# AI voice scams: hang up and call back on a number you know A call-back rule on a number you already have, a short card for older relatives, and an optional family phrase as an extra check, with the official 2025 advice behind it. Guides · v1.1 · draft · https://hayzlabs.com/guides/hang-up-and-call-back/ In short: - If a call says someone you know is in trouble or asks for money, hang up and call them back on a number you already have. - Do not pay while the caller is on the line, never read out a code sent by text, and tell a second person first. - Write the call-back card with your relative, save the numbers in their phone, and add a family phrase only as a second check. > [!NOT ADVICE] > This page is general safety information, not financial or legal advice. If money has already gone, contact your bank straight away and report it to your national fraud service. ## Short answer If a call or voice message says someone you know is in trouble, or asks you for money, hang up and call that person back on a number you already have. The FTC and the FBI both advise this. Do not pay while the caller is on the line, and never read out a code that arrives by text. A family phrase is an optional extra that the FBI advises, and we put it second, after the call-back. **Who this is for.** Anyone with an older relative, or who is one. It needs 15 minutes with your family and no tools. ## You cannot rely on your ear In a 2023 study of 529 listeners, people detected deepfake speech (a computer-made copy of a voice) 73% of the time in both English and Mandarin, and training helped only slightly. The first author, Kimberly Mai of UCL, said in the university's release: "Our findings confirm that humans are unable to reliably detect deepfake speech, whether or not they have received training." ([UCL news release](https://www.ucl.ac.uk/news/2023/aug/humans-unable-detect-over-quarter-deepfake-speech-samples), lab study, quote is a comment and not from the paper). A UK bank says voices can be cloned "from as little as three seconds of audio" ([Starling Bank, September 2024](https://www.starlingbank.com/news/starling-bank-launches-safe-phrases-campaign/), bank campaign). So the plan has to work even if the voice is perfect. ## Hang up and call back on a number you know > [!OUR RULE] > Any call or message that asks for money, a code or a secret, or says someone you know is in trouble, ends with you hanging up and calling the person back. The advice to call back is the FTC's and the FBI's. The wording, the order and the steps below are ours. The FTC advises calling the person back on a number you know is theirs, to check the story ([FTC, March 2023](https://consumer.ftc.gov/consumer-alerts/2023/03/scammers-use-ai-enhance-their-family-emergency-schemes), regulator guidance). The FBI advises verifying a caller by hanging up and calling a number you find yourself ([FBI PSA I-120324, 3 December 2024](https://www.ic3.gov/PSA/2024/PSA241203), government advice). The FBI also says: "Do not send money, gift cards, cryptocurrency, or other assets to people you do not know or have met only online or over the phone." In May 2025 it added: "Never provide a two-factor code to anyone over email, SMS/MMS text message or encrypted messaging application" ([FBI PSA, 15 May 2025](https://www.ic3.gov/PSA/2025/PSA250515)). Our additions: - Call back from your contacts list. Redial and a number the caller read out do not count. - If the caller says there is no time to call back, treat that as the reason to call back. - If you cannot reach the person, call someone else who would know, such as another relative or their workplace. The FTC also suggests trying another family member or their friends. - Tell a second person before you do anything else. Practise the rule on six illustrative messages before a real one arrives. ## Add a family phrase as a second check The FBI advises creating "a secret word or phrase with your family members to verify their identities" (PSA, 15 May 2025; the December 2024 notice says "to verify their identity"). Starling Bank also suggests a family Safe Phrase that no one else knows and that is never shared digitally. No study we have read tests whether a phrase helps. We put it second because the call-back works even if a relative forgets the phrase, and a phrase asked for on a call can be pulled out of someone who is frightened. If you use one: - Pick something nobody could guess from social media. The FBI also advises making social media accounts private. - Never send it by text or email. - Say it only when asked, and only by the person who is calling you. - Change it after any use. - If someone cannot recall it, fall back on the call-back. ## Set it up in 15 minutes 1. Sit down with the relative and read the card below together. 2. Make sure the numbers on the card are saved in their phone under names they recognise. 3. Choose a phrase together, if you want one. 4. Agree who they tell. Name a second person. 5. In a week or so, call them yourself and say it is a drill. See whether they hang up. Tell them afterwards that it was you. ```text title="Call-back card · v1.0" If a call or message says someone I know is in trouble, or asks for money: 1. Say: "I'll call you right back." Hang up. 2. Call on the number saved in my phone. 3. If I cannot reach them, call on . 4. Do not pay anyone while they are on the phone. No gift cards, crypto or transfers. 5. Never read out a code that arrives by text. 6. Tell before I do anything else. Our family phrase (if we have one) is kept . ``` Replace the following: - ``: the person the caller claims to be, or "them". - `` and ``: someone who would know where they are, and their number. - ``: the person to tell, such as `my daughter Elena`. - ``: where the phrase is written down, or `in our heads only`. Write the card on paper and keep it by the phone. > [!CHECK] > When you finish, ask your relative to tell you the main steps in their own words: hang up, call back on the saved number, tell a second person. If they cannot, go over the card again. If the reader needs larger print, simpler words or another language, an AI assistant such as ChatGPT can reshape the card. Do not paste real phone numbers or the phrase into a chat ([What not to paste](https://hayzlabs.com/start/what-not-to-paste/)). ```text title="Reshape the call-back card · v1.0" Below is a card of steps for a relative to follow if a scam call comes in. Rewrite it for . Keep every step and the order. Do not add steps, and do not remove any. Leave the words in square brackets as they are. --- ``` Replace the following: - ``: such as `a reader who prefers short sentences and large type`. - ``: the card, with names in square brackets such as `[daughter]` and no real numbers. Read the new card against the old one. Every step should still be there, in the same order. ## Limits > [!LIMIT] > No study tests the call-back rule or a family phrase, so both rest on regulator and government advice. The sources are US agencies and a UK bank, so where you report a scam depends on where you live, even though the call-back step does not. If money has already gone, contact your bank straight away and report it to your national fraud service. In the US that is the FTC and the FBI's IC3. ## Sources 1. FTC. Consumer alert on AI and family-emergency schemes, 2023. Regulator guidance. [Link](https://consumer.ftc.gov/consumer-alerts/2023/03/scammers-use-ai-enhance-their-family-emergency-schemes) 2. FBI. Public service announcement I-120324, 2024. Government advice. [Link](https://www.ic3.gov/PSA/2024/PSA241203) 3. FBI. Public service announcement on AI voice messages, 2025. Government advice. [Link](https://www.ic3.gov/PSA/2025/PSA250515) 4. Starling Bank. Safe Phrases campaign, 2024. Bank campaign and commissioned survey. [Link](https://www.starlingbank.com/news/starling-bank-launches-safe-phrases-campaign/) 5. UCL. News release on a deepfake speech listening study, 2023. Lab study. [Link](https://www.ucl.ac.uk/news/2023/aug/humans-unable-detect-over-quarter-deepfake-speech-samples)