthy than a phone call when money or credentials are requested.

What's the difference between spoofing and impersonation?

Spoofing fakes the technical envelope — the caller ID or sender number. Impersonation fakes the human — voice, face, or writing style. Modern scams combine both, which is why neither caller ID nor your senses are reliable verification.

Do codewords work for businesses and teams too?

Yes — executive impersonation and CEO fraud follow the same playbook as family scams. Teams can use shared verification words or mandatory callback procedures for any payment or credential request, no matter how senior the requester appears.

REAL CASES & ANALYSIS