// Published 2026 • 7 min read • Security
It’s a Tuesday afternoon. Your phone rings — it’s your son’s number. His voice, clearly distressed: “Mum, I’ve had an accident. I need you to transfer $2,000 right now — don’t tell anyone, I’m so embarrassed.” You recognise the voice completely. It sounds exactly like him.
Except it isn’t him. It’s a computer that listened to thirty seconds of his voice from an Instagram video and built a near-perfect replica in minutes.
This is happening in New Zealand right now. It happened to a woman in Christchurch in late 2025. It happened to a retired couple in Hawke’s Bay who lost $4,700 before their daughter called back on a different number. The technology exists, it’s cheap, and the scammers using it are organised and patient.
How they do it — in plain English
You don’t need a lab or expensive equipment to clone someone’s voice in 2026. There are tools available online that can produce a convincing replica from as little as 15 seconds of audio. Your son’s TikTok. Your daughter’s Facebook reel. A voicemail greeting. A YouTube video. That’s all it takes.
The scammers usually target older family members — grandparents, parents — calling about a grandchild or child in “trouble.” They pick scenarios that make you panic first and think second: a car accident, an arrest, a medical emergency. They tell you not to call anyone else. That secrecy is deliberate — it’s the thing that stops you from making the one phone call that would end the scam immediately.
The telltale signs — if you’re calm enough to notice them
That’s the cruel part: these scams are designed to prevent you from thinking clearly. But knowing the pattern ahead of time makes a difference.
Immediate pressure
They need money right now. No time to think. Every minute you hesitate, the urgency escalates. Real emergencies rarely have a two-minute money transfer deadline.
Forced secrecy
“Don’t tell Mum,” “don’t call the police,” “I’m too embarrassed.” They know one call to anyone else ends it. The secrecy is the scam.
Unverifiable transfer
They want bank transfer, crypto, or gift cards — never something reversible. The moment money moves via bank transfer, it’s usually gone.
Caller ID means nothing
The number on your screen can be spoofed to show any number, including your family member’s real number. Seeing their name does not mean it is them.
The one thing that actually works: a family safe word
Security researchers and fraud investigators are increasingly recommending this, and it’s simple: agree on a word or phrase with your family that only you know. Something random that would never come up naturally — not a pet’s name or a street you lived on, because those are guessable.
// The family safe word protocol
Pick a word right now — tonight, at dinner, on your family group chat. Something like tangerine or flagpole. If anyone in the family calls in an emergency, they say the word. No word, no money moves. The scammer can’t guess it and the AI can’t produce it unprompted. Simple, free, effective.
The second line of defence is simpler still: hang up and call them back on the number you already have saved. Not the number that called you — their actual number from your contacts. If they’re fine, great, you wasted thirty seconds. If they’re not, you’ll know immediately. The scammer cannot intercept that return call.
What to do if you think you’ve received one of these calls
- Don’t transfer anything until you’ve verified independently. Every minute of delay works in your favour.
- Hang up and call the person directly using the number already in your phone.
- Contact your bank immediately if money has already moved — the sooner you call, the better the chance of recovery.
- Report it to Netsafe (0508 638 723) — they track these scams and the information helps protect others.
- Tell your family — the best protection is everyone knowing this exists.
The uncomfortable truth about 2026
The voice cloning technology used in these scams is the same technology behind legitimate products — voice assistants, audiobook narration tools, accessibility software. It’s not going away, and it will get harder to detect, not easier. The audio quality is already good enough to fool most people, and within the next year or two the real-time conversation fidelity will be near-indistinguishable from a live call.
What this means is that trust can no longer be based on recognising someone’s voice alone. That’s a genuinely strange thing to say — voice has been one of our most reliable identity signals for our entire lives. But the safe word, the callback rule, and healthy scepticism about unsolicited urgency are the practical responses to that shift.
Share this with your parents. Read it at dinner. It takes about two minutes to agree on a family safe word, and that two minutes is the difference between a story you tell later and one you don’t.
// About Sudo Fix
Sudo Fix is a local IT support service based in Rakaia, Mid Canterbury. If you’d like to talk through how to better protect yourself or your family online — whether that’s device security, scam awareness, or account hardening — get in touch. Plain English, no jargon.