The call comes from your boss, and it sounds exactly like your boss. She needs a payment sent before lunch and she cannot talk long. The voice is right, the urgency is right, and the request is a little off. You would like to be helpful.
That is the scenario the FBI warned about in a May 2025 alert, and the fix costs nothing. This tip covers what the FBI said, and a two-part habit that works whether or not you can spot a fake voice.
What the FBI actually said
In a public service announcement dated May 15, 2025, the FBI reported that since April 2025, malicious actors had been impersonating senior US government officials using text messages and AI-generated voice messages. The goal was to get access to the victims' accounts and personal information.
The alert was about government targets. The method has no reason to stop there, because it only needs a voice sample and a believable story. A cloned voice of your owner, your spouse, or your kid works the same way.
Habit one: a safe word
The FBI's advice is to create a secret word or phrase with your family members to verify identities. Do the same at work for anyone who can approve money or access. Pick something random, not a pet name or a birthday that shows up on social media, and share it in person or through a channel you trust.
The word only works if you ask for it. If the caller gets annoyed that you asked, you have learned something.
Habit two: hang up and call back
The FBI also says to research the number, organization, or person before responding, and to contact them independently. In practice, that means ending the call and dialing the number you already have for that person. A real boss will wait two minutes. A scammer will lean on the urgency.
Make it a company policy
Any request to move money, change bank details, or reset access gets confirmed on a second channel, no matter who appears to be asking. Write it down and tell everyone, including the owner, that the rule applies to them too. It is much easier to follow a rule than to judge a voice.
The bigger lesson
You cannot reliably tell a good clone from a real voice by listening. The fix is a process that does not depend on your ears. We help clients build these approval rules into daily work as part of our managed IT services, so nobody has to be a lie detector.
A cloned voice can sound exactly like your owner. We help you build payment and access approval rules that do not depend on anyone's ears. No pressure, no obligation, just a straight look at your setup.
Book a 10-Minute Discovery Call →Frequently asked questions
Can AI really copy someone's voice?
The FBI's May 2025 alert says criminals have used AI-generated voice messages to impersonate senior US officials. Assume a voice you hear online, on voicemail, or in a video can be imitated.
What makes a good safe word?
Something random that cannot be found on social media, like a made-up phrase. Avoid pet names, street names, and birthdays. Agree on it in person and change it if you think it leaked.
What if the caller says it is an emergency?
Urgency is the tool. Ask for the safe word, or hang up and call back on a number you already have. A real emergency survives a two-minute delay.
Where do I report a scam like this?
You can file a report with the FBI's Internet Crime Complaint Center at ic3.gov. Report quickly if money moved, because time matters for recovery.
Can safemode IT set up approval rules for payments and access?
Yes. We help you write and enforce them alongside multi-factor authentication. See our managed IT services or ask for a free assessment.
Source: FBI IC3 Public Service Announcement PSA250515
Last updated: October 15, 2026
