A video call shows your manager. A phone call sounds like your grandson. Both ask for money or a code, and both may be fake. Deepfakes and identity fraud now meet in ordinary scams, not only in political clips. A likeness is cheap. A callback on a number you already trust still works.
What a deepfake is, and what it is not
A deepfake is audio, an image, or a video that AI made or altered so it looks or sounds like a real person. Three forms show up in fraud. One is a cloned voice. Another is a face swap or synthetic video. A third is a fabricated ID photo or social profile.
The Federal Trade Commission says a scammer needs only a short audio clip, which may come from content posted online, plus a voice-cloning program. That is enough to place a call that sounds like someone you know. A blurry clip is not proof of a fake. A perfect face is not proof the person is real.
How deepfakes show up in identity fraud
The familiar pattern is a family emergency. A panicked voice says a relative wrecked a car or landed in jail. Then the caller pushes a wire transfer, cryptocurrency, or gift cards. The FTC flags those payment types as scam signs and tells you not to trust the voice.
Work requests follow the same logic. Someone who looks like an executive, a support agent, or an official asks for a password reset, a payroll change, or a rushed payment. The FBI says scammers pair pressure with fake social profiles, voice clones, identification documents, and believable videos of public figures or loved ones.
Identity fraud is wider than one call. Synthetic faces and documents can be used to open accounts or pass a remote check. Fake profiles build trust before the payment ask.
Scale matters, and so does precision. In its 2025 Internet Crime Report, the first with a section on artificial intelligence, the FBI’s Internet Crime Complaint Center logged 22,364 AI-related complaints and nearly $893 million in reported losses. Total reported losses from cyber-enabled crime were nearly $21 billion. Those AI complaints include more than deepfakes. They still show that synthetic media is now part of reported fraud, not a side curiosity.
How to check a person before you act
Do not trust the voice. That is the FTC’s rule. Hang up and call the person on a number you already have. Use the same habit at work. Confirm a payment or an access change by a known phone number or in person. Do not settle it by replying on the same call or chat.
Pressure often outlasts a convincing fake. Watch for secrecy, urgency, a new payment method, and a request not to tell anyone else. Quiz questions are a weak backup. A parent’s name may already be public, and a correct guess teaches the caller nothing useful while a wrong one still hands over data. A family code set in advance, offline, plus a callback, is stronger.
Odd phrasing, a metallic echo, or a face that does not match the speech can be clues. They fail often. Verification beats detection.
What to do if a deepfake targets you
Stop the transfer first. Call the bank, card issuer, wire service, crypto platform, or gift-card seller and ask whether a recall or a freeze is still possible.
Save the evidence. Keep original files, screenshots, phone numbers, emails, usernames, URLs, dates, amounts, and the destination of the money. The FBI asks for the claimed name, how the person contacted you, the dates, the payment methods, and a description of what happened.
Report the attempt even if no money moved. Use ReportFraud.ftc.gov and ic3.gov. If someone is in immediate danger, call local emergency services. Then warn the person who was impersonated. Tighten what is public: private social accounts, fewer voice and face clips, and unique passwords with multifactor authentication on email and financial accounts.
One follow-on scam is worth naming. The IC3 says it does not work with outside firms to recover funds, and it will not contact you to demand money or information.
FAQ
Can a deepfake really sound like my relative?
Yes. The FTC says a short online clip and a cloning program can produce a call that sounds like that person.
If I recognize the voice, is the emergency real?
Not by itself. Call back on a number you already trust before you pay.
Are deepfakes the same as all identity theft?
No. Identity fraud also uses stolen data and fake documents. A deepfake is one tool for impersonation and for fooling a remote check.
Should I report an attempt that cost nothing?
Yes. The FTC and the IC3 both take reports that help map the pattern.
Can someone recover the money?
Sometimes, if you alert the payment provider quickly. A recovery service that contacts you first and asks for a fee is not a safe path.
A likeness is not a credential
Deepfakes and identity fraud succeed when a familiar face or voice replaces a real check. Likeness is cheap. A callback on a known channel is the control that still works. Set that habit with family and with anyone who can move money at work. Then pause, as the FBI’s “Take a Beat” advice puts it, before money or personal data leaves your hands. Report the attempt so the next target is easier to spot.
