Your weekly dose of scam-proofing in 3 minutes or less. No fluff, just the latest hacks, scams, phishing attacks, and cyber cons you actually need to know about.

Your phone rings.

It is your daughter. Crying. She has been in a car accident. She needs money now, or she is going to jail.

You recognise her voice. The fear in it. The way she says your name when she is upset.

So you send the money.

She never called.

Someone cloned her voice using AI, built a fake emergency in about forty seconds, and walked away with your cash.

Global losses from deepfake-enabled fraud exceeded $200 million in Q1 2025 alone. That is only the cases people actually reported.

1️⃣ They grab the voice

They do not need much. Fraudsters require as little as 3 to 10 seconds of audio to clone a voice convincingly.

That audio is sitting on your family's social media right now. TikToks. Instagram reels. A voice note posted publicly. A WhatsApp status. Even a misdial where someone says "sorry, wrong number" gives them what they need.

More than half of all adults share their voice online at least once a week. Most have no idea that it is a problem.

2️⃣ They build the clone

Voice cloning apps cost as little as $5 to $10 a month. Many are entirely free. 

The output captures tone, accent, and emotional range. It can sound panicked, guilty, tearful -- whatever the script calls for. And the script is always some variation of the same story.

3️⃣ They script the emergency

Common scenarios:

Every version has the same three ingredients: urgency, secrecy, and a reason why calling them back will not work.

4️⃣ They make the call

They ring a parent, a partner, a grandparent.

The voice is familiar. The panic sounds real. The story is plausible enough.

And the instruction is always the same: send the money now, and do not tell anyone.

Let us deal with the thing you are probably thinking.

"I would know. I would recognise if something were off. I would ask questions."

No offence, but that is almost certainly not true. And it is not because you are gullible. It is because you are human.

70% of people say they are not confident they could tell the difference between a real voice and a cloned one. That is, after being warned it exists. In the moment, with no warning, believing your child is in danger -- the number who would pause and interrogate the call is much, much lower.

In July 2025, Sharon Brightwell of Dover, Florida received a call from what sounded exactly like her daughter -- crying, saying she had been in a car accident and needed $15,000 to avoid criminal charges. Sharon sent the money. It was only after speaking to her real daughter that she discovered what happened.

Sharon is not a foolish person who made an obvious mistake. She is a mother who heard her daughter's voice in distress and did what any parent would do. That is the point. That is why this works.

These are not people who were asleep. They were caught exactly when the scam was built to catch them.

🚩 A family member calls from an unknown number, claiming their phone is lost or broken.

🚩 The story involves an emergency requiring immediate money.

🚩 You are told to keep it secret and not contact anyone else.

🚩 Any attempt to call back or verify is met with reasons why that will not work.

🚩 Payment is requested via bank transfer, cash, gift cards, or a courier.

✔ Set up a family safe word. Today.

This is the single most effective defence against this scam, and almost no one has done it.

A safe word is a short word or phrase known only to your immediate family. Not a pet name. Not a birthday. Not something that can be found by scrolling your social media. An inside reference. A shared memory. Something odd enough that a stranger could never stumble onto it.

If you receive an unexpected distress call from a family member, ask for the safe word before you do anything else. A real family member knows it immediately. A scammer does not.

One important rule: do not volunteer the word. The caller provides it. If you say "is it the thing from our holiday?" you have handed them the answer. Ask for it plainly and wait.

Share the safe word in person or through a secure, encrypted channel. Never post it online. If you suspect it has been compromised, change it.

Set it up with your family today. Not after the weekend. Today.

✔ Hang up and call back on a number you already have

If something feels wrong, hang up and call the person back using the number stored in your contacts. Do not call back the number that rang you. Scammers can attach the bot to the inbound number so it routes straight back to them. Use your contacts. That is the only safe option.

✔ Slow down before you move any money

A real emergency does not get worse because you took five minutes to verify it. The pressure to act immediately is not a feature of genuine crises -- it is a feature of scams. If someone is insisting you cannot wait, that insistence is the warning sign.

The UK's National Cyber Security Centre and UK Finance both advise the same behaviour: stop, pause, and verify through a completely separate channel before acting on any request that involves urgency and money.

✔ Limit the voice data your family puts online

Scammers search social media for videos of family members to harvest voice samples. You do not need to delete everything, but think about what is public, particularly for older relatives who may be targeted. Private accounts and locked-down settings reduce the raw material available to clone.

Hearing your child's voice is no longer proof that it is your child.

That is it for this week.

The rule used to be simple: you know the people you love by their voice. That rule is broken now, and the scammers who know that are already using it.

Set up the safe word. Have the conversation with your family. It takes ten minutes. It costs nothing. And it is the one thing that actually stops this scam cold.

A real emergency can wait five minutes while you verify. A scam cannot.

Catch you next time,

Dan & the Goldphish Team

📌P.S. If you are reading this and thinking, "I should send this to my parents" -- yes. You should. Do it now, before you forget.