Imagine answering the phone and hearing your son, your mother, or your closest friend say they are in trouble and need money right now. In that moment, most people do not pause to inspect the voice because it sounds familiar, it carries the same rhythm, and it arrives wrapped in panic, and that emotional pressure is exactly what gives the scam its power. Voice-cloning fraud works by turning artificial intelligence into an impersonation tool, and Colombia is already seeing this method spread as criminals use cheap and widely available software to trick families across the country.
The deception begins with a very small raw material: a few seconds of real audio. Criminals pull those clips from WhatsApp statuses, Instagram videos, TikTok posts, Facebook content, or earlier phone recordings, and then feed them into a model that learns how a person sounds, including tone, cadence, and emphasis.
Once the software builds that vocal copy, the scammer can make the fake voice say almost anything, which allows the call to sound personal enough to lower defenses before the victim has time to think clearly.
Voice cloning scam: why it spreads and why it works
The scam usually follows the same emotional script. First comes an emergency, often a kidnapping, an accident, an arrest, or a medical crisis, and then comes the demand to act immediately, usually by sending money, keeping silent, or following unusual instructions that cut the victim off from any calm verification.
That sequence works because urgency narrows attention, and once fear takes over, people start reacting to the relationship they think they hear rather than to the warning signs in front of them.
Colombia gives this kind of fraud fertile ground because voice messages form part of daily life and personal audio circulates constantly across public and semi-public platforms. Analysts and local reporting have also noted spikes during high-spending seasons such as December, when families are more likely to expect urgent financial requests and criminal networks intensify their activity.
Colombia has already responded in legal terms as well, because Law 2502 of 2025 added an aggravating factor for identity fraud committed with artificial intelligence, which shows that the country recognizes AI impersonation as more than a novelty and already treats it as a specific criminal threat.
What makes the scam even more dangerous is that human intuition no longer offers much protection. Hany Farid, a UC Berkeley professor who studies digital deception, has warned that trying to decide by ear whether a voice sounds real is no longer a reliable defense, because current tools reproduce speech convincingly enough to fool even people who know the real speaker well. In other words, the smartest response is not trusting your ears more, but trusting the verification process more.
How to protect yourself
The most effective protection begins before any suspicious call arrives. Families and close friends should agree on a private code word or phrase, something easy to remember and impossible to guess from social media, so that anyone claiming to be in an emergency must prove identity before the conversation goes any further. That simple step cuts through the emotional trap, because a cloned voice can copy sound, but it cannot guess a secret that only a few people know.
Once a call comes in, the safest move is to slow everything down. Hang up, call the real person back on a number you already know, send a message through another channel, or contact someone nearby who can confirm where that person actually is, and if the caller pushes secrecy, speed or unusual payment methods such as cryptocurrency, money wire, or gift cards, treat that pressure itself as a warning sign. It also helps to limit how much voice content you share publicly, especially long and clear recordings, because every extra sample makes a criminal’s job easier.
Finally, if one of these calls reaches you, save the number, keep the audio if possible, and report the attempt. Colombia already has a stronger legal basis to pursue AI-based impersonation, but enforcement improves only when victims and witnesses preserve evidence instead of deleting it in anger or embarrassment. The point is not to live in fear of every familiar voice, but to understand that trust now needs one more layer, and in the age of voice cloning, that extra layer is verification.