Use a callback protocol when a familiar voice asks for money

A voice that sounds exactly like a relative, executive, bank employee, or public official is no longer enough to authenticate a request. The FTC warns that scammers can clone a loved one’s voice from a short audio clip and combine it with urgency and secrecy (FTC). The response should not depend on detecting robotic speech.

Stop the requested action

Do not send money, disclose a code, install an app, or move to a new messaging platform. Say, “I will call back through our normal channel,” then end the call. If the caller refuses, threatens consequences, or insists on secrecy, treat that pressure as part of the risk—not as a reason to skip verification.

Do not rely on caller ID. A displayed number can be spoofed, and a compromised contact account can send convincing follow-up messages.

Write down the claimed event and requested payment before details blur.

Call back through a channel you already trust

Use the number saved before the incident, an official app, a company directory, or an independently typed official website. For a family request, contact the person directly and also contact another relative if they cannot be reached. For a bank call, use the number on the physical card or official statement. For a workplace payment, follow the documented approval chain.

The FBI advises independently confirming contact information when money or cryptocurrency is requested, especially when someone appears on a new number or platform (IC3). A callback to the number supplied by the caller is not independent.

Use a shared phrase carefully

A family or small team can pre-agree on a private phrase for unusual requests. Do not store it in a public social profile or say it into an unverified call. Ask the caller to provide it without hints. Then still call back when money, credentials, or sensitive records are involved; a phrase can be overheard or disclosed.

Avoid biographical questions whose answers appear online. “What was our last public vacation?” is weak if photos name the location. A deliberately chosen phrase plus a known-channel callback is stronger.

Agree in advance that nobody will be offended by the check. Families can name two backup contacts; businesses can place verified numbers and approval limits in a controlled directory. Rehearse the sentence used to end an urgent call. Preparation reduces the social pressure that makes a correct security step feel impolite in the moment.

Verify the story, amount, and destination separately

Confirm three facts with the real person: is there an emergency or business need, is this amount correct, and is this payment destination one previously approved? A true emergency can coexist with fraudulent payment instructions injected by someone else.

A hypothetical caller sounds like a sibling and requests $2,000 for bail by payment app. The recipient hangs up, calls the sibling’s established number, and reaches them safely at work. No audio analysis is needed. If the sibling cannot be reached, another family member and the institution supposedly involved can be contacted through independently sourced numbers.

If money or credentials were sent

Contact the payment provider or financial institution immediately through its official fraud channel. Ask whether a transfer can be stopped or recalled; do not promise yourself that it can. Change exposed credentials from a trusted device, revoke unknown sessions, and preserve the call log, voicemail, message thread, receipt, destination, and timestamps. Report the incident to the FTC and IC3 where appropriate.

If the request involved an invoice or executive instruction, follow the invoice bank-change verification workflow. If the scammer obtained an authentication code or account access, review passkeys, recovery, and phishing resistance rather than changing only one password.

The protocol is deliberately simple: pause, leave the channel, call a known endpoint, verify with another person, then act. A real person with a real urgent need can tolerate a short independent check.

Sources

• FTC, Scammers Use Fake Emergencies To Steal Your Money
• FBI IC3, Senior U.S. Officials Continue to be Impersonated in Malicious Messaging Campaign