AI is transforming business… and unfortunately, so is fraud. This week’s insight looks at how cybercriminals are using AI-powered voice cloning to impersonate people you know—and how UK businesses can stay one step ahead.
🎙️ What’s Voice Cloning – and Why Should You Be Concerned?
With just 10 seconds of audio, fraudsters can now replicate a person’s voice—be it your CEO, your finance director, or even you. These clones are shockingly convincing, complete with tone, accent, and urgency. And when that cloned voice calls with a “quick favour”, many people respond before thinking.
This isn’t a theoretical threat. Back in 2019, a UK energy firm lost £200,000 when an employee was tricked into transferring funds after receiving a call from what sounded like their boss. The catch? The voice was fake—and the money vanished.
And it’s escalating. According to Starling Bank, 28% of UK adults have been targeted by an AI voice scam in the past year. Yet nearly half remain unaware such scams exist.
🔍 How These Scams Work
- Step 1 – Gather audio: Fraudsters lift voice samples from YouTube, LinkedIn videos, podcasts, or even voicemail messages.
- Step 2 – Clone: Tools like ElevenLabs or similar platforms can mimic a person’s voice in minutes.
- Step 3 – Call: The scammer phones the victim, posing as someone senior, often requesting an urgent payment or sensitive data.
- Step 4 – Pressure: With the tone and emotion sounding right, the victim complies—fast.
It’s not science fiction anymore. It’s happening now.
🎯 Why SMEs Are Prime Targets
Small businesses are often more vulnerable because:
- Internal controls may be lighter.
- Staff are more likely to trust a familiar voice.
- Fraudsters know urgency trumps caution during a crisis.
🛡️ Six Ways to Protect Your Business
- Use a second channel for financial authorisations.
Always verify payments via secure messaging or a known contact number—never act on a call alone. - Set up internal “code words.”
These should be used during high-risk calls or urgent requests. If the caller doesn’t know the phrase, hang up. - Train staff to pause before acting.
If something feels “off”, it probably is. Empower staff to say “no” without fear. - Limit executive audio exposure.
Be cautious with publishing voice-rich content of your leadership team online. - Tighten social media settings.
Keep LinkedIn profiles professional. Remind staff not to overshare (especially job roles or travel plans). - Report and respond.
If you suspect a voice scam, stop, verify, and report it to Action Fraud. The sooner you act, the better your chances of recovery.
🧠 It’s Not Just Tech – It’s Psychology
As Ben Colman from Reality Defender puts it:
“Any strategy that relies on hearing the difference is already outdated. You need processes, not your ears.”
Voice cloning doesn’t hack your systems—it hacks your trust.
🤔 What Does This Mean For Your Business?
Voice isn’t proof anymore. If someone can fake your boss’s voice and create urgency, traditional defences won’t cut it. The good news? With the right processes and a trained team, these scams are avoidable.
This is a leadership issue as much as a tech one. If you haven’t yet reviewed your internal verification process, today might be a good time.
Because when the call comes in, it will sound convincing. And that’s the point.