A loved one’s voice asks for money? End the call before you trust it
Panic, a familiar voice and instructions to keep the call secret can force a rushed payment. Use a simple family verification plan that also works against voice cloning.
- AUTHOR
- Karol Rapacz / CEO of Breachroad · OSCP · PNPT
- PUBLISHED
- 21 September 2026
- READING TIME
- 14 min read
- TOPIC
- Human Security
The phone rings late in the evening. You hear the voice of a daughter, partner or grandchild. They speak quickly, cry and say there has been an accident. A “police officer,” “doctor” or “lawyer” soon takes over. Money is needed for bail, treatment or emergency transport. You must tell nobody because the matter is confidential.
A familiar voice feels like stronger evidence than a phone number. It is not. A fraudster can imitate someone’s manner of speaking, play a recording, reuse short audio fragments or apply voice-cloning software. They can also guess and let a frightened recipient supply the relative’s name.
A safe response does not depend on identifying the technology. You do not need to distinguish synthetic speech from a real voice. You need a process that works in both cases: end the call, reach the relative through a known channel and verify the story without the person demanding money.
Pressure matters more than the quality of the voice
Family-emergency scams commonly combine:
- a sudden threat to somebody’s health, freedom or safety;
- a claim that only you can help now;
- instructions not to contact anybody else;
- an extremely short deadline;
- a difficult-to-recover payment method;
- an “authority figure” taking over the conversation.
The voice may sound perfect or appear distorted by “injury,” noise and poor reception. Either version prevents a calm exchange. A fake lawyer or officer gives the story institutional weight and makes questions feel like dangerous delay.
Do not try to win the argument. Say, “I will verify this and call back.” End the call even if the person protests. A genuine emergency will not disappear because you spend two minutes establishing what happened.
Call back through a channel you already know
Call the relative on the number that was saved before the emergency. Do not use the incoming-call history or a number supplied by the “lawyer.” If they do not answer, contact their partner, parent, flatmate, friend or the place where they are expected to be.
If the caller invokes a police force, hospital, embassy or school, find that institution’s official number independently. Call its main switchboard and ask how to verify the claim. Do not allow the suspicious caller to transfer you directly; the next voice may be part of the same operation.
For an immediate threat, call the emergency service responsible for the alleged location. Explain what you received without presenting the scammer’s story as confirmed fact.
A family safe word helps, but cannot be the only control
Agree in advance on a simple word or question reserved for emergencies. Avoid a pet’s name, birthday or anything visible on social media. It should be memorable for relatives and difficult for someone studying a profile to guess.
Do not label it “family security word” in a shared or public note. Change it after use or accidental disclosure.
The word is an extra obstacle, not final proof. A fraudster could learn it, while a real person under severe stress might forget. A correct answer therefore does not replace calling back. A missing answer should stop payment without stopping your independent effort to find out whether the relative genuinely needs help.
Ask about something the internet does not know
If you cannot end the call immediately, ask about a small shared experience. Avoid addresses, schools, birthdays and family names, which may be public or present in leaked data.
A better question concerns a detail known only inside the family: what broke on a particular trip, which joke was made at the last gathering, or where an agreed spare key is kept. Do not suggest the answer and do not accept “there is no time” as a reason to skip every check.
The question still does not replace a callback. Its purpose is to interrupt the script and recover time.
The requested payment reveals more than the voice
Pay attention to how the caller wants funds delivered. Gift cards, cryptocurrency, cash collected by a courier, an instant-payment code or a transfer to an unrelated individual are major warnings. The fraudster may say an official institution cannot accept an ordinary payment because the case is “secret.”
Do not travel to the bank while keeping the call active, and do not hide the reason for a withdrawal from bank staff. Instructions to lie to a bank or family protect the criminal, not your relative. Never share a screen or install remote-support software.
If someone is supposed to collect cash, do not arrange your own ambush. Contact law enforcement and follow its instructions. Physical safety matters more than attempting to catch the offender.
“But it really sounded like my son”
That emotional certainty is understandable. A voice contains pace, accent, characteristic pauses and breathing. This is precisely why the decision should move away from judging audio and toward a repeatable process.
You do not need to decide whether AI was involved. A short clip from a public video, voicemail or social post may support an imitation, but a criminal can also recruit someone with a similar voice. Every version fails against one rule: no emergency payment occurs before an independent callback and consultation with another person.
Do not blame someone who believed the call. The script is designed to trigger care for a loved one, fear and obedience to authority at the same time. Shame can cause a victim to continue sending money in secret.
A five-minute family plan
Agree on the plan while everybody is calm:
- Every emergency request for money requires ending the call.
- Call a saved number or a second relative.
- Use the family safe word as an additional check.
- Nobody decides alone on an urgent large payment.
- Verify police, hospitals and other institutions through their official switchboards.
- Never pay through gift cards, cryptocurrency or cash collection.
Print the plan in large type near the phone of anyone less comfortable with technology. Include the numbers of two relatives, but do not print the safe word itself.
Practise a short simulation without creating fear. One person presents an urgent story; the other says the agreed sentence, ends the call and performs the verification callback. A rehearsed habit is more useful than merely knowing that deepfakes exist.
If money has already been sent
Contact the bank, payment provider, cryptocurrency exchange or gift-card issuer immediately. State clearly that a family-emergency impersonation manipulated the payment. Ask whether the transaction or asset can be stopped, flagged or recovered.
Preserve phone numbers, messages, voicemail, recipient details, receipts and your exact recollection of the call. Report the incident to local law enforcement and any relevant national fraud-reporting service. Warn the family because the same group may approach other relatives with a similar story.
Do not publish the complete verification script or safe word. Be cautious when a supposed specialist contacts you unsolicited and guarantees recovery for another charge.
What the sources confirm, and what Breachroad recommends
The US Federal Trade Commission describes emergency scams in which callers impersonate relatives or authority figures, demand immediate payment and insist on secrecy. The FTC confirms that criminals can use a short audio sample and AI software to clone a family member’s voice. Its core advice is to end the call and independently contact the relative at a number you know.
The family safe word, private questions, five-minute plan and second-person review are Breachroad recommendations. They support rather than replace the independent callback and contact with authorities. A similar pressure pattern appears in the “Hi Mum, this is my new number” scam. Organizations and families can rehearse verification habits through our cybersecurity awareness training.

