Article

AI voice scam calls: the boss, the bank or family

By Cyberwareness Team · October 27, 2026 · 5 min read

A phone call from Boss showing a voice wave, with a hang-up and call-back button beside it

Got a suspicious email? Check it free Paste it into our free phishing checker and get a verdict with the red flags. No sign-up. Then run a free phishing test for your team. Check an email free →

Ngozi’s phone rings. The screen says “Mr. Adeyemi,” her boss. His voice is calm but quick. “I’m in a meeting. I need you to send a payment for a supplier. Do it now. I will explain later.”

It sounds just like him. She almost does it.

It was not him. A voice can now be copied from a short clip, like one from a talk or a social post. This guide is for everyone who answers a phone: at work, at home, with a bank or with family.

What are voice scams, and what changed?

A phone scam used to depend on the scammer being a good actor. Now software can copy a voice. The Federal Trade Commission explains that scammers can clone a family member’s voice from a short audio clip found online. The FBI also warns that criminals use AI-made audio and video to make fraud look real. And it has warned of AI voice messages that pose as senior officials.

You cannot rely on your ears. You need a habit.

Three calls come up again and again:

“The boss.” Urgent, secret, and about money or a gift card or a code.
“The bank.” “We saw fraud on your account. Move your money to a safe account” or “Read me the code we just sent.”
“A family member in trouble.” A child, a grandchild or a sibling who is hurt, arrested or stuck and needs money now.

All three have the same shape: someone you trust, a hurry, and a request that skips the normal steps.

A made-up phone screen of a call from Boss, with callouts for urgent money request, do not tell anyone, and read me the code, and a Hang up and call back button

What is the 10-second check?

Hang up. Call back. It works because a scammer cannot answer a number that belongs to the real person.

The 10-second check

Is it a hurry, a secret, or money? Those three together mean stop.
Hang up. It is fine to be rude. Real bosses and real banks accept this.
Call back on a number you already have. Use your contacts, the card in your wallet or the bank's app. Never the number the caller gave you, and never "redial."
Ask for the safe word, or ask something only the real person would know.

Four steps for a suspicious call: is it a hurry, a secret or money, hang up, call back on a number you already have, ask for the safe word

What should you say?

Short and polite works best.

To the boss: “I will call you right back on your usual number.”
To the bank: “I will call the number on my card.”
To a family member: “What is our word?”

If the caller gets angry or says “there is no time,” that is the sign. A real person can wait one minute.

What about the US and Nigeria?

The habit is the same everywhere. A few details are local.

In the US:

Banks do not ask you to move money to a “safe account.” Any call that does is a scam.
Report scams to ReportFraud.ftc.gov and, if money was lost, to IC3.gov.
The FTC page on family emergency scams is a good one to share with parents and grandparents.

In Nigeria:

No bank, mobile network or agency should ask you to read out your BVN, NIN, card PIN or one-time password. See how to spot BVN and OTP scams at work.
If you shared card, BVN or OTP details, call your bank on its official number at once. Tell the bank first, then your employer.
For unwanted or scam calls from a mobile number, tell your network. The Nigerian Communications Commission (NCC) also takes complaints. Check ncc.gov.ng for the current complaint line.

This guide covers phone calls. For WhatsApp messages and voice notes that claim to be the boss, see WhatsApp scams at work in Nigeria. For finance teams who approve payments, see deepfake CEO fraud: what finance teams must check.

A woman on a phone call at her desk, looking worried

How do you set up a family or team safe word?

It takes one minute.

Pick a word or phrase that is easy to say and hard to guess. Not a pet name or a birthday.
Tell the people you trust, face to face or on a call you started. Do not text it.
Agree that anyone can ask for it on any urgent call about money.
Change it if it is ever shared by mistake.

At work, the same idea is a call-back rule: any request to move money, change bank details or share a code gets a call back on a known number, and a second person.

What if you already acted?

Do not hide it. Every minute counts, and banks have seen this before.

Money sent? Call your bank on its official number now. Ask them to stop or recall the payment.
Gave a code or PIN? Say so to the bank. Ask them to block the card or account and reset your access.
Gave a password? Change it on the real site, and anywhere else you used it.
Work money or access? Tell your manager and IT right away. Our guide to what to do after clicking a phishing link has a good first-hour list that works here too.
Report it. Use the options in the US and Nigeria sections above.
Write it down. Number, time and what was said. Do not delete the call log.

Keep reading

This is one of three guides on phones and sign-ins. The others are how to check a QR code before you scan it and the sign-in prompt you did not ask for, and the fake login page.

Practice it safely

A rule is easy to forget when the boss is on the line. Practice helps. Our free phishing test shows how your team reacts to safe, made-up scams. See also how phishing simulation training works. Today our simulations are delivered by email, so call scenarios are written as email versions of the same pattern.

Questions people ask

Can scammers really copy someone's voice with AI?

Yes. The FTC warns that scammers can use a short clip of a person's voice, for example from a video posted online, to clone it. The FBI also warns that criminals use AI-made audio to make fraud look real.

How can I tell if a voice on the phone is fake?

You often cannot, so do not try. Hang up and call the person back on a number you already have. If it was real, they will pick up.

What is a family safe word?

It is a word or phrase only your family knows. If someone calls in a panic asking for money, ask for the word. A cloned voice will not know it.

What if the caller says it is my bank?

Hang up. Call the number printed on the back of your card or on the bank's own app. Do not use a number the caller gives you.

What should I do if I already sent money or gave a code?

Call your bank straight away on its official number and ask them to stop or recall the payment. Change any password you gave. Tell your employer if work money or access was involved. Report it to your local authority.