How do I protect my parents from AI voice-clone scams in India?
Key takeaways
- A voice clone needs roughly 30 seconds of clear audio, and Indian casework in 2026 already shows a cloned voice used to authorise a transfer of Rs 10 crore.
- Agree a family password phrase that no relative, colleague or bank agent knows, and use it to verify any urgent request before acting.
- The single most effective rule is that no financial decision is ever taken during an incoming call, whatever the urgency claimed.
- Call back on a number the family already had before the call, never on a number supplied in the message or the call itself, because that defeats the whole attack.
- Ask the bank for a per-transaction limit, a cooling-off period on new payees and alerts to a second registered contact, all of which are free to request.
As of 24 October 2026: the service descriptions, prices and turnaround figures on this page are current.
Why can I no longer rely on recognising my parent's voice?
Because the model only needs a short sample of clean audio, and Indian casework in 2026 already shows an AI voice clone of a managing director used to authorise a transfer of Rs 10 crore. Roughly 30 seconds of clear speech is enough to build a convincing clone, and that audio can come from your parents' own social media, from a recorded family call, or from a video they posted. The practical consequence is that the human signal you can still trust is not the voice but the situation: who is calling, what exactly are they asking for, and did the request arrive through a channel the caller did not initiate. Once you accept that, the rules below stop feeling like paranoia.
What should the one-hour family protocol contain?
Four rules, agreed in one sitting and written down where everyone can find them. First, a password phrase: something slightly odd and specific to your family, never spoken in any call and never given to a bank, an agent or a supposed official. Second, no financial decision in an incoming call, with no exceptions, and the person on the call is expected to hang up and call back. Third, the callback rule: any urgent request is verified by calling the person back on a number the family already held, never on a number supplied in the message or on the call. Fourth, a two-person rule, where any transfer above a threshold you agree in advance needs two family members to confirm. Set the threshold against your parents' actual money, not an abstract number, and put the whole protocol on paper.
Which bank-side controls should I request for my parents?
Four, and all are free to ask for. A per-transaction and daily limit on the account, which caps the damage however convincing the caller is. A cooling-off period on adding a new payee, so a fraudster who inserts a beneficiary cannot be paid immediately. Channel-based confirmation for high-value transactions rather than a one-time PIN approval, so an OTP read aloud on a call does not complete the payment. And alerts to a second registered contact, so a transaction in Kochi reaches you in the same minute it happens. For a parent who is not comfortable with apps, ask the bank for a relationship manager, because branch staff who know the family are a control in their own right when a cloned voice calls.
What if my parent has already paid a cloned-voice scammer?
Act in the same hour, in this order. Call the bank's fraud helpline and ask them to flag the beneficiary and request a reversal, and ask for a temporary freeze on new payees. File on cybercrime.gov.in and call helpline 1930, because the report number is required for restitution. Under RBI's June 2026 instructions, effective 1 January 2027, a genuine individual victim with a gross loss up to Rs 50,000 may be compensated at 85% of net loss or Rs 25,000, whichever is less, provided the fraud is reported to the bank and to the NCRP or helpline 1930 within five calendar days. Then secure the account, because a fraud that succeeded once is usually followed by an attempt at a larger sum, and keep the call recording.
| Control | Who sets it up | What it stops |
|---|---|---|
| Family password phrase | The family, in one sitting | A cloned voice asking for money or a code |
| No financial decision in an incoming call | The family | The whole call-based fraud pattern |
| Callback on a number already held | The family | A spoofed or cloned caller identity |
| Two-person confirmation above a threshold | The family | Single-impulse transfers of any size |
| Transaction limit and payee cooling-off | The bank | The size of any successful fraud |
| Alerts to a second registered contact | The bank | Delayed detection of a drained account |
What are the frequently asked questions?
Get a straight answer on this
Call +91 98473 40580 and we will run a one-hour family anti-fraud session online, and send you the written protocol to keep.
Send us the details See pricing