"Grandma? It's me. I'm in trouble. I was in a car accident and the police arrested me. Please don't tell Mom, okay? My lawyer is going to talk to you." The voice is shaky and young and sounds just like him. Then a calm man takes the phone and starts talking about bail.
The grandparent scam has been around for years. What has changed is the voice. Scammers can now use AI tools to clone someone's voice from a short audio clip, often taken from videos posted online. The FBI warned in December 2024 that criminals generate short audio clips of a loved one's voice to pose as a relative in a crisis and ask for money.
Our take is that most advice on this gets the defense backwards. You'll read tips about listening for a robotic tone or odd pauses. Don't rely on your ears. A familiar voice is no longer proof of who is calling, so your family needs a check that doesn't depend on the voice at all.
How the family emergency call works today
The structure is old. The tools are new.
The call comes fast and emotional: an accident, an arrest, a hospital or a trip abroad gone wrong. The "grandchild" speaks only briefly, which happens to be exactly what a short cloned clip can handle. Then an authority figure takes over, a "lawyer", "public defender", "police officer" or "bail bondsman". The FTC says scammers use fake lawyers, police officers or doctors to make the story more convincing and more frightening.
Next comes secrecy. "Please don't tell Mom and Dad" isn't a detail, it's the mechanism. The FTC points out that keeping it secret stops you from checking the story with anyone else in the family.
Then the payment. The FTC lists wire transfers, cryptocurrency and gift cards as the ways these scammers ask to be paid. Increasingly, they send someone to your door. The FBI has warned that criminals posing as grandchildren, lawyers or bail bondsmen send couriers to collect cash from victims' homes, sometimes using unknowing rideshare drivers. Between January 2020 and June 2021 alone, the FBI's Internet Crime Complaint Center received over 650 reports of possible grandparent scams with losses above $13 million.
Why "listen for a fake voice" is weak advice
The FBI does suggest listening closely to tone and word choice to tell a real call from a cloned voice. That's worth knowing, but in practice it's the weakest line of defense, for three reasons.
- You're not listening calmly. Panic is the point of the call. Nobody analyzes audio while hearing that a grandchild is in a cell.
- Bad audio is part of the story. "I'm calling from the police station" or "my nose is broken from the airbag" explains away any strange sound.
- The scam doesn't even need AI. Grandparent scams worked for years before voice cloning, with a caller who simply cried and mumbled. Your brain fills in the rest.
So rank your defenses honestly. Calling the person back on a number you know comes first. A family safe word comes second. Your ear for a fake voice comes a distant third.
Defense #1: hang up and call back on a number you know
This is the FTC's core advice and it beats everything else. Don't trust the voice; call the person who supposedly contacted you on a number you already know is theirs. If they don't answer, call their parents, a sibling or a friend, even if the caller begged you not to.
- Say you'll call back. "I need to call you right back" is all it takes. A real relative will understand. A scammer will push harder.
- Hang up completely. Don't put the caller on hold while you dial someone else; use a second phone if you have one.
- Call the grandchild directly on the number saved in your phone, not the number that just called you.
- Call another family member if you can't reach them. One call to a parent or sibling is often enough to find out where the grandchild really is.
- If someone claims to be police or a court, look up that jail or court's number yourself and call it. Real bail goes through the court, the jail or a licensed bail agent, not to a courier at your door.
Caller ID won't help you here. Scammers can make a call look like it comes from any number, and the FBI specifically warns not to trust a familiar caller ID in these cases.
Defense #2: a family safe word
The FBI's first tip in its 2024 warning about AI-driven fraud was to create a secret word or phrase with your family to verify their identity. It's free, it takes five minutes and it works even if the cloned voice is perfect, because the scammer doesn't know the word.
Most families never set one up, or pick one that's too easy. Here's how to do it properly:
- Choose a word or short phrase that has never appeared online. Not a pet's name, a street, a school mascot or anything from social media.
- Agree on it in person or on a call you started, never by text or email that could be read later.
- Make sure every grandparent, parent and older child knows it, and that it's used for any call about money or an emergency.
- Use it as a question, not a hint. Ask "What's our word?" and wait. Don't say "Is it the one about the lake?"
- If someone can't give the word, hang up and call them back. A real emergency survives a two-minute delay.
- Change the word after it has been used in a real situation, or if you think someone outside the family heard it.
What to tell the grandparents in your family
| If the caller says | Do this |
|---|---|
| "It's me, I'm in trouble, don't tell anyone" | Ask for the safe word, then hang up and call them back on their own number |
| "I'm their lawyer and they need bail today" | Call the jail or court yourself using a number you looked up |
| "A courier will come by to pick up the cash" | Don't open the door. Call the police non-emergency line |
| "Buy gift cards and read me the numbers" | Stop. No court, lawyer or jail takes gift cards |
| "Don't hang up or they'll stay in jail" | Hang up anyway. The pressure is the proof |
One more thing worth discussing: how much of your family's voice is public. The FBI suggests limiting online content of your image or voice and making social media accounts private. You don't have to delete every video, but a public account full of clips of a teenager talking is easy material. Short calls matter too; our FAQ on answering a spam call and saying nothing looks at what really happens on those silent calls.
If money already changed hands
Shame keeps many victims quiet, and that helps the scammers. Report quickly:
- Call your bank or card issuer at the number on your card if you paid by transfer, card or payment app.
- If you bought gift cards, call the card company right away and keep the cards and receipts.
- If a courier picked up cash, call your local police, and describe the person and any vehicle.
- Report it to the FBI Internet Crime Complaint Center and to the FTC at ReportFraud.ftc.gov.
- Expect a second call asking for more money. Hang up without engaging.
The same pressure tactics show up in other scripts, too. Our guide to the fake jury duty warrant call shows how a "deputy" uses fear and secrecy in exactly the same way.
Grandparent scam questions
Is it illegal to use an AI voice in a call?
In February 2024 the FCC ruled that AI-generated voices count as "artificial" voices under the Telephone Consumer Protection Act, which puts AI voice robocalls under the same restrictions as other prerecorded calls. That helps against mass robocalls. It does little to stop a criminal making a live call from overseas.
How much audio does someone need to clone a voice?
The FTC and the FBI both describe scammers working from short clips, such as videos posted on social media. You can't control every recording, which is why the callback and the safe word matter more than hiding your voice.
What if the call really is an emergency?
Then a two-minute callback costs nothing. Hospitals, police and courts can all be reached through numbers you look up yourself, and a real relative will understand why you checked.
The bottom line
A voice used to be proof. It isn't anymore. The defense that works is not a better ear but a family habit: hang up, call back on a number you know and ask for the safe word before any money moves. Set the word up this week, while nobody is panicking.