How to Spot an AI Scam Before You Respond

Scammers now use software that can copy a voice from a short clip, write polished messages without typos and make convincing photos. That sounds frightening, but you do not have to out-hear the technology. The best defenses are habits, and they work whether or not the fake is good.

The one idea behind every scam

Nearly every scam, old or new, does the same thing: it creates urgency and secrecy so you act before you think. “Your grandson is in jail.” “Your account is locked.” “Don’t tell anyone.” The AI part only makes the story sound more believable.

So the plan is simple. When something asks for money, a code, a password or fast action, you stop, step out of the conversation, and check through a way you already trust.

Step 1: Learn the common shapes

Here are the stories you will most often see.

• The family emergency call. A voice that sounds like your child, grandchild or spouse says they are in trouble and need money now, often by wire, gift cards, cash apps or crypto.
• The boss or coworker request. A message or voice note from “your manager” asks you to buy gift cards or change payment details.
• The bank or government alert. A call or text says your account is compromised, or that you owe money, and asks you to “verify” a code or move funds to a “safe account.”
• The online friend. Someone you met online is warm and attentive, then suggests a special investment or needs help with a one-time cost.
• The fake delivery or toll text. A link to “fix” an address or pay a small fee, which leads to a page that collects card details.

Real organizations do sometimes contact you. What matters is what they ask for, and how they push.

Step 2: Know the warning signs

Any one of these is reason to pause:

• You are told to act right now
• You are told not to tell anyone
• You are asked to pay by gift card, wire, crypto or cash app
• You are asked to read out a one-time code that was just texted to you
• The contact comes from a new number or account
• The message is oddly polished and very emotional at the same time
• They discourage you from hanging up and calling back

A real bank, employer or relative will not mind if you hang up and call back.

Step 3: Use the pause-and-verify routine

Practice these four moves until they are automatic.

1. Pause. Take a breath. Say, “I’ll call you right back.” You are allowed to hang up.
2. Leave the channel. Do not use the number, link or reply button you were given.
3. Verify on a known channel. Call the person on the number saved in your phone. Call your bank using the number on the back of your card. Type a company’s web address into your browser yourself.
4. Ask someone. Tell a friend or family member what happened. Scammers rely on you keeping it secret.

Step 4: Set a family code word

A code word is a simple defense against voice cloning. It takes five minutes.

1. Choose a word or short phrase that is not guessable and not on social media. Avoid pet names and birthdays.
2. Share it in person or on a private call with the people who might need to prove it is them: parents, adult children, a close friend.
3. Agree the rule: if someone asks for money or help in an emergency, they say the word. No word, no money, even if the voice sounds perfect.
4. Agree on a backup: you will always call back on a number you already have.

Change the word if it is ever said where others could hear.

Step 5: Tighten your accounts

A few settings make you a harder target.

• Turn on two-step verification for email, banking and social accounts, and never read a code to anyone who contacts you.
• Use a password manager and a different password for every important account.
• Set your phone to silence unknown callers or filter spam calls.
• Make your social profiles private if you can, since scammers pull names, family links and voices from public posts.
• Consider a credit freeze for an extra layer. It is free, and you can lift it when you need to.

Step 6: Know what to do if you slipped

It happens to careful people. If you sent money or shared a code:

1. Call your bank or card company right away and ask whether the payment can be stopped. Speed matters.
2. Change passwords on any account you gave access to, starting with email.
3. Report it to the FTC at reportfraud.ftc.gov and to your local police.
4. Tell someone you trust. Shame keeps people quiet, and scammers count on that.

Be careful with anyone who contacts you offering to “recover” your lost money for a fee. That is often a second scam.

What this won’t do

These habits will not make you scam-proof, and no tool can reliably tell you whether a voice, photo or video is fake. Detection apps can be wrong in both directions. The habits above work because they do not depend on spotting the fake, only on checking through a channel you control.

A next step

Tonight, pick a code word and tell one person. Then, for the rest of the week, practice saying, “I’ll call you back.” If you want a ready-made way to set this up with the whole family, the Family Code Word Kit walks you through it, and Spotting AI Fakes covers voices, photos and messages in more depth.