Your phone rings.

It’s your boss. At least, it sounds like your boss.

There’s a payment that needs to go out right away. They know the details. They sound like themselves. Nothing about the voice makes you think twice.

Except the person on the phone might not actually be your boss.

Artificial intelligence can be used to clone voices and create convincing images and videos of real people. Scammers can combine that technology with personal or business information to make an impersonation feel surprisingly real.

So here’s an important thing to remember:

Just because someone sounds familiar doesn’t mean you’ve verified who they are.

What Is an AI Impersonation Scam?

AI impersonation scams use technology to help a criminal pretend to be someone you trust.

That might be your boss. A vendor. A family member. Your bank. An attorney. A customer.

Scammers may use publicly available photos, videos, voice recordings, job titles and information about business or personal relationships to make their story more convincing.

They can also use AI to create professional messages that include accurate names and details, match a familiar tone and sound much more polished than the scams many of us learned to watch for.

That’s why a typo-free message and a familiar voice aren’t enough anymore.

The “Boss” Needs a Payment Right Now

For businesses, executive impersonation can be particularly costly.

An employee could receive a call, voicemail or video message that appears to come from the CEO, owner or manager.

The request might be:

• Send an urgent wire.
• Pay an invoice.
• Change a vendor’s banking information.
• Update payroll.
• Buy gift cards.
• Share confidential information.
• Provide login credentials or an authentication code.

The request may sound perfectly reasonable.

But if it doesn’t follow your normal procedures, stop.

A familiar voice shouldn’t be able to bypass your company’s financial controls.

What If It’s a Vendor You Know?

A scammer may also pretend to be a vendor, contractor, customer or business partner.

You might receive a request to change banking information before paying the next invoice.

The company is real. The contact name is right. Maybe the message even references work that’s actually happening.

That still doesn’t mean the payment instructions are legitimate.

Verify changes independently using contact information your business already has on file. Don’t use the new phone number or email address contained in the request you’re trying to confirm.

“I’m in Trouble. Please Don’t Tell Anyone.”

Now imagine the voice on the phone belongs to your child or grandchild.

They’re hurt. They’ve been arrested. They’re stuck somewhere. They need money immediately.

And there’s one more thing: they don’t want you to tell anyone.

That’s a very different situation, but the same technology can be involved.

A scammer may use a recording of someone’s voice to create an imitation and pair it with an emergency story designed to make you act emotionally and quickly.

Don’t send money based solely on the voice you hear.

Hang up and call the person yourself using a number you already know. Contact another family member if necessary.

And pay attention when someone tells you to keep an emergency secret. Secrecy can be part of the scam.

The Caller Says They’re From Your Bank

AI impersonation can also make bank fraud sound more convincing.

Someone may tell you there’s fraud on your account, your online banking has been compromised or a transfer needs to be canceled.

Then comes the request.

They need your password. Your authentication code. Your account information.

Or maybe they tell you your money isn’t safe and needs to be transferred immediately.

Don’t follow those instructions.

Hang up and contact your bank yourself through a number or communication method you already trust.

And don’t move money into a “safe” account because an unexpected caller tells you to.

Stop Looking for the “AI Tell”

You might think you’ll be able to hear that something isn’t quite right.

Maybe the voice pauses strangely. Maybe the video looks a little off. Maybe the background noise doesn’t make sense.

Those things might catch your attention, but they aren’t a reliable security strategy.

You don’t need to prove whether a voice or video was generated by AI.

You need to determine whether the request itself is legitimate.

That distinction makes protecting yourself much simpler.

Businesses: Make a Second Check Standard

If your business regularly handles payments, vendor changes, payroll information or sensitive data, independent verification should be part of the normal process.

That might mean:

• Call an executive using the number in your company directory.
• Contact a vendor using information already on file.
• Require additional approval for significant payments.
• Verify vendor banking changes separately.
• Follow established procedures for payroll and direct-deposit changes.
• Use dual approval for significant or unusual transactions.

And here’s the important part:

Don’t verify a suspicious request using information supplied in the suspicious request.

If someone emails new payment instructions and provides a new phone number, don’t call that number to confirm.

Go back to the information you already trust.

At Home, Use the Same Rule

You can make independent verification part of your personal routine, too.

If a loved one unexpectedly calls asking for money, hang up and call them back yourself.

If you’re not sure what’s happening, reach out to another person you trust.

Be cautious if someone tells you not to speak with anyone else.

Never give an unexpected caller your password, PIN or one-time authentication code.

And consider creating a private family verification phrase for emergency situations—just make sure it isn’t something a stranger could figure out by looking through your social media.

Verify What Matters

AI is making it harder to rely on some of the things we’ve always trusted.

A voice.

A face.

A familiar name.

Even details about a relationship or transaction.

But protecting yourself doesn’t have to be complicated.

When someone unexpectedly asks you to send money, change financial information, provide credentials or share something sensitive, stop and verify the request through a channel you already trust.

The voice may sound real.

The situation may sound urgent.

But taking a few minutes to make sure you’re dealing with the right person can make all the difference.

When it matters most, verify.