How do AI voice cloning scams work? A fake kidnapping and a $243,000 call from a fake boss

Quick answer AI voice clone scams copy a real person's voice to push someone into paying. In 2023, Arizona mother Jennifer DeStefano told a US Senate subcommittee how a caller used what sounded like her daughter's voice to fake a kidnapping and demand ransom. In 2019, a UK energy firm's CEO sent €220,000 (about $243,000) after a cloned "boss" called.

What happened to Jennifer DeStefano?

It is a Friday afternoon, January 20. Jennifer DeStefano of Scottsdale, Arizona, is picking up her younger daughter, Aubrey, from dance rehearsal. Her husband is away with their older daughter, Briana, who is training for a ski race.¹

At about 4:53 p.m., her phone rings. Unknown number. She answers on the final ring, because unknown calls can be a hospital or a doctor.¹

It is Briana, sobbing. "Mom?" Then: "Mom, I messed up."¹

A man's voice barks at her daughter: "Lay down. Put your head back." Then Briana again: "Mom, these bad men have me. Help me, help me, help me."¹

A man takes over the call. He threatens to drug her daughter, hurt her and drop her in Mexico if DeStefano calls anyone.¹ Inside the dance studio, she screams for help. One mom runs outside and calls 911. Another starts trying to reach her husband.¹

The caller demands a million dollars. When she says that is impossible, he drops it to $50,000 in cash. She asks for wiring instructions. He refuses. Instead, she is told to get in a van with a bag over her head, carrying the cash, to be taken to her daughter.¹²

Then the second mom comes back. She has reached DeStefano's husband. He has found Briana resting safely in bed.¹ DeStefano does not believe it at first. She has just heard her daughter. Only after Briana herself gets on the phone, and reassures her again and again, does she accept that her daughter is safe.¹

It wasn't just her voice. It was her cries. It was her sobs.

Jennifer DeStefano, testimony to the Senate Judiciary Subcommittee on Human Rights and the Law, June 13, 2023

When she called the police afterwards, she was told it was a "prank call." No physical kidnapping had happened and no money had moved, so, as she put it, no actual crime had been committed.¹ She later learned her own mother had received a call using her brother's voice, claiming he had been in an accident and needed money for a hospital bill.¹ She told her story to the Senate Judiciary Committee's Subcommittee on Human Rights and the Law at a hearing on artificial intelligence and human rights on June 13, 2023.¹²

The $243,000 call from a fake boss

Four years earlier, the same trick hit a business. In March 2019, the CEO of a UK-based energy firm took a phone call from his boss, the chief executive of the firm's German parent company. Or so he thought.³

The caller asked him to send funds to a Hungarian supplier and said it was urgent: pay within an hour. The amount was €220,000, about $243,000. The details came from the company's insurer, Euler Hermes Group SA, as reported by the Wall Street Journal.³

"The software was able to imitate the voice, and not only the voice: the tonality, the punctuation, the German accent," a Euler Hermes spokesperson later told the Washington Post, as reported by The Verge.⁴ The CEO paid. The money was moved through accounts in Hungary and Mexico and spread around the world.⁴

It unraveled only when the thieves came back for more. After a second request, the CEO called his real boss and found himself handling calls from both the fake and the real versions of the man at the same time.⁴ Euler Hermes declined to name the energy firm or its parent.⁴

Why do voice clone scams work?

We rarely check who is on the line when we hear a voice we love or obey. DeStefano made exactly that point to senators: the sound of a loved one's voice is almost never verified.¹

The US Federal Trade Commission warned in March 2023 that a scammer "could use AI to clone the voice of your loved one." According to the FTC, all the scammer needs is a short audio clip of the family member's voice, which could come from content posted online, plus a voice-cloning program.⁵⁶

Both cases share the same shape: a trusted voice, a crisis, a deadline and a demand for money that is hard to trace or reverse. The kidnapper refused a wire transfer and wanted cash. The fake boss wanted payment within the hour. Pressure leaves no room for a second check, and that is the point.

One honest caveat: in neither case has the exact voice tool been made public. DeStefano told senators that her questions about how the callers got her daughter's voice were left unanswered, and Euler Hermes did not name the software. What the sources do establish is that the voices were convincing enough to fool a parent and a CEO.

What this means for your business

For a small brand, the risky call is rarely a kidnapping. It is "the founder" asking ops to pay a new supplier today, or "a partner" asking to change bank details. The FTC's advice works at work too:⁵

• Don't trust the voice. Hang up and call the person back on a number you already know is theirs. If you cannot reach them, check through someone else who can.
• Be wary of hard-to-reverse payments. The FTC flags requests to wire money, send cryptocurrency or buy gift cards as possible signs of a scam.
• Agree on a check in advance. Set a code word or a call-back rule for any money request, with your family and with your team. That is our suggestion, not part of the FTC alert, but it costs nothing.
• Make "urgent" slow you down. A real request survives a five-minute verification. A scam usually does not.

Video can be faked too. In the Arup deepfake CFO scam, a whole video call of colleagues turned out to be fake. And if AI agents are starting to touch your payments, read why the confirm button matters.

How ZNOS handles this

The way we run it, a voice on the phone is never what moves money. In ZNOS, each AI employee owns a job, such as Raghu on operations, Sophia as executive assistant and Jason on sales, and works from the company's live data through the Brain.

Autonomy is earned gradually. Routine decisions are handled, and risky ones (money, customers, anything published under your name, production changes) wait for a human approval. An Audit Log records who changed what.

The Brain watches orders, invoices and shipments around the clock and raises plain-English alerts in the app, by email or on WhatsApp when something looks wrong. On customer chats, the WhatsApp Business Agent hands off to a human and follows "never-say" phrases you set. You can meet the ZNOS team to see who owns which job, or browse more real AI incidents.