Deepfake Voice Fraud

Layer 8: People High risk

How it works

Modern AI tools can produce a realistic imitation of someone's voice from a fairly short recording. Executives and business owners often have audio available online through interviews, podcasts, webinars, social media videos or voicemail greetings. Attackers use these samples to generate speech that sounds like a familiar leader, sometimes in real time during a call. The technology is inexpensive and widely available, so this is no longer limited to sophisticated criminal groups.

The cloned voice is then used to make urgent requests: approve a wire transfer, share a password, or send a confidential document. These calls are often paired with a follow-up email to reinforce the story. Because people instinctively trust a voice they recognize, traditional advice about spotting scams can fall short. Video deepfakes in online meetings are a growing variation of the same idea.

Warning signs

• A familiar voice making an unusual or urgent financial request
• Calls from an unknown number claiming a phone or travel problem
• Slight delays, flat tone or odd phrasing in the conversation
• Resistance when you suggest calling back or verifying
• Requests to keep the matter secret from others

How to defend against it

• Require call-back verification on a known number for payment requests
• Agree on a private code phrase for urgent executive requests
• Use multi-person approval for transfers above a set amount
• Brief leaders and finance staff on deepfake tactics
• Limit unnecessary public audio and video of key staff

If it happens to you

1. Pause the request and verify through a separate trusted channel
2. Contact your bank immediately if money was sent
3. Save call logs, numbers and any related messages
4. Report to police and the Canadian Anti-Fraud Centre