How do I protect my parents from AI voice-clone scams?

As of 24 October 2026: the service descriptions, prices and turnaround figures on this page are current.

Why is voice recognition no longer a protection?

Because the model only needs a short sample. Indian casework in 2026 already shows an AI voice clone of a managing director authorising a Rs 10 crore transfer, and roughly 30 seconds of clear audio is enough to build a convincing clone. That changes the family assumption completely: you can no longer rely on recognising a voice, because a synthetic voice can be built from your own social media, from a conference call recording, or from a short video. The only remaining human signal is not the voice itself but the situation: who is calling, what are they asking for, and has the request come through a channel the caller did not initiate.

What family protocol should I set up?

Four rules, agreed in one sitting and written down somewhere everyone can find. First, a password phrase, something slightly odd and specific to your family, that is never spoken in any call and never shared with any bank or official. Second, no financial decision in an incoming call, with no exceptions, and the person on the call is expected to hang up and call back. Third, the callback rule: any urgent request is verified by calling the person back on a number the family already holds, never a number supplied in the message or the call. Fourth, a second-pair-of-eyes rule, where any transfer over a threshold agreed by the family requires two people to confirm. This takes an hour to set up and it is the single most effective control for this fraud type.

What should I set up on the bank side?

Four bank-side controls, and they are free to request. A per-transaction and daily transaction limit on the account, which caps the damage regardless of how convincing the caller is. A cooling-off or cooling-period on the addition of a new payee, so a fraudster who adds a beneficiary cannot be paid immediately. A requirement for in-app or channel-based confirmation for high-value transactions rather than an OTP-driven approval. And a registered mobile number and email on the account, so the bank can alert you and your parent on the same channel when something changes. For a parent who is not comfortable with apps, ask the bank for a relationship manager, because the branch staff who know the family are themselves a control when a voice-cloned call is made.

What if the scam has already succeeded?

Act in the same hour, in the same order as any other fraud. Call the bank's fraud helpline and ask them to flag the beneficiary and request reversal. File on cybercrime.gov.in and call helpline 1930, because the report number is required for restitution. Then secure the account, because a fraud that succeeded once is often followed by an attempt to move a larger sum, and the attacker's follow-up call will be more convincing. Keep the call recording, the SMS and the transaction reference. Under RBI's June 2026 instructions effective 1 January 2027, a genuine individual victim with a gross loss up to Rs 50,000 may be compensated at 85% of net loss or Rs 25,000, whichever is less, provided the fraud is reported to the bank and to the NCRP or 1930 within five calendar days.

What are the frequently asked questions?