Skip to main content

Voice Cloning and Grandchild Scam: How to Recognize a Fake Call from a Loved One

A voice on the phone sounds like a grandchild, but it's a scammer. Learn how voice cloning and deepfake work, how to verify the caller, family passwords, a guide for seniors on the phone, and where to report scams in Poland and the USA.

Warning: if you just received such a call, read this first. Hang up. You are allowed to do so, even if the caller says you shouldn't. Call your loved one at the number saved in your phone. Do not call back the number that called you. Do not send money, SMS codes, or gift cards to anyone, whether a courier or via transfer, until you confirm the situation with your family. The police and banks never ask for money over the phone. If money has already been sent: first contact the bank, then the police. In Poland, call 112 or 997, in the USA 911 and report at complaint.ic3.gov.

The phone rings late at night. You hear crying and a familiar voice: "Grandma, I've had an accident." Shortly after, someone who identifies themselves as a police officer joins the conversation and says that money needs to be sent quickly.

This scenario has been around for decades. One thing has changed: today, the voice can genuinely sound like your grandchild's, as it can be replicated by computer software. The FBI warned about this in an official statement on December 3, 2024, and the U.S. Federal Trade Commission (FTC) already in March 2023.

The good news is that defense does not require technical knowledge. It requires one habit: hang up and call back your own number. Below you will find how to do this in practice, on both the Polish and American sides.

What a Classic "Grandchild" Scam Looks Like

The scheme is simple and repeatable. Someone calls claiming to be a family member, most often a grandchild or child, less frequently a spouse or parent. They say that something unfortunate has happened: an accident, an arrest, serious trouble. Quick financial help is needed.

The conversation has three constant elements: strong emotions, urgency, and a request for discretion. The Polish Police have been describing this scheme for years, and in a statement from February 27, 2023, prepared with FinCERT.pl – the Banking Cybersecurity Center of ZBP, they indicate two variants: "grandchild" and "police officer."

The victim has no chance to think. It is not a matter of intelligence or age, but of a scenario written to disable a cool assessment of the situation.

Variants: Police Officer, Prosecutor, Lawyer, Hospital

The "grandchild" is just the beginning. The most common extensions include:

  • As a police officer. A "police officer" joins the call, confirms the story, provides a rank and case number.
  • As a prosecutor. The same mechanics, higher authority: "proceedings," "district prosecutor's office," "secret operation."
  • As a lawyer. Someone supposedly represents a loved one and needs a retainer to "settle the matter before nightfall."
  • Fake call from the hospital. A "doctor" or "paramedic": a loved one is in an accident, urgent payment for treatment or transport is required.
  • Fake arrest. A loved one is supposedly already at the police station and "cannot talk."
  • Fake accident with a victim. A loved one supposedly hit someone and needs to pay the victim's family.

The same scheme can be used without a family thread, with a "bank employee" who instructs to "secure funds." The police and FinCERT.pl describe this as a fake "technical account" or "secure". If someone over the phone instructs you to transfer money to such an account, the conversation ends at that moment.

Bail: Why This Word Should Raise a Red Flag

Only in the USA: in the American system, bail (bail) really exists. It is set by the court and is paid to the court or jail or through a licensed intermediary (bail bondsman). No one from the court or police will collect bail from a courier at your home, accept it in gift cards, or in cryptocurrency.

Only in Poland: in Polish criminal proceedings, there is no "bail" that is paid over the phone to release someone that night. A property preventive measure is applied by the court or prosecutor by decision, and the money goes to a deposit, not to the caller's hands.

The conclusion is the same on both sides of the ocean: the word "bail" in an unsolicited phone call is a warning signal, not a procedure.

What Voice Cloning Has Changed

The FBI in the IC3 statement from December 3, 2024 (alert number I-120324-PSA) describes it directly: criminals "generate short audio recordings containing the voice of a loved one to impersonate a relative in a crisis situation and request immediate financial assistance or demand ransom."

The FTC described the same thing back in March 2023: a scammer only needs a "short recording of a family member's voice, which can be obtained from content published online," and a voice cloning program.

In the FBI's 2025 annual IC3 report, this phenomenon is explicitly named. Distress scams, such as the "grandchild" scam, in which "voice cloning technology is used to mimic the voice of a loved one in distress," resulted in reported losses of over 5 million dollars in 2025. The FBI adds that the scheme "is evolving towards mimicking other family members or close friends."

This number should be read cautiously, and the FBI presents it as such: it pertains to reports with likely AI involvement (likely AI-nexus) and includes only cases reported to IC3.

The source material does not have to come from a hack. Public content is sufficient: a TikTok video, an Instagram story, a YouTube video, an audio recording in a Facebook group. This is the same mechanism we describe in the guide about holiday photos in the hands of a scammer. Here, the raw material is the voice instead of a photo.

The practical consequence is serious: voice recognition has ceased to be proof of identity. Throughout our lives, we have learned that if someone sounds like our child, it is our child. This principle no longer holds.

How Much Recording Does a Scammer Need and Why This Is Not the Right Question

The media circulate the number "three seconds." Sometimes it’s "30 seconds" or "a minute."

No specific number of seconds has been confirmed in the primary source. The FBI writes about "short audio recordings," the FTC about "a short recording of a voice." None of these institutions provide a time threshold. The number "three seconds," which can even be found under the FTC article, comes from a reader's comment, not from the agency.

Why does this not change the recommendations? Because the time threshold has no operational significance. If someone in your family has ever published a recording of their voice, the material already exists. The dispute over three seconds or thirty does not affect the decision when on the phone. It remains the same: hang up and call back.

Be cautious with the limitations of technology as well. The FBI advises to "carefully listen to the tone and choice of words" and check images and video recordings for imperfections, such as distorted hands and feet or unrealistic features.

Do not turn this into a list of "how to recognize an artificial voice." Detection methods are still being developed. The FTC announced the results of the Voice Cloning Challenge on April 8, 2024. The awarded solutions are algorithms that detect synthetic speech, watermarks in recordings, and authenticate the human origin of the voice. These are technological proposals, not something that an average person has on their phone today.

Do not rely on your own ear. Rely on the procedure.

Deepfake Videos and Fake "Police Officer" on Video Calls

Video has ceased to be a guarantee. The Polish Police and FinCERT.pl ZBP warned on July 21, 2026, that criminals "use video calls to convincingly 'impersonate' another person during a conversation."

The scheme: the scammer initiates a video call in a messenger, appears in uniform, refers to an ongoing investigation, and then switches the victim to another person impersonating a bank employee. Among the warning signals, the police mention "inconsistencies in information or strange behavior of the interlocutor (e.g., unnatural image, artificiality of the character)."

A uniform on the screen is not an ID.

Can anything be noticed? Sometimes yes. The FBI describes observable flaws in its 2025 IC3 report, although it does so using the example of fake job interviews, not family scams. According to the FBI, "the actions and lip movements of the person visible on the camera do not fully match the sound," and "coughing, sneezing, or other sounds may be out of sync with what is visible on the image."

This is a hint, but not a test. The absence of such flaws does not prove that the interlocutor is genuine.

Number Spoofing and Hacked Accounts in Messengers

Spoofing is impersonating someone else's phone number. A familiar number appears on the display: a loved one, a command, or differing by one digit. CBZC reminds you not to provide personal data or authorization codes and not to initiate transfers under the influence of the caller's persuasion.

Only in Poland: spoofing and smishing are regulated by the Act of July 28, 2023, on combating abuses in electronic communication (Dz.U. 2023 poz. 1703). UKE signed an agreement with operators: in case of detecting spoofing, the call should be rejected or established without displaying the number ("Unknown Number"). This is a real change, but it does not relieve you of the obligation to verify.

Only in the USA: the FCC runs pages on caller ID spoofing and unwanted calls. The principle is the same: the number on the display is not proof.

A separate issue is hacked accounts. If someone takes over your son's WhatsApp, Messenger, or Facebook account, the message will come from his real account, with his photo and chat history. The most common way to take over is by tricking someone into providing a verification code: "I accidentally sent you a code, please send it back to me." Never send that code to anyone, ever.

Pressure Mechanics: Secret, Cash, Courier, Cards, Cryptocurrencies

Each element of the scenario has its function. Named, they cease to work.

A request for secrecy ("don't tell your parents," "it's a secret operation") cuts the victim off from the only person who could ask a sober question. The police list "secret police operation" as a warning signal.

Time pressure blocks the instinct to check. There is no procedure that requires a financial decision in forty minutes and prohibits consultation.

Cash and courier because cash handed over cannot be reversed or traced. The police have been describing this variant for years: perpetrators want "to have money handed over to them by a mysterious courier, left on the street, or transferred."

Gift cards because the code from the card is cash that can be monetized anonymously. No public institution accepts payments in gift cards.

Cryptocurrencies and instant transfers because the funds disappear before anyone can react. The FTC warns that cryptocurrency payments do not have the same legal protection as card payments, so recovering money can be difficult.

Impersonating the police works because the uniform shuts down discussion.

How the Police Actually Contact You in Poland

Only in Poland. The Polish Police state this unequivocally. In the statement "Fraud 'As a Police Officer' – Be Careful," they write that police officers "never demand that we hand over cash in any way" and that "they never involve us in their operations, do not ask about account status, do not require making any transfers." In an older statement (from 2022), it is stated: "officers never inform about ongoing investigations over the phone! They never ask for money!"

What a real police officer or prosecutor will not do over the phone:

  • will not ask for cash, a transfer, or to hand over money to a courier,
  • will not ask about account status, login data, or the authorization code from an SMS,
  • will not demand to keep the conversation secret from family,
  • will not propose participation in a "secret operation,"
  • will not instruct you to transfer money to a "technical account" or "secure account."

If you have doubts: hang up and call 112 or 997, or the station number you verified yourself, not the one given by the caller.

How the Police Actually Contact You in the USA

Only in the USA. The rules are similar. No federal agency or local police will call demanding immediate payment via gift cards, cryptocurrency, Western Union, MoneyGram, or cash picked up by a courier.

The FTC formulates it even in relation to itself: the commission "will never threaten you, say that you must move money to 'protect' it, or instruct you to withdraw cash or buy gold and hand it to someone." A lawyer is chosen independently, not accepted from someone who called first. In an emergency, you call 911.

Ten Examples of Scammer Conversations

All of the following conversations are illustrative examples. Names and situations are fictional.

Example 1: classic "grandchild." "Grandma, it's me... I had an accident, I have a broken jaw, that's why I sound so strange. Don't tell mom. I need ten thousand by tonight." "That's why I sound so strange" is a ready explanation for any discrepancies in the voice.

Example 2: the victim provides a name. "Hi, guess who?" – "Tomek?" – "Yes, grandma, Tomek." The scammer does not know the name. They get it from the victim.

Example 3: transfer to a "police officer." "You are speaking with a sub-commissioner. Your grandchild caused an accident. The matter can be settled, but you must act now and not inform anyone."

Example 4: prosecutor. "District prosecutor's office. Your account is being used without your knowledge. Please do not hang up and do not contact anyone, as this could lead to charges of obstructing the investigation."

Example 5: lawyer. "I represent your son as a public defender. There is a chance for release today, but I need a retainer by six o'clock. A courier will be here in half an hour."

Example 6: hospital. "I'm calling from the emergency room. Your daughter is in an accident and requires immediate surgery. Insurance does not cover transport."

Example 7: "secure account." "I'm calling from the bank's security department. Someone is trying to take out a loan in your name. We need to transfer your savings to a technical account."

Example 8: video call with a "police officer." On the screen, a person in uniform: "You see that I am a real police officer. I will soon connect you with a bank employee who will confirm this."

Example 9: grandchild abroad. "Aunt, I'm in Chicago, I was stopped at the airport, they took my phone. Don't call back this number, because it's not mine." The prohibition on calling back is one of the strongest warning signals.

Example 10: second wave after loss. "I'm calling from the recovery team. We have tracked your money. To initiate the refund, a processing fee is required." Victims may be attacked a second time by the same people.

Five Examples of Fake Messages

All of the following messages are illustrative examples.

Example A. "Mom, I lost my phone, this is my new number. Write on WhatsApp, I have an urgent matter."

Example B. "Dad, I can't talk right now, I'm at the police station. I need a transfer, I'll pay you back on Friday. Don't call, just text."

Example C. "I accidentally sent you an SMS code. Please send it back to me, it's about my account." This is a classic account takeover in a messenger.

Example D. "Law office. A payment is required for your grandchild before 6 PM. Details at the link." The link leads to a fake payment page.

Example E. "Notification of package detention for Mr. [surname]. A surcharge of 3.50 PLN is required." Another scenario, but often precedes a call: it serves to determine who reacts to messages.

Common features: new number, prohibition on calling, request for code, link, amount, and deadline.

Table: What the Scammer Says, What to Do

What the Scammer SaysWhat to Do
"Grandma, it's me, I had an accident"Do not provide a name. Say "I'll call back" and hang up.
"Don't tell this to your parents"Call your parents immediately. Secrecy is part of the scam.
"Don't hang up, it's important"Hang up. This is the only thing the scammer wants to block.
"I'm calling from the police, we are handling a case"Hang up and call 112 or 997 (USA: 911) or the station from your own contacts.
"You need to pay bail today"Bail is not set over the phone. Verify with the source.
"A courier will come for the money"Do not open the door. No institution collects cash via courier.
"Please transfer funds to a technical account"Hang up. Call the bank's hotline from the back of your card.
"Please buy gift cards"This is always a scam. Without exceptions.
"Send me the SMS code"Never send the code. Not even to a friend.
"This is my friend's number, don't call back"Call the number you have saved.
"We are from the money recovery team"Report this as another scam. No one recovers money for a fee in advance.

How to Verify the Caller

One rule to remember forever:

Hang up. Call back yourself. To the number you have saved.

The FBI states this identically: verify the identity of the caller by hanging up, establishing contact independently, and calling that number directly. The FTC adds: do not trust the voice, call the person who supposedly contacted you using a number you know is theirs. If you cannot get through, try through another family member or friends.

Some practical notes:

  • Do not call back using the "call back" button. Select the contact from your phone book or enter the number manually.
  • Hang up completely and wait a moment.
  • Do not check the number in a search engine. Fake hotlines may be advertised in the results.
  • If a loved one does not answer, that is not confirmation of the story. Call someone else.

Verification questions that work: those that have no answer available online, i.e., a shared, unpublished memory: what did we eat at the last dinner, what broke in the car.

Questions that do not work: mother's name, maiden name, dog's name, date of birth, street. All of this is on social media or in data leaks. Worse, by asking such a question, you give the scammer a hint on how to respond.

Why voice recognition is no longer sufficient: because the voice can be replicated from public recordings, and crying, background noise, and a "broken jaw" are in the script to mask imperfections.

Family Security Password

The FBI recommends this directly: "Establish a secret word or phrase with your family to verify identity."

Construction rules:

  1. It cannot come from your biography. No names, dates, places, animals, favorite teams.
  2. It must not appear anywhere online: neither in posts, comments, nor chats.
  3. It should be easy to pronounce under stress: two or three ordinary words.
  4. It should be absurd, not logical. An association that no one will guess because it makes no sense.
  5. Establish it face to face. Never via SMS, email, or messenger, and do not write it down on your phone.
  6. Also establish a response to the password. One person says the password, the other responds with the agreed word.
  7. Change it if it was mentioned in front of strangers or in a conversation with a scammer.
  8. Absolute rule: lack of a password means the end of the conversation. Even if the voice sounds familiar. Especially then.

We consciously do not provide a sample password. A password printed in the guide ceases to be a password.

Family Response Plan

The plan only makes sense if established before the phone rings.

  1. Designate a contact person: one person to call every time there is a suspicious phone call, plus a backup person.
  2. Establish a family password according to the rules above.
  3. Agree on a zero rule. No one in the family ever asks for money over the phone without confirmation through another channel.
  4. Write down numbers on a piece of paper next to the phone: children, grandchildren, bank, station, 112 or 911.
  5. Agree on no consequences. If someone has been deceived, the family reacts with help, not judgment.
  6. Practice it once. One trial call where the senior says "I'll call back" and hangs up is worth more than ten conversations about threats.
  7. Return to the topic in six months. Scenarios change.

Phone and Account Configuration

Below are only functions confirmed in the official documentation of manufacturers. Names in the interface may vary between system versions.

iPhone (iOS 26). In the Phone app settings, there is an option Classify Unknown Callers with options Never, Ask for Reason for Call, and Silence. Call Filtering (Unknown Callers, Spam) works separately. In FaceTime, there is a separate setting Silence Unknown Callers. A number can be blocked individually (Block Contact). Apple notes that call classification is disabled 24 hours after calling an emergency number and does not work in roaming.

Android (Google Phone app). Available are Caller ID and Spam Protection and Block Phone Number. The Call Screening function works only on Pixel phones and in selected countries – Poland is not on Google's list.

Operators. Only in the USA: you can register a number with the National Do Not Call Registry (donotcall.gov). This limits legal telemarketing but does not stop scammers. Only in Poland: operators are required to filter SMS according to CSIRT NASK patterns and combat spoofing under the 2023 Act.

WhatsApp. Enable two-step verification (PIN) – protects against someone taking over your number by tricking you into providing an SMS code. There is also a function to silence calls from unknown people. Instructions are in the WhatsApp Help Center.

Facebook and Messenger. Enable two-factor authentication. If your account has been hacked, the starting point is facebook.com/hacked.

Limiting Source Material. The FBI advises: limit the publication of content featuring your image and voice, set social media accounts to private, and restrict your follower list to people you know.

How to Talk to a Senior Without Embarrassing Them

This is the most difficult part and often overlooked. A few things that help:

Do not start with a warning, start with a request for help. "Mom, let's establish a password because I'm afraid someone will impersonate me" works better than "you need to be careful because you'll be scammed." In the first version, the senior is a partner, in the second, a problem.

Do not say "because you don't understand technology." Voice cloning deceives people of all ages.

Do not test the parent without warning. A staged "test call" is humiliation, not training.

Instead of a lecture, one sentence. "If someone calls and asks for money, hang up and call me."

Say directly that you will never call for money. "If you hear my voice and a request for a transfer, it’s not me."

Remove shame from the outset. "If this happens to you, just call me. I won't judge." Victims who fear family reactions report losses too late or not at all. If a senior has already lost money, do not start with "how could you" – start with the bank.

Instructions to Print by the Phone

IF SOMEONE CALLS AND ASKS FOR MONEY

1. DO NOT PROVIDE A NAME. Let the caller introduce themselves.

2. SAY: "I'LL CALL BACK" AND HANG UP. You are always allowed to hang up.

3. CALL YOURSELF to the number saved in your phone. Not the one that called you.

4. ASK FOR THE FAMILY PASSWORD. No password = end of conversation.

5. NEVER GIVE: cash to a courier, SMS codes, gift cards, bank details.

6. THE POLICE NEVER ask for money over the phone.

7. CALL SOMEONE FROM YOUR FAMILY. Always, even at night.

IN CASE OF DOUBT: 112 (Poland) / 911 (USA)

Numbers of loved ones: ................................................

What to Do Immediately After Losing Money

Order matters. The first hour counts the most.

1. Call the bank. Report the fraudulent transaction and ask for an attempt to stop the transfer. Call the number from the back of your card or from the bank's official website.

2. Report to the police. Only in Poland: a report is made at the nearest police station or prosecutor's office. Only in the USA: notify the local police and file a report with IC3.

3. If you handed cash to a courier: call 112 or 997 immediately (USA: 911). Note the time, description of the person, make and color of the car, direction of departure. If there is monitoring in the building, ask the administration to secure the recording the same day.

4. If you bought gift cards: Only in the USA: the FTC advises contacting the card issuer, stating that it was used in a scam, and requesting a refund. Keep the card and receipt. Sometimes the funds have not yet been withdrawn.

5. If you made a transfer through a money transfer company: Only in the USA: the FTC (in the guide on money transfers) provides contacts to report a fraudulent transfer: MoneyGram 1-800-926-9400, Western Union 1-800-448-1492, Ria (transfers outside Walmart) 1-877-443-1399, Ria (Walmart2Walmart and Walmart2World) 1-855-355-2144.

6. If you sent cash by mail: Only in the USA: the FTC provides the U.S. Postal Inspection Service number 877-876-2455 and advises requesting interception of the package.

7. If you sent cryptocurrency: report the transaction to the company through which you sent it. The FTC notes that recovering such money can be difficult.

8. If you provided login details: change your password immediately, and if you use it elsewhere, change it there as well. Enable two-factor authentication.

9. If you provided personal data. Only in the USA: if you disclosed your SSN, go to identitytheft.gov. Only in Poland: consider blocking your PESEL number at gov.pl or in the mObywatel app.

10. Secure evidence. Take screenshots of calls and messages, note numbers, times, amounts, account numbers, transfer confirmations, receipts, cryptocurrency wallet addresses. Write down your account of the conversation while details are fresh in your memory. Do not delete SMS or chat history.

11. Alert family and friends. If an account in a messenger has been taken over, the same story reaches all contacts.

12. Expect a second attack. An offer of "recovering money for a fee" is another scam.

Honest warning: reporting does not mean that money will be returned. The bank is not obliged to return funds transferred knowingly by the client under the influence of a scammer, and regulations and practices differ between Poland and the USA and among institutions. Nevertheless, report it. Without a report, the chances drop to zero.

Common Mistakes

  • Providing a name at the beginning of the conversation. "Tomek, is that you?" gives the scammer your entire identity.
  • Calling back using the "call back" button. This is the same number that was spoofed.
  • Treating a known number or video image as proof. Both can be faked.
  • Giving in to a request for secrecy. Secrecy is a condition for the scammer's success.
  • Sending an SMS code back to a friend. Even if the account is real, it was taken over just like that.
  • Delaying notifying the bank out of shame. Every hour decreases the chances.
  • Having only one conversation with family. Without repetition and without an established password, this is not a plan.

Myths and Facts

Myth: since I hear their voice, it must be them. Fact: the FBI and FTC describe generating short recordings of a loved one's voice based on publicly available materials. The voice is no longer proof of identity.

Myth: the number on the display is my daughter's, so it must be her. Fact: spoofing allows any number to be displayed. CBZC describes this phenomenon directly.

Myth: this only affects older people. Fact: the scheme is based on fear for loved ones, not on age or lack of knowledge.

Myth: I will recognize an artificial voice by its robotic sound. Fact: the FBI advises paying attention to tone and word choice, but does not provide a certain method of recognition.

Myth: just don't answer unknown numbers. Fact: this helps, but the call can come from a hacked account of a friend or from a spoofed family number.

Myth: the bank can transfer money to a "technical account" for safety. Fact: the police and FinCERT.pl ZBP state unequivocally that the bank never asks for this.

Myth: "three seconds of recording is enough" – this is a technical fact. Fact: this number has not been confirmed in the primary source. Institutions write about "short recordings," without providing a threshold. Recommendations remain the same regardless of the number of seconds.

Where to Report Fraud or Incident

Only in Poland:

  • 112 – emergency number. 997 – Police. Both are operational.
  • Report a crime: at the nearest police station or prosecutor's office.
  • Suspicious SMS: forward it to 8080 to CERT Poland. Reporting is free (outside Poland, the cost is according to the operator's tariff). Provide the entire message in its original form, without cutting the link. A maximum of 3 messages can be reported from one number within 4 hours.
  • Internet incident: form at incydent.cert.pl.
  • CBZC accepts information useful in combating cybercrime: kontakt.cbzc@cbzc.policja.gov.pl, 24/7 Service Department 47 72 136 99. This does not replace a crime report.
  • Bank: hotline from the back of your card or from the bank's official website.
  • Block your PESEL number: at gov.pl or in the mObywatel app.

Only in the USA:

  • 911 in an emergency. Otherwise, local police station.
  • FBI IC3: report at complaint.ic3.gov.
  • FTC: ReportFraud.ftc.gov.
  • Identity Theft: IdentityTheft.gov.
  • AARP Fraud Watch Network Helpline: 877-908-3360, Monday to Friday, 8:00 AM–8:00 PM Eastern Time.
  • Bank, card issuer, money transfer company: immediately, contacts as above.

Key Principles

  1. Hang up and call back to the number you have saved. This one rule alone stops most of these scams.
  2. The voice is not proof of identity. Video is not either.
  3. The number on the display is not proof of identity.
  4. Do not provide a name to the caller. Let them introduce themselves.
  5. The police and banks never ask for money, codes, or transfers to a "secure account."
  6. A request for secrecy from family is a warning signal, not a procedure.
  7. Gift cards, cryptocurrencies, cash for a courier: no institution is paid in these forms.
  8. Establish a password with your family and a rule: no password means the end of the conversation.
  9. Limit public recordings of your voice and your children's.
  10. After a loss, act immediately and without shame. First the bank, then the police.

Checklist

  • We have established a family security password (face to face, not via SMS)
  • We have established a response to the password
  • We have designated a contact person and a backup person
  • I told my parents and grandparents: "I will never ask you for money over the phone"
  • A printed instruction sheet is next to the senior's phone
  • Numbers of loved ones are saved in the senior's phone under clear names
  • The bank hotline number is saved separately
  • Spam protection and caller identification are enabled on the phone
  • WhatsApp: two-step verification (PIN) is enabled
  • Facebook and Messenger: two-factor authentication is enabled
  • Family social media accounts are private
  • We reviewed public videos featuring the voices of children and grandchildren
  • We practiced a call once: "I'll call back" and hung up
  • Only in the USA: the number is in the donotcall.gov registry
  • Only in Poland: I know that suspicious SMS should be sent to 8080
  • We agreed that after a loss, no one judges anyone

Frequently Asked Questions

Can my grandchild's voice really be faked?

Yes. The FBI and FTC describe this as a real, used method. The source material can be publicly available content.

How much recording does a scammer need?

No specific number of seconds has been confirmed in the primary source. Institutions write about "short recordings." For your decision on the phone, this is irrelevant; you still need to call back.

Will I recognize an artificial voice by its sound?

Do not count on it. The FBI advises paying attention to tone and word choice, but does not provide a certain method.

The number on the display was my daughter's number. How is that possible?

This is spoofing. The number can be faked. In Poland, the 2023 Act imposes an obligation on operators to combat this phenomenon, but effectiveness is not one hundred percent.

Can the police ask for money to be transferred?

No. The Polish Police state that officers "never demand that we hand over cash in any way." The same is true in the USA.

A loved one calls from a new number and says they lost their phone. What to do?

Call the old number. Call another family member. Ask for the password. Do not send money to the new number.

A friend asks me to send back an SMS code. Is it safe?

No. This is how accounts in messengers are taken over. The code should never be sent back to anyone.

Will the bank return my money?

There is no guarantee, especially if the transfer was initiated voluntarily under the influence of a scammer. Report the case immediately, but do not assume a refund.

Is it worth reporting since I probably won't get my money back?

Yes. Reporting can help stop the transfer, initiate proceedings, and contribute to statistics that lead to changes in laws and protections.

I received a call offering to recover lost money. Is this help?

No. This is another scam, often directed at people who have already lost once.

Should I delete all recordings from the internet?

You do not have to, but it is worth limiting public access. The FBI recommends setting accounts to private and limiting the follower list to known individuals.

Does this only apply to phones?

No. The same scenario appears on WhatsApp, Messenger, and in video calls.

Sources

SourceTypeStatus / Credibility
FBI IC3: Criminals Use Generative Artificial Intelligence to Facilitate Financial Fraud (I-120324-PSA, 3.12.2024)Official pageOfficial
FBI IC3: 2025 IC3 Annual Report (pp. 40–41)Official pageOfficial
FTC: Scammers use AI to enhance their family emergency schemes (20.03.2023)Official pageOfficial
FTC: Fighting back against harmful voice cloning (8.04.2024)Official pageOfficial
FTC: FTC Announces Winners of Voice Cloning Challenge (8.04.2024)Official pageOfficial
FTC: What To Do if You Were ScammedOfficial pageOfficial
FTC: What To Know Before You Wire Money (MoneyGram, Western Union, Ria numbers)Official pageOfficial
FBI IC3: reporting formOfficial pageOfficial
FTC: ReportFraud.ftc.govOfficial pageOfficial
FTC: IdentityTheft.govOfficial pageOfficial
National Do Not Call RegistryOfficial pageOfficial
AARP Fraud Watch Network HelplineNGOCredible, independent of government
FCC: Caller ID SpoofingOfficial pageOfficial
FCC: Stop Unwanted Robocalls and TextsOfficial pageOfficial
Police and FinCERT.pl: The Fraud You See. Beware of Video Calls (21.07.2026)Official pageOfficial
Police and FinCERT.pl: Beware of "grandchild" scams (27.02.2023)Official pageOfficial
Police: Fraud "As a Police Officer", let's be careful (13.05.2022)Official pageOfficial, archival material
CBZC: Spoofing, or impersonating another phone numberOfficial pageOfficial
CBZC: contact detailsOfficial pageOfficial
gov.pl: Received a disturbing SMS or email? Report it to CERT PolandOfficial pageOfficial
CERT Poland: contactOfficial pageOfficial
CERT Poland: report an incidentOfficial pageOfficial
Act of July 28, 2023, on combating abuses in electronic communication (Dz.U. 2023 poz. 1703)Legal actOfficial, official text
UKE: agreement with operators on spoofingOfficial pageOfficial
gov.pl: Other emergency numbersOfficial pageOfficial
gov.pl: Block your PESEL number or lift the blockOfficial pageOfficial
Apple: Managing Unknown Callers on iPhoneProvider documentationOfficial for this service
Apple: Blocking phone numbers, contacts, and email addressesProvider documentationOfficial for this service
Google: Caller Identification and Spam ProtectionProvider documentationOfficial for this service
Google: Blocking and Unblocking Phone NumbersProvider documentationOfficial for this service
Google: Call Screen, availability in countriesProvider documentationOfficial for this service
WhatsApp: two-step verificationProvider documentationOfficial for this service
Facebook: two-factor authenticationProvider documentationOfficial for this service
Facebook: recovering a hacked accountProvider documentationOfficial for this service

Status as of October 23, 2026. The material is informational and educational, not legal or financial advice. Reporting procedures, feature names in phones, and contact numbers for institutions may change, so check them on the official pages listed in the table before taking action. Reporting fraud does not guarantee money recovery. In case of danger, call 112 (Poland) or 911 (USA).

Was this guide helpful?

Help others – share your experience

Answer one question below. Your answer will help people in similar situations.

Have you ever received a call that seemed suspicious? How did you react and what did you do next?

Your response will be reviewed before publication.

Comments (0)

No comments yet. Be the first!


Add a comment

Log in to skip email verification, or comment as guest:

Comment may be moderated before publishing.