← All posts

What to do if you sent money to an AI voice cloning scam

You heard their voice. That is what makes this one cut so deep. A grandchild crying, a son saying he had been in an accident, a daughter who sounded terrified and needed money now. You sent it. Then the real person picked up the phone, safe and a little confused, and the floor dropped out from under you.

If that is where you are right now, take a breath. The call used a cloned voice, built from a few seconds of audio pulled off social media or a spam call that got you to say “hello.” It sounded real because it was made to. Falling for it does not mean you were careless.

Here is what to do with the hours in front of you.

Start with how you paid

The payment method decides your next move, so begin there.

If you sent a bank wire, call your bank now and ask them to recall it. Wires can sometimes be pulled back while the receiving account still holds the money, and the first few hours are when that window is open. Use the word fraud, and ask them to flag the recall as urgent.

If you paid with gift cards, call the company that issued the card right away. The number is on the back of the card or on their website. Tell them the card was used in a scam, read them the card number, and ask them to freeze whatever balance is left. Apple and Google have both frozen and refunded cards when a victim called fast enough.

If you sent cryptocurrency, copy down the transaction hash and the wallet address you sent to before you do anything else. Crypto payments do not reverse, but they are traceable, and that record is the thread any later investigation pulls on.

Save everything before it disappears

Screenshot the call log with the time and the number that called you. Save any texts, the payment confirmation, and write down what the voice actually said while it is still fresh in your memory. Scammers reuse phone numbers and the same emergency script over and over, so those details feed the pattern files investigators build. Our guide to preserving evidence in the first 24 hours covers what to grab.

Report it where the patterns get worked

File with the FBI’s IC3.gov and with ReportFraud.ftc.gov. Neither will call you back about a single case, and that is normal. What they do is connect dots. AI-driven fraud is being counted now in a way it was not a year ago, with the FBI putting AI-related scam losses at $893 million over the past year. Your report is one more data point that turns a scattered scam into a worked case. If an older parent or grandparent was targeted, file a local police report too. A case number is sometimes what the bank’s fraud team needs before reviewing a refund.

Watch for the second scam

Within a day or two, you might get a message from someone who promises to get the money back for an upfront fee. Block them. These “recovery agents” work straight off victim lists, and the fee they ask for is the entire point. No real investigator wants crypto or gift cards to get started, and nobody honest will promise your money back. If the loss was small, your bank’s dispute team and the federal reports are the realistic path, and they do not cost you anything.

When it is worth bringing in help

Most cloned-voice losses are painful but small enough that the bank dispute and the reports above are the right response. When the number climbs into five or six figures, or you need a documented trail for a civil claim, forensic tracing can follow where the money actually moved. Our Investigation Help page covers the smaller-case work we sometimes take on, and for court-grade tracing we route to Rexxfield. None of it promises the money comes home. Every step you take in the first 48 hours just widens what stays possible.

One thing worth doing before you sleep tonight: pick a family safe word, a short phrase only your people know. The next call like this will sound just as real as the last one. A word the cloned voice has no way to produce is the simplest thing that stops it cold.

— Gus