Alert: AI clones voices on WhatsApp to drain your account

Picture the scene: you receive a WhatsApp audio from your mother. Her distressed voice asks for urgent money for an emergency. Without thinking twice, you transfer the money. You've just fallen victim to one of the most sophisticated and devastating scams: AI voice cloning fraud.

What seems like something out of a science fiction movie is an alarming reality in Mexico in 2025. Scammers are using artificial intelligence (AI) to clone the voices of your loved ones, creating a near-perfect deception to steal your money. This method, known as Vishing (a combination of Voice and Phishing), exploits the strongest bond that exists: familial trust. A recent viral video showed precisely this case, where a young man received audio recordings from his "mother" asking for money, demonstrating that this threat is not theoretical but is already occurring.

Suggestion: Image of a phone with a WhatsApp chat open. In the chat, there's an audio recording from the contact "Mom" and a notification of a completed bank transfer. The background should be dark and create tension.

This type of fraud is a multi-step operation, designed to disarm all your psychological defenses.

• * Step 1: Account Takeover. Before they can contact you, criminals need control of the WhatsApp account of a close friend or family member. They accomplish this through various methods: sending a malicious link (malware), tricking the person into sharing their verification code, or even using more complex techniques to gain control of their phone line. Once they have control, they have access to all of their contacts, including you.
• * Step 2: Voice Cloning. This is where artificial intelligence comes in. Scammers only need a small sample of the person's voice: an old audio recording from the same WhatsApp chat, a video posted on Facebook or Instagram, or even a short recorded call. They use generative AI software that analyzes pitch, timbre, cadence, and accent, and in a matter of seconds can generate a completely new audio recording of whatever they want, but with the exact voice of your loved one.
• * Step 3: Contact and Emotional Pressure. Armed with the stolen account and the cloned voice, they execute the attack. They send you a voicemail from your relative's number. The combination is lethal: you receive a message from a trusted contact, with a voice you instantly recognize, in a supposed emergency situation (an accident, a robbery, a problem at the airport) that demands immediate action without questions. The urgency is designed to leave you with no time to think, only time to react out of protective instinct.
• * Step 4: The Deception and Disappearance. The victim, acting out of love and concern, makes the transfer to the account indicated. Once the scammers receive the money, they block the number or simply stop answering. By the time the victim manages to contact their relative by other means, the money has already disappeared and the damage is done.

Although CONDUSEF's most recent alerts have focused on impersonating financial institutions to offer fake loans, this AI-powered voice scam is the natural and most dangerous evolution of those tactics. The principle is the same: using a false identity to generate trust and obtain money. Therefore, the Commission's general recommendations remain vital: never make deposits to strangers under pressure and do not share personal or financial information.

"If you are a victim of this fraud, please report it. You can contact the Mexico City Cyber ​​Police at 55 5242 5100, extension 5086."

The Cyber ​​Police have also issued alerts about this type of fraud and emphasize the importance of prevention and reporting. If you are a victim or receive an attempted scam, it is crucial to report it to the authorities to help prevent more people from falling into the trap. You can contact the Mexico City Cyber ​​Police at 55 5242 5100, extension 5086.

The good news is that, despite the sophisticated nature of the attack, the defenses are surprisingly simple and effective. Implement these five steps today and share this information with your entire family.

• * Enable Two-Step Verification on WhatsApp (REQUIRED): It's the strongest barrier against account takeover. Go to Settings > Account > Two-Step Verification. Create a 6-digit PIN that only you know. Without this PIN, no one will be able to activate your WhatsApp on another phone, even if they have your chip or verification code.
• * Create a Family "Code Word": Agree on a secret word or question with your family that isn't obvious (e.g., "What was the name of Grandma's first dog?"). In a real emergency, they can use it to confirm their identity. If someone asks you for money and doesn't know the code word, it's a scam.
• * Be Wary of Urgency. Always Check Another Way: No matter how real the voice sounds or how desperate the situation seems, hang up or ignore the message. Immediately call your family member's number saved in your contacts. If they don't answer, try another way (calling their home, their partner, etc.). Never act under pressure.
• * Limit Your Public Voiceprint: Be aware of the audio and video content you post on social media platforms like TikTok, Instagram, or Facebook where your voice is clearly audible. The less material criminals have, the harder it will be for them to clone your voice.
• * Educate the Elderly and the Young: Share this article. Talk to your parents, grandparents, aunts, uncles, and even younger members of the family. Older adults are often the primary target because they are more trusting, but anyone can fall victim to panic. Prevention through information is the best defense.