Your phone rings. It is your son's voice, or your daughter's, or your husband's — shaking, crying, saying there has been an accident, an arrest, or a hospital emergency, and they need money right now. This can be an AI voice cloning scam: a fraudster who took a few seconds of your relative's real voice from a public social media video, cloned it with easily available AI tools, and is now using it to panic you into an instant, secret money transfer. **The single best defence is to hang up and call your relative back yourself, on the number already saved in your phone.** A real emergency survives a callback. A scam does not.
If this is happening right now: do not send money yet, and do not stay on this call. Hang up. Call your relative back directly on their own saved number, or call another family member who can check on them. If you cannot reach anyone in the next few minutes, still do not transfer money based on the call alone — skip ahead to what to do while you verify.
How the scam actually works
This scam is built on two things: a short clip of a real voice, and your fear for someone you love.
Step 1 — Harvesting the voice. Scammers pull audio of your relative from things that are already public: an Instagram Reel, a YouTube video, a podcast appearance, a wedding video, even a voice note forwarded in a WhatsApp group. A short clip is enough for today's AI voice-cloning tools to generate new sentences in a voice that sounds convincingly like that person — accent, pace, and manner of speaking included.
Step 2 — Building the story. The scammer picks a scenario meant to make your mind go blank with panic rather than think clearly: a road accident, an arrest, a hospital admission, being stopped at the airport, or a kidnapping claim ("your daughter is with us, don't call anyone"). All of these share one feature — they demand you act in the next few minutes, before you have time to verify.
Step 3 — The call. You receive a call, sometimes from an unknown number, sometimes even appearing similar to your relative's. The cloned voice says something like: *"Mumma, I'm in an accident, please don't tell Papa, just send money now, I'll explain later," or "This is Inspector [Name], your son is in our custody, transfer bail money immediately or things get worse for him."* The voice cries and stutters, because AI cloning tools reproduce emotional tone, not just words.
Step 4 — The demand. You are asked to transfer money immediately — often to an unfamiliar UPI ID or bank account, framed as "hospital deposit," "bail amount," or "fine payment." The amount usually feels urgent but payable — enough to hurt, not so much that a careful person would refuse outright.
Step 5 — The isolation. This is the step that makes the scam work. You are told, in the relative's voice or by a second "official" who joins the call, **not to hang up, and not to call anyone else** — "don't tell Papa," "don't call the police." This single instruction is designed to stop you from doing the one thing that would immediately expose the scam: verifying independently.
hospital procedure in India. No genuine hospital, police station, or court asks a family member to stay on a call and avoid contacting anyone else. That instruction exists purely to stop you from checking the story.
The red flags
| What happens on the call | What it usually means |
|---|---|
| Voice sounds like a loved one but is vague on details only they would know | Cloned voices reproduce sound, not memory |
| Caller insists you must not hang up or call anyone else | Designed to block verification — no real emergency needs this |
| Demand for money is immediate, via UPI or transfer to an unfamiliar account | Genuine hospitals, police, courts don't collect funds this way |
| Call comes from an unknown number, sometimes switching mid-call | Real emergencies are usually reported through traceable channels |
| A second "official" voice joins to handle payment | A scripted second actor reinforcing urgency |
| Emotional tone feels slightly "off" or repetitive | Cloned audio can sound realistic but is generated — trust that instinct |
If it is happening right now
- Hang up. Do not stay on the call to "explain" or negotiate — ending it costs you nothing;
- Call your relative back yourself, on the number already saved in your phone contacts — never a
- If they don't answer, call another family member, their workplace, or a friend who might know
- Do not transfer any money until you have verified independently. A genuine emergency still
- Ask a question only the real person would know — a shared memory or a pre-agreed word (see
- If money has already been sent, move straight to the recovery steps below — every minute matters.
spoofed to display differently from where the call is actually originating. Never treat a recognisable number alone as verification.
Know your vulnerabilities before attackers do
Run a free VAPT scan — takes 5 minutes, no signup required.
Book Your Free ScanSet up a family safe word — before you ever need it
The single most effective defence against this scam is decided in advance, not during the panic of the call itself.
Agree, as a family, on a safe word or safe phrase that is never posted online, never texted, and only ever spoken aloud between people who already know it. In any call claiming a real emergency involving a family member, the person asking for money must be able to say the safe word when asked. A cloned voice, however convincing, cannot produce a word it was never given.
A few practical points that make this work:
- Keep it simple enough that everyone remembers it without writing it down anywhere digital.
- Never use it in a WhatsApp status, caption, or message that could be screenshotted.
- Make sure elderly parents and children old enough to receive calls know it too — they are often
- Revisit and change it occasionally, the same way you would a password.
If you have already sent money
Speed decides whether this money can be recovered. Do these in order, right now.
- Call 1930 immediately — the National Cyber Crime Helpline, run under the Ministry of Home
- File a complaint at
https://cybercrime.gov.in— the National Cyber Crime Reporting Portal
- Call your bank's fraud or customer care number — from the back of your card or the bank's
- Preserve every piece of evidence: the call recording if you have one, the number that called
- Tell the rest of your family immediately — scammers sometimes call multiple relatives with
details are what let your bank and the cybercrime portal act fastest.
How to protect family, especially elderly parents
Elderly parents are frequently the specific target of this scam — they are less likely to question an urgent call from "their child," and scammers assume they will not think to verify before acting.
- Have the safe-word conversation directly with them, and make clear it applies to any call
- Tell them plainly: **"If I ever call saying there's an emergency and I need money now, hang up and
- Encourage them to keep close family members' numbers saved and easy to find, so a callback takes
- Ask them to loop in another family member before sending money for any emergency — a second
- Be mindful of how much personal voice and video content is posted publicly, especially of parents
from social media"] --> B["Clones the relative's
voice with AI"] B --> C["Calls a relative with
an emergency story"] C --> D["Demands immediate
secret money transfer"] D --> E["Forbids calling
anyone else"] E --> F{"How the family
member reacts"} F -->|"Panics and pays
right away"| G["Money sent to
scammer instantly"] F -->|"Hangs up and calls
the real saved number"| H["Scam exposed,
real person answers"] F -->|"Asks the family
safe word"| I["Scammer cannot
answer, call ends"] style A fill:#5f1e1e,stroke:#EF4444,color:#e2e8f0 style B fill:#5f1e1e,stroke:#EF4444,color:#e2e8f0 style C fill:#5f1e1e,stroke:#EF4444,color:#e2e8f0 style D fill:#5f1e1e,stroke:#EF4444,color:#e2e8f0 style E fill:#5f1e1e,stroke:#EF4444,color:#e2e8f0 style G fill:#5f1e1e,stroke:#EF4444,color:#e2e8f0 style H fill:#1e3d2f,stroke:#10B981,color:#e2e8f0 style I fill:#1e3d2f,stroke:#10B981,color:#e2e8f0
This research is published by Bachao.AI, part of Dhisattva AI Pvt Ltd, as part of an ongoing effort to explain India-specific digital fraud patterns in plain language. This scam happens over a phone call, not a QR code or payment link, so the defence here is entirely about verification habits and the family safe word described above.
Related reading
For other scam breakdowns and recovery guides, see the blog at /blog. For broader digital safety
advisories, see CERT-In at https://www.cert-in.org.in, and the Department of Telecommunications'
Sanchar Saathi portal at https://sancharsaathi.gov.in to report or block fraud-linked mobile
connections.