In May 2025 the FBI's Internet Crime Complaint Center issued an alert about AI-generated voice and text messages impersonating senior United States officials, sent to current and former government personnel and their contacts. The technique is not exotic and does not require much source material — a few seconds of public audio is now sufficient for a usable clone.
The consumer version arrives as a phone call, and it is the most effective social engineering attack currently in circulation.
A voice you recognize. Your daughter, your son, your grandchild. Crying, frightened, saying they have been in an accident or have been arrested. Then another voice takes the phone — a lawyer, a police officer, a doctor — and explains what must happen now, and how much it costs, and that you must not tell anyone else in the family because it will make things worse.
The reason this works on people who know the scam exists is physiological, and it needs to be stated without condescension.
Hearing a loved one in distress produces an immediate threat response. Attention narrows to the threat. Deliberative capacity — the faculty you would need to notice that the voice is slightly wrong, that the story does not cohere, that the payment method is strange — is precisely what acute arousal degrades. The call is structured to keep you in that state: continuous speech, no pauses, urgency, and an instruction not to hang up.
Secrecy is doing specific work. It removes the one intervention that ends the attack, which is talking to someone else.
The detection protocol is a single physical action and it should be a rule rather than a decision: hang up and call back on a number you already have.
Not the number that called. Not a number given to you during the call. The number in your own phone. If they do not answer, call someone else in the family. Take the sixty seconds — no genuine emergency is made worse by a callback, and the caller's reaction to the proposal is itself diagnostic.
The counter-response, and it costs one conversation to set up, is a family safe word. A word or phrase agreed in advance, not derivable from anything public, that anyone claiming an emergency must supply. It works because it requires knowledge that cannot be synthesized from audio, and it converts an assessment under stress into a binary check.
Agree it with elderly relatives specifically, and tell them plainly that if anyone tells them not to call another family member, that instruction is the tell.
Report to IC3. Payment by gift card, wire, or cryptocurrency is close to irreversible, which is why it is requested.
This counters Law 9.